{"id":13889,"date":"2026-06-11T12:06:39","date_gmt":"2026-06-11T10:06:39","guid":{"rendered":"https:\/\/actonic.de\/?p=13889"},"modified":"2026-06-23T13:39:17","modified_gmt":"2026-06-23T11:39:17","slug":"api-keys-and-secrets-in-jira-finding-the-tokens-hiding-in-your-tickets","status":"publish","type":"post","link":"https:\/\/actonic.de\/en\/api-keys-and-secrets-in-jira-finding-the-tokens-hiding-in-your-tickets\/","title":{"rendered":"API keys and secrets in Jira: finding the tokens hiding in your tickets"},"content":{"rendered":"<div class=\"wpb-content-wrapper\"><p>Secret scanning has become standard practice in source code \u2014 most teams now block an AWS key or a private token before it ever reaches a repository. Jira is the gap nobody closed. The same engineers who would never commit a secret to Git will happily paste a Postman screenshot showing a bearer token, attach a log file with an API key in a query string, or drop a Terraform variables file onto a ticket so a teammate can reproduce a deployment. The secret never touches your code-scanning pipeline, because it&#8217;s sitting in an issue tracker instead.<\/p>\n<p>If you&#8217;re looking for a way to find secrets in Jira, the challenge is the same one that makes credential leaks so persistent: the highest-risk material is inside attachments, and attachments are exactly what your other tools don&#8217;t read.<\/p>\n<p>[vc_row][vc_column][vc_column_text]<\/p>\n<h2>Where secrets accumulate in an issue tracker<\/h2>\n<p>The patterns are predictable once you look for them. Log files attached to bug reports routinely contain tokens in request URLs or headers. Screenshots of API clients \u2014 Postman, Insomnia, a browser&#8217;s network tab \u2014 show authorization headers in full. Infrastructure-as-code snippets and <code>.env<\/code> files get attached &#8220;just to share the setup.&#8221; CI\/CD output pasted as a text file includes the variables that were echoed during a failed run. Each is a legitimate part of getting work done, and each can carry a live key that grants access to cloud accounts, payment processors, or third-party APIs.<\/p>\n<p>Unlike a password tied to one account, a leaked API key often has broad, programmatic access and a long life. It&#8217;s the kind of secret that turns a forgotten attachment into a real incident.<\/p>\n<p>[\/vc_column_text][\/vc_column][\/vc_row]<\/p>\n<p>[vc_row][vc_column][vc_column_text]<\/p>\n<h2>Why code-style secret scanning misses Jira<\/h2>\n<p>Source-code secret scanners watch commits and pull requests. They have no visibility into Jira, and Jira&#8217;s own search indexes fields and comments, not the contents of attached files. So a token inside an attached log or a screenshot is invisible to a JQL query, invisible to your repo scanner, and invisible to a malware scan \u2014 because a log file or a PNG isn&#8217;t malicious, it just happens to contain a secret. The result is a category of leak that your most mature control simply doesn&#8217;t cover.<\/p>\n<p>[\/vc_column_text][\/vc_column][\/vc_row]<\/p>\n<p>[vc_row][vc_column][vc_column_text]<\/p>\n<h2>Detecting secrets with patterns you control<\/h2>\n<p>Attachment Scanner for Jira reads the contents of attachments and reports where your patterns match \u2014 across images, scanned and text-layer PDFs, Office files, CSV, and plain text, with OCR for anything that isn&#8217;t already machine-readable. Because secrets tend to follow recognisable shapes, this is where regular expressions earn their keep. You can write patterns for the prefixes and formats your stack uses \u2014 keys that begin with a known vendor prefix, long high-entropy strings of a fixed length, <code>Authorization: Bearer<\/code> headers, or the <code>aws_secret_access_key<\/code> assignment in a config file. For the simpler cases, literal keywords like <code>api_key<\/code>, <code>token<\/code>, <code>client_secret<\/code>, and <code>private_key<\/code> are often enough to surface the obvious offenders.<\/p>\n<p>You decide the scope with JQL \u2014 a single noisy project, all issues with attachments, or a date range since your last review \u2014 and the app reads every matching file. Because there&#8217;s no shipped rule catalogue, the patterns are exactly the ones you choose, which is what lets you tune for your own key formats instead of fighting someone else&#8217;s generic rules.<\/p>\n<p>[\/vc_column_text][\/vc_column][\/vc_row]<\/p>\n<p>[vc_row][vc_column][vc_column_text]<\/p>\n<h2>From match to triage<\/h2>\n<p>Secrets demand fast judgement, and the results view is built for it. Each hit shows the issue key, the file, whether it came from OCR or direct extraction, the matched string, and surrounding context \u2014 so you can tell a real <code>sk_live<\/code> key from documentation that merely mentions one. The statistics dashboard aggregates across scans: your most-matched patterns, the projects and work items with the most hits, and the OCR-versus-direct split, so you learn where in your Jira secrets tend to pile up and can aim future scans accordingly.<\/p>\n<p>[\/vc_column_text][\/vc_column][\/vc_row]<\/p>\n<p>[vc_row][vc_column][vc_column_text]<\/p>\n<h2>Remediate in Jira, rotate everywhere else<\/h2>\n<p>When you&#8217;ve confirmed a leaked secret, bulk-select the matches and delete the offending attachments \u2014 an explicit, admin-confirmed action that&#8217;s recorded in the audit log, with no automatic deletion. As with any exposed credential, deleting the file closes the exposure in Jira but does not invalidate the key. Treat any secret that has lived in a ticket as compromised: rotate or revoke it first, then remove the attachment. Discovery and cleanup happen in the app; revocation happens in your cloud and vendor consoles.<\/p>\n<p>[\/vc_column_text][\/vc_column][\/vc_row]<\/p>\n<p>[vc_row][vc_column][vc_column_text]<\/p>\n<h2>The privacy model \u2014 and why it matters for secrets<\/h2>\n<p>Sending files full of live secrets to a third-party AI service to &#8220;scan&#8221; them would simply move the risk. Attachment Scanner avoids that by design: OCR runs on dedicated EU\/EEA GPU hardware managed by Actonic, with no public AI service involved. Attachments are processed in memory and discarded; only matched snippets are stored, in Atlassian&#8217;s Forge storage, isolated per site, with nothing kept on Actonic servers. Uninstalling removes everything. It&#8217;s an honest fit for security teams who can&#8217;t have sensitive material leaving to an external model.<\/p>\n<p>[\/vc_column_text][\/vc_column][\/vc_row]<\/p>\n<p>[vc_row][vc_column][vc_column_text]<\/p>\n<h2>Knowing the limits<\/h2>\n<p>To set expectations: this is on-demand scanning, not write-time prevention \u2014 it finds secrets that are already in Jira rather than blocking them at upload, so pair it with developer hygiene and code-side controls. It&#8217;s Jira Cloud only for now, with no Data Center or Confluence support, and the per-file size caps are 50 MB for PDFs and 20 MB for images. Within that scope, it reads the attachments your other secret-scanning tools never open. You can <a href=\"https:\/\/marketplace.atlassian.com\/apps\/3518501310\/attachment-scanner-ocr-pii-password-detection-for-jira\">start a free 30-day trial<\/a> from the Atlassian Marketplace and run your first regex patterns against your own data using the monthly evaluation credits.<\/p>\n<p>[\/vc_column_text][\/vc_column][\/vc_row]<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>Secret scanning has become standard practice in source code \u2014 most teams now block an AWS key or a private token before it ever reaches a repository. Jira is the gap nobody closed. The same engineers who would never commit a secret to Git will happily paste a Postman screenshot showing a bearer token, attach\u2026<\/p>\n","protected":false},"author":35,"featured_media":13890,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[238],"tags":[],"class_list":["post-13889","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-articles-data-security"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.9 (Yoast SEO v28.1) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>API keys and secrets in Jira: finding the tokens hiding in your tickets - Actonic \u2013 Unfolding your potential<\/title>\n<meta name=\"description\" content=\"Engineers scan Git for secrets but forget Jira. Bearer tokens and API keys end up in screenshots and logs. Learn how to find secrets hiding in Jira tickets.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/actonic.de\/en\/api-keys-and-secrets-in-jira-finding-the-tokens-hiding-in-your-tickets\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"API keys and secrets in Jira: finding the tokens hiding in your tickets\" \/>\n<meta property=\"og:description\" content=\"Engineers scan Git for secrets but forget Jira. Bearer tokens and API keys end up in screenshots and logs. Learn how to find secrets hiding in Jira tickets.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/actonic.de\/en\/api-keys-and-secrets-in-jira-finding-the-tokens-hiding-in-your-tickets\/\" \/>\n<meta property=\"og:site_name\" content=\"Actonic \u2013 Unfolding your potential\" \/>\n<meta property=\"article:published_time\" content=\"2026-06-11T10:06:39+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-06-23T11:39:17+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/actonic.de\/wp-content\/uploads\/2026\/06\/article2_api_keys_secrets-1.png\" \/>\n\t<meta property=\"og:image:width\" content=\"680\" \/>\n\t<meta property=\"og:image:height\" content=\"298\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Zhenya Elfimova\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Zhenya Elfimova\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/actonic.de\\\/en\\\/api-keys-and-secrets-in-jira-finding-the-tokens-hiding-in-your-tickets\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/actonic.de\\\/en\\\/api-keys-and-secrets-in-jira-finding-the-tokens-hiding-in-your-tickets\\\/\"},\"author\":{\"name\":\"Zhenya Elfimova\",\"@id\":\"https:\\\/\\\/actonic.de\\\/en\\\/#\\\/schema\\\/person\\\/7134b19473d8c348d0fb08d5137664a5\"},\"headline\":\"API keys and secrets in Jira: finding the tokens hiding in your tickets\",\"datePublished\":\"2026-06-11T10:06:39+00:00\",\"dateModified\":\"2026-06-23T11:39:17+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/actonic.de\\\/en\\\/api-keys-and-secrets-in-jira-finding-the-tokens-hiding-in-your-tickets\\\/\"},\"wordCount\":1034,\"image\":{\"@id\":\"https:\\\/\\\/actonic.de\\\/en\\\/api-keys-and-secrets-in-jira-finding-the-tokens-hiding-in-your-tickets\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/actonic.de\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/article2_api_keys_secrets-1.png\",\"articleSection\":[\"Data Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/actonic.de\\\/en\\\/api-keys-and-secrets-in-jira-finding-the-tokens-hiding-in-your-tickets\\\/\",\"url\":\"https:\\\/\\\/actonic.de\\\/en\\\/api-keys-and-secrets-in-jira-finding-the-tokens-hiding-in-your-tickets\\\/\",\"name\":\"API keys and secrets in Jira: finding the tokens hiding in your tickets - Actonic \u2013 Unfolding your potential\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/actonic.de\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/actonic.de\\\/en\\\/api-keys-and-secrets-in-jira-finding-the-tokens-hiding-in-your-tickets\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/actonic.de\\\/en\\\/api-keys-and-secrets-in-jira-finding-the-tokens-hiding-in-your-tickets\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/actonic.de\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/article2_api_keys_secrets-1.png\",\"datePublished\":\"2026-06-11T10:06:39+00:00\",\"dateModified\":\"2026-06-23T11:39:17+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/actonic.de\\\/en\\\/#\\\/schema\\\/person\\\/7134b19473d8c348d0fb08d5137664a5\"},\"description\":\"Engineers scan Git for secrets but forget Jira. Bearer tokens and API keys end up in screenshots and logs. Learn how to find secrets hiding in Jira tickets.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/actonic.de\\\/en\\\/api-keys-and-secrets-in-jira-finding-the-tokens-hiding-in-your-tickets\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/actonic.de\\\/en\\\/api-keys-and-secrets-in-jira-finding-the-tokens-hiding-in-your-tickets\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/actonic.de\\\/en\\\/api-keys-and-secrets-in-jira-finding-the-tokens-hiding-in-your-tickets\\\/#primaryimage\",\"url\":\"https:\\\/\\\/actonic.de\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/article2_api_keys_secrets-1.png\",\"contentUrl\":\"https:\\\/\\\/actonic.de\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/article2_api_keys_secrets-1.png\",\"width\":680,\"height\":298},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/actonic.de\\\/en\\\/api-keys-and-secrets-in-jira-finding-the-tokens-hiding-in-your-tickets\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/actonic.de\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"API keys and secrets in Jira: finding the tokens hiding in your tickets\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/actonic.de\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/actonic.de\\\/en\\\/\",\"name\":\"Actonic \u2013 Unfolding your potential\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/actonic.de\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/actonic.de\\\/en\\\/#\\\/schema\\\/person\\\/7134b19473d8c348d0fb08d5137664a5\",\"name\":\"Zhenya Elfimova\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4e5ef48c81d2e4f466924684a19236cd7f76613bcef73f93f8b0e9e390f4ee1c?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4e5ef48c81d2e4f466924684a19236cd7f76613bcef73f93f8b0e9e390f4ee1c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4e5ef48c81d2e4f466924684a19236cd7f76613bcef73f93f8b0e9e390f4ee1c?s=96&d=mm&r=g\",\"caption\":\"Zhenya Elfimova\"},\"url\":\"https:\\\/\\\/actonic.de\\\/en\\\/author\\\/zhenya-elfimova\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"API keys and secrets in Jira: finding the tokens hiding in your tickets - Actonic \u2013 Unfolding your potential","description":"Engineers scan Git for secrets but forget Jira. Bearer tokens and API keys end up in screenshots and logs. Learn how to find secrets hiding in Jira tickets.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/actonic.de\/en\/api-keys-and-secrets-in-jira-finding-the-tokens-hiding-in-your-tickets\/","og_locale":"en_US","og_type":"article","og_title":"API keys and secrets in Jira: finding the tokens hiding in your tickets","og_description":"Engineers scan Git for secrets but forget Jira. Bearer tokens and API keys end up in screenshots and logs. Learn how to find secrets hiding in Jira tickets.","og_url":"https:\/\/actonic.de\/en\/api-keys-and-secrets-in-jira-finding-the-tokens-hiding-in-your-tickets\/","og_site_name":"Actonic \u2013 Unfolding your potential","article_published_time":"2026-06-11T10:06:39+00:00","article_modified_time":"2026-06-23T11:39:17+00:00","og_image":[{"width":680,"height":298,"url":"https:\/\/actonic.de\/wp-content\/uploads\/2026\/06\/article2_api_keys_secrets-1.png","type":"image\/png"}],"author":"Zhenya Elfimova","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Zhenya Elfimova","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/actonic.de\/en\/api-keys-and-secrets-in-jira-finding-the-tokens-hiding-in-your-tickets\/#article","isPartOf":{"@id":"https:\/\/actonic.de\/en\/api-keys-and-secrets-in-jira-finding-the-tokens-hiding-in-your-tickets\/"},"author":{"name":"Zhenya Elfimova","@id":"https:\/\/actonic.de\/en\/#\/schema\/person\/7134b19473d8c348d0fb08d5137664a5"},"headline":"API keys and secrets in Jira: finding the tokens hiding in your tickets","datePublished":"2026-06-11T10:06:39+00:00","dateModified":"2026-06-23T11:39:17+00:00","mainEntityOfPage":{"@id":"https:\/\/actonic.de\/en\/api-keys-and-secrets-in-jira-finding-the-tokens-hiding-in-your-tickets\/"},"wordCount":1034,"image":{"@id":"https:\/\/actonic.de\/en\/api-keys-and-secrets-in-jira-finding-the-tokens-hiding-in-your-tickets\/#primaryimage"},"thumbnailUrl":"https:\/\/actonic.de\/wp-content\/uploads\/2026\/06\/article2_api_keys_secrets-1.png","articleSection":["Data Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/actonic.de\/en\/api-keys-and-secrets-in-jira-finding-the-tokens-hiding-in-your-tickets\/","url":"https:\/\/actonic.de\/en\/api-keys-and-secrets-in-jira-finding-the-tokens-hiding-in-your-tickets\/","name":"API keys and secrets in Jira: finding the tokens hiding in your tickets - Actonic \u2013 Unfolding your potential","isPartOf":{"@id":"https:\/\/actonic.de\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/actonic.de\/en\/api-keys-and-secrets-in-jira-finding-the-tokens-hiding-in-your-tickets\/#primaryimage"},"image":{"@id":"https:\/\/actonic.de\/en\/api-keys-and-secrets-in-jira-finding-the-tokens-hiding-in-your-tickets\/#primaryimage"},"thumbnailUrl":"https:\/\/actonic.de\/wp-content\/uploads\/2026\/06\/article2_api_keys_secrets-1.png","datePublished":"2026-06-11T10:06:39+00:00","dateModified":"2026-06-23T11:39:17+00:00","author":{"@id":"https:\/\/actonic.de\/en\/#\/schema\/person\/7134b19473d8c348d0fb08d5137664a5"},"description":"Engineers scan Git for secrets but forget Jira. Bearer tokens and API keys end up in screenshots and logs. Learn how to find secrets hiding in Jira tickets.","breadcrumb":{"@id":"https:\/\/actonic.de\/en\/api-keys-and-secrets-in-jira-finding-the-tokens-hiding-in-your-tickets\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/actonic.de\/en\/api-keys-and-secrets-in-jira-finding-the-tokens-hiding-in-your-tickets\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/actonic.de\/en\/api-keys-and-secrets-in-jira-finding-the-tokens-hiding-in-your-tickets\/#primaryimage","url":"https:\/\/actonic.de\/wp-content\/uploads\/2026\/06\/article2_api_keys_secrets-1.png","contentUrl":"https:\/\/actonic.de\/wp-content\/uploads\/2026\/06\/article2_api_keys_secrets-1.png","width":680,"height":298},{"@type":"BreadcrumbList","@id":"https:\/\/actonic.de\/en\/api-keys-and-secrets-in-jira-finding-the-tokens-hiding-in-your-tickets\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/actonic.de\/en\/"},{"@type":"ListItem","position":2,"name":"API keys and secrets in Jira: finding the tokens hiding in your tickets"}]},{"@type":"WebSite","@id":"https:\/\/actonic.de\/en\/#website","url":"https:\/\/actonic.de\/en\/","name":"Actonic \u2013 Unfolding your potential","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/actonic.de\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/actonic.de\/en\/#\/schema\/person\/7134b19473d8c348d0fb08d5137664a5","name":"Zhenya Elfimova","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/4e5ef48c81d2e4f466924684a19236cd7f76613bcef73f93f8b0e9e390f4ee1c?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/4e5ef48c81d2e4f466924684a19236cd7f76613bcef73f93f8b0e9e390f4ee1c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4e5ef48c81d2e4f466924684a19236cd7f76613bcef73f93f8b0e9e390f4ee1c?s=96&d=mm&r=g","caption":"Zhenya Elfimova"},"url":"https:\/\/actonic.de\/en\/author\/zhenya-elfimova\/"}]}},"jetpack_featured_media_url":"https:\/\/actonic.de\/wp-content\/uploads\/2026\/06\/article2_api_keys_secrets-1.png","_links":{"self":[{"href":"https:\/\/actonic.de\/en\/wp-json\/wp\/v2\/posts\/13889","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/actonic.de\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/actonic.de\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/actonic.de\/en\/wp-json\/wp\/v2\/users\/35"}],"replies":[{"embeddable":true,"href":"https:\/\/actonic.de\/en\/wp-json\/wp\/v2\/comments?post=13889"}],"version-history":[{"count":0,"href":"https:\/\/actonic.de\/en\/wp-json\/wp\/v2\/posts\/13889\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/actonic.de\/en\/wp-json\/wp\/v2\/media\/13890"}],"wp:attachment":[{"href":"https:\/\/actonic.de\/en\/wp-json\/wp\/v2\/media?parent=13889"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/actonic.de\/en\/wp-json\/wp\/v2\/categories?post=13889"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/actonic.de\/en\/wp-json\/wp\/v2\/tags?post=13889"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}