The trouble with API keys that never expire
A key issued years ago, never rotated, and still valid today is not a convenience. It is a liability nobody has actually looked at in years.
Tag
#security
Retiring old API keys safely after a migration
Turning off an old provider's API key too early or too late both carry risk. Here is how to retire credentials properly once a migration is complete.
IP threat and network detail available on request
Adding mg_extras=1 or an X-MG-Extras header to an IP lookup now returns optional threat and network detail on top of the standard response.
Build a simple IP reputation check for signups
Compare an IP address's location and network details against what a signup form claims, catching obvious mismatches without a dedicated fraud tool.
Two-factor authentication for your account
Account security now includes optional two-factor authentication, adding a second step to logins without changing how API keys authenticate.
Filter bot traffic using ASN and network data
Data center and hosting networks show up clearly in ASN and organization fields, which is useful signal for filtering automated traffic.
Why we didn't build a browser SDK first
A browser SDK for a server-side lookup mostly just moves your API key somewhere a visitor's browser can see it. That is not a convenience worth having.