← Knowledge base

2 min read · community · ops

What is safe to post in a public thread

Token type and a redacted screenshot are fine. Live URLs, keys, and customer names are not.

Safe: token type (DNS, HTTP, AWS IAM), roughly where you planted it (“internal wiki”, “.env example”), and whether a self-test produced a trigger.

Not safe: the live beacon URL, callback hostname, AWS keys, tenant ids, customer names, or a screenshot of an alert that shows a real source IP you have not already published.

If you need the team to inspect a specific token, open Support and include the token name from your dashboard. That stays private.

Discuss this in the forum →