---
title: "Reveal an organization host's secret"
method: POST
path: "/api/v0beta1/hosts/{id}/reveal"
tags: ["Hosts"]
---

# Reveal an organization host's secret

`POST /api/v0beta1/hosts/{id}/reveal`

## Request

- Base URL: `https://app.amika.dev` (the document declares no server; this is the origin it was published from)
- URL: `https://app.amika.dev/api/v0beta1/hosts/{id}/reveal`
- Auth: one of:
  - HTTP bearer
  - API key in cookie `wos-session`

Only a signed-in user can reveal a host's secret; an API key or other service identity is refused with 403. A POST rather than a GET so the value is never cached or prefetched.

## Path parameters

- `id` string, required

## Response `200`

The host's secret.

- RevealHostSecretResponse
  - `value` string, required

## Other responses

- `400`: Error
- `401`: Error
- `403`: Error
- `404`: Error

## Changes

- **2026-10-03** `a122301d00e0`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/amika/apis/amika-api/changes/api/v0beta1/hosts/:id/reveal/post.md)

---

[API](https://skmtc.dev/amika/apis/amika-api.md) - [All operations](https://skmtc.dev/amika/apis/amika-api/llms.txt) - [OpenAPI document](https://skmtc.dev/amika/apis/amika-api/revisions/86f031a957c1?raw)