---
title: "Reveal a secret"
method: POST
path: "/secrets/{secret_id}/reveal"
tags: ["Secrets"]
---

# Reveal a secret

`POST /secrets/{secret_id}/reveal`

## Request

- Base URL: `https://api.crevio.co/v1`
- URL: `https://api.crevio.co/v1/secrets/{secret_id}/reveal`
- Auth: API key in header `Authorization`

Returns the decrypted `value` of a single secret. A POST rather than a GET so the secret never lands in a URL, a request log, or browser history.

## Path parameters

- `secret_id` string, required

## Headers

- `Idempotency-Key` string

## Response `200`

The secret, including its decrypted value

- Secret
  - `object` string, required
  - `id` string, required
  - `name` string, required
  - `target` string, required
  - `scope` string, required
  - `site_id` string, nullable, required
  - `site_ids` object, required
  - `description` string, nullable, required
  - `egress_host` string, nullable, required
  - `egress_header` string, nullable, required
  - `egress_placement` string, required
  - `egress_signing` object, required
  - `egress_default_headers` object, required
  - `last4` string, required
  - `value` string, nullable, required
  - `created_at` string, required

## Other responses

- `401`: Authentication required
- `404`: Resource not found
- `429`: Rate limit exceeded — 600 requests per minute per credential. Retry after the number of seconds in `Retry-After`.
- `500`: Internal server error

---

[API](https://skmtc.dev/crevio/apis/crevio-api-v1.md) · [All operations](https://skmtc.dev/crevio/apis/crevio-api-v1/llms.txt) · [OpenAPI document](https://skmtc.dev/crevio/apis/crevio-api-v1/revisions/2219f18ad651?raw)