Sites

Reveal a site's secret

Returns the decrypted value for a single secret. This is a POST (not GET) so the secret never lands in a URL, request log, or browser history.

post/sites/{id}/secrets/{secret_id}/reveal

Request

  • Base URL: https://api.crevio.co/v1
  • URL: https://api.crevio.co/v1/sites/{id}/secrets/{secret_id}/reveal
  • Auth: API key in header Authorization

Path parameters

idstring required

The resource ID (e.g., "prod_abc123") or slug (e.g., "my-product")

secret_idstring required

The secret's ID (e.g., "secret_3f9a1c0b7d2e4a6f8b1c3d5e")

Headers

Idempotency-Keystring

Makes this write safe to retry: a repeat with the same key replays the first response instead of creating a second resource. Scoped to the account, remembered for 24 hours; reusing a key with a different payload is an error.

Response

The secret, including its decrypted value

objectstring required
idstring required
namestring required
targetstring required
scopestring required
site_idstring nullable required
site_idsobject required
descriptionstring nullable required
egress_hoststring nullable required
egress_headerstring nullable required
egress_placementstring required
egress_signingobject required
egress_default_headersobject required
last4string required
valuestring nullable required
created_atstring required

Changes

No recorded changes to this operation across all 2 revisions of this API.