---
title: "Reveal the decrypted withheld content of a review-hold"
method: POST
path: "/safe-house/reviews/{review_id}/held-content"
tags: ["Safe House"]
---

# Reveal the decrypted withheld content of a review-hold

`POST /safe-house/reviews/{review_id}/held-content`

## Request

- Base URL: `https://api.mnemom.ai/v1`
- URL: `https://api.mnemom.ai/v1/safe-house/reviews/{review_id}/held-content`
- Auth: one of:
  - HTTP bearer
  - API key in header `X-Mnemom-Api-Key`

Return the decrypted original held message of a Safe House review-hold so an authorized human can read it before ruling (Wave 4). POST (not GET) so the `SameSite=Lax` session cookie makes it CSRF-safe like `/resolve`; the request carries no body. Customer/human auth (an authenticated member of the org that governs the review's agent, or platform staff). A `review_id` outside the caller's authority returns **404, never 403** (no existence leak, mirroring resolve). The decrypt happens gateway-side (keys never leave the gateway) and is strictly read-only — it never changes the hold's state. The plaintext is disclosed only after its reveal is durably audit-logged. Works for a hold in any status. Fails closed (**502**) on a gateway/vault error or an audit-write failure — never a fabricated or unaudited plaintext.

## Path parameters

- `review_id` string, required

## Response `200`

The decrypted held content.

- object
  - `review_id` string, required
  - `content` string, required: The decrypted original held message.

## Other responses

- `401`: Authentication required
- `403`: Forbidden
- `404`: Resource not found
- `429`: Rate-limit exceeded. The global per-IP limiter (100 requests/minute, applied to every `/v1/*` route) rejected this request. Back off until the window resets — `Retry-After` carries the cooldown in seconds and `X-RateLimit-Reset` the absolute reset time.
- `500`: Server error — request was well-formed but the server failed to fulfill it. Typically a downstream dependency (DB / RPC / external API) returned an unexpected error.
- `502`: An upstream dependency returned an invalid response.

---

[API](https://skmtc.dev/mnemom/apis/mnemom-api.md) · [All operations](https://skmtc.dev/mnemom/apis/mnemom-api/llms.txt) · [OpenAPI document](https://skmtc.dev/mnemom/apis/mnemom-api/revisions/274b7a6ea182?raw)