SIsignalshq
MCP CONNECTOR

Read an MCP API key back (Owner only, audited).

Return the plaintext credential to the firm Owner.

OWNER-only, one role above the ADMIN who may manage the team: this hands back a live credential that reads every client in the firm.

The audit stamp is written and COMMITTED BEFORE the plaintext is returned. If that write fails the request fails and nothing is disclosed — an unrecorded reveal is exactly the event the record exists to capture, so it must not be possible to have one.

A revoked key is not revealable. Handing back a withdrawn credential only invites it being pasted into a connector that will fail, and it widens the window in which the plaintext exists for no benefit.

get/internal/api/mcp/keys/{key_row_id}/reveal

Request

  • Base URL
    https://api.signalshq.io (the document declares no server; this is the origin it was published from)
  • Auth
    OAuth 2
    Password
    Token URL: /auth/login

Path parameters

key_row_idstring uuid required

Response

Successful Response

api_keystring required

The full credential. Treat every response carrying this as sensitive: do not log it, and do not cache it client-side.

reveal_countinteger required

How many times this key has now been read back, including this one. Surface it — a credential revealed repeatedly is a different risk from one revealed once.

Changes

No recorded changes to this operation across all 1 revision of this API.