---
title: "Show the passcode set on a site you own."
method: GET
path: "/sites/{idOrSlug}/passcode"
tags: ["Sites"]
---

# Show the passcode set on a site you own.

`GET /sites/{idOrSlug}/passcode`

## Request

- Base URL: `https://api.stacktr.ee`
- URL: `https://api.stacktr.ee/sites/{idOrSlug}/passcode`
- Auth: one of:
  - HTTP bearer
  - OAuth 2 (authorization code, authorization URL `https://api.stacktr.ee/oauth/authorize`, token URL `https://api.stacktr.ee/oauth/token`, scopes: `sites:read`)

Returns the passcode the owner set, so it can be sent to a client again. Passcodes set since 13 September 2026 are kept as an encrypted copy alongside the hash the viewer gate checks; one set before that cannot be shown (404 not_retrievable) and the fix is to set a new one with PATCH /sites/{idOrSlug}. Owner-authed; never included in list or detail payloads.

## Response `200`

The passcode.

- object
  - `passcode` string, required

## Other responses

- `401`: Missing or invalid credentials.
- `404`: No such site (not_found), no passcode on it (no_passcode), or no readable copy (not_retrievable).

---

[API](https://skmtc.dev/stacktr/apis/stacktree-api.md) · [All operations](https://skmtc.dev/stacktr/apis/stacktree-api/llms.txt) · [OpenAPI document](https://skmtc.dev/stacktr/apis/stacktree-api/revisions/5878cce46977?raw)