---
title: "Reveal API key once after Stripe purchase (success page flow)"
method: GET
path: "/billing/key/reveal"
tags: ["billing"]
---

# Reveal API key once after Stripe purchase (success page flow)

`GET /billing/key/reveal`

## Request

- Base URL: `https://catalyst.stratogenic.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://catalyst.stratogenic.ai/billing/key/reveal`
- Auth: none declared

Given a Stripe Checkout session_id, verifies payment completion and reveals a newly-issued API key exactly once.

This is designed for a headless marketing site:
Stripe success page -> calls this endpoint -> shows 'write this down' API key screen.

Security model:
- No plaintext API key is stored long-term.
- We store only the hashed key on the tenant.
- If a key already exists, we refuse to reveal a new one here (use admin rotate later).

## Query parameters

- `session_id` string, required: Stripe Checkout Session ID (cs_...)

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/stratogenic/apis/stratogenic-catalyst-api.md) · [All operations](https://skmtc.dev/stratogenic/apis/stratogenic-catalyst-api/llms.txt) · [OpenAPI document](https://skmtc.dev/stratogenic/apis/stratogenic-catalyst-api/revisions/ad906ad7a85d?raw)