---
title: "List sensitive fields"
method: GET
path: "/api/v1/cdp/sensitive-fields"
tags: ["CDP Sensitive fields"]
---

# List sensitive fields

`GET /api/v1/cdp/sensitive-fields`

## Request

- Base URL: `https://www.useboom.ai`
- URL: `https://www.useboom.ai/api/v1/cdp/sensitive-fields`
- Auth: HTTP bearer

List the fields your organization marked sensitive: contact fields, People attributes and custom object attributes. A sensitive value is hidden from AI agents and from teammates without access (it reads `[redacted]`); it stays stored and keeps working in segments and messages. Returns field names only, never values.

## Response `200`

Success

- object
  - `builtIns` string[], required: Contact fields marked sensitive.
  - `people` string[], required: People attribute keys marked sensitive.
  - `customObjects` object[], required: Custom object attribute keys marked sensitive, per type.
    - `type` string, required: The custom object type name.
    - `keys` string[], required

## Other responses

- `400`: Validation failed or the request cannot proceed.
- `401`: Missing, malformed, or revoked API key.
- `404`: The resource does not exist in this organization.
- `409`: Conflicts with the current state (duplicates, wrong lifecycle state).
- `422`: The request is well-formed but semantically invalid.
- `429`: Rate limit exceeded — retry after `Retry-After`.
- `500`: Internal server error.
- `503`: Transient error — retry with a narrower request.

## Changes

- **2026-11-03** `7c7a773b12ce`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/useboom/apis/boom-api/changes/api/v1/cdp/sensitive-fields/get.md)

---

[API](https://skmtc.dev/useboom/apis/boom-api.md) - [All operations](https://skmtc.dev/useboom/apis/boom-api/llms.txt) - [OpenAPI document](https://skmtc.dev/useboom/apis/boom-api/revisions/d596d92ed092?raw)