Skip to main content
POST
Reveal an item
A stored totp secret is never returned: you get its current code and when that code expires instead. Any member of your organization can reveal an item, and every reveal is audit-logged with who read which fields. Returns the values object below. The response carries Cache-Control: no-store.

Path parameters

string
required
The H-hosted vault’s id (UUID).
string
required
The item’s id (UUID).

Response

object
The item’s values by field: any of username, password, email, api_key. Never totp.
string | null
The current code for the item’s totp secret, or null if it has none.
string | null
ISO 8601 timestamp when totp_code expires, or null if the item has no totp secret.

Examples

Response

Errors