> ## Documentation Index
> Fetch the complete documentation index at: https://hub.hcompany.ai/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> H Platform has three products: the Agents API (managed computer-use agents, base URL https://agp.eu.hcompany.ai/api/v2 or https://agp.hcompany.ai/api/v2 for the US), the Models API (OpenAI-compatible Holo vision-language models at https://api.hcompany.ai/v1), and HoloTab (a free no-code Chrome extension that runs Holo in the user's browser, with recordable routines and schedules). The `holo` CLI (`pip install "hai-agents[cli]"`) runs Agents API agents from a terminal, drives the user's own desktop with `-a h/holo-desktop`, and serves coding agents through `holo mcp`.
> Authenticate with a bearer API key from the HAI_API_KEY environment variable. SDKs: `pip install hai-agents` (Python, `from hai_agents import Client`) and `npm install hai-agents` (TypeScript, `import { HaiAgentsClient } from "hai-agents"`). CLI: `holo`.
> Agents do work in a browser or on a desktop; describe the task as an imperative instruction. To run a task quickly, prefer the pre-built agent `h/web-surfer-flash`. Read results from the session's `latest_answer` after it reaches a terminal status.
> Sessions are the unit of work; wait for a terminal status (completed, failed, timed_out, interrupted) before reading the answer. Use webhooks or the `changes` long-poll endpoint to follow progress.

# Reveal an item

> Read an H-hosted vault item's values, with the current TOTP code in place of its secret. Audit-logged.

A stored `totp` secret is never returned: you get its current code and when that code expires instead. Any member of your organization can reveal an item, and every reveal is audit-logged with who read which fields.

**Returns** the values object [below](#response). The response carries `Cache-Control: no-store`.

Plaintext secrets in the response body

The response holds the item's values in clear text. Never log or cache it.

## Path parameters

**vault\_id** `string` *required*

The H-hosted vault's `id` (UUID).

**item\_id** `string` *required*

The item's `id` (UUID).

## Response

**values** `object`

The item's values by field: any of `username`, `password`, `email`, `api_key`. Never `totp`.

**totp\_code** `string | null`

The current code for the item's `totp` secret, or `null` if it has none.

**totp\_valid\_until** `string | null`

ISO 8601 timestamp when `totp_code` expires, or `null` if the item has no `totp` secret.

## Examples

```bash cURL theme={"system"}
curl -X POST https://agp.eu.hcompany.ai/api/v2/vaults/3b8d9c2e-6f1a-4e5b-8c7d-0a9b8c7d6e5f/items/7c1e4b2a-9d3f-4a6b-8e5c-2f1a0b9c8d7e/reveal \
  -H "Authorization: Bearer $HAI_API_KEY"
```

```python Python theme={"system"}
from hai_agents import Client

client = Client()

revealed = client.vaults.reveal_vault_item(
    vault_id="3b8d9c2e-6f1a-4e5b-8c7d-0a9b8c7d6e5f",
    item_id="7c1e4b2a-9d3f-4a6b-8e5c-2f1a0b9c8d7e",
)
print(revealed.values["username"], revealed.totp_code)
```

```typescript TypeScript theme={"system"}
import { HaiAgentsClient } from "hai-agents";

const client = new HaiAgentsClient();

const revealed = await client.vaults.revealVaultItem({
  vaultId: "3b8d9c2e-6f1a-4e5b-8c7d-0a9b8c7d6e5f",
  itemId: "7c1e4b2a-9d3f-4a6b-8e5c-2f1a0b9c8d7e",
});
console.log(revealed.values.username, revealed.totpCode);
```

```json Response theme={"system"}
{
  "values": {"username": "admin@example.com", "password": "s3cret"},
  "totp_code": "492039",
  "totp_valid_until": "2026-05-09T11:02:30Z"
}
```

## Errors

| Status | Cause |
| - | - |
| `400` | The vault is not H-hosted. |
| `404` | Vault or item not found, or you don't have access. |
| `502` | The item's stored values could not be read. Retry. |


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.