---
title: "Reveal Personal ID"
method: GET
path: "/persons/personal_ids/{personal_id_id}/reveal"
tags: ["Persons"]
---

# Reveal Personal ID

`GET /persons/personal_ids/{personal_id_id}/reveal`

Get a personal ID with the id number encrypted using the fintechs provided public key.
Optionally specify which personal ID configuration to use for encryption.
If not specified, the oldest configured public key will be used.

## Path parameters

- `personal_id_id` string, uuid, required

## Query parameters

- `personal_id_configuration_id` string, uuid

## Response `200`

Revealed Personal ID encrypted via public key

- PersonalIdRevealResponse
  - `ciphertext` string, required — JWE compact serialization of the encrypted personal id data as defined in [RFC 7516 Section 7.1](https://datatracker.ietf.org/doc/html/rfc7516#section-7.1). Format: `header.encryptedKey.iv.ciphertext.authTag` All segments are base64url-encoded and concatenated with periods. - header: Contains algorithm information and key identifier - "alg": "ECDH-ES+A256KW" - Key management algorithm - "enc": "A256GCM" - Content encryption algorithm - "kid": base64url-encoded JWK thumbprint. The thumbprint is calculated using the JWK as per [RFC 7638](https://datatracker.ietf.org/doc/html/rfc7638#section-3.1) and is used to identify the public key used for encryption. The algorithm identifiers follow [RFC 7518](https://datatracker.ietf.org/doc/html/rfc7518) - encryptedKey: The content encryption key encrypted using ECDH-ES - iv: Initialization vector for AES-GCM - ciphertext: The actual encrypted data - authTag: Authentication tag for AES-GCM integrity verification

## Other responses

- `400` — BadRequest
- `401` — Unauthorized
- `403` — Forbidden error
- `404` — Resource not found
- `500` — Internal server error

---

[API](https://skmtc.net/synctera/apis/synctera-api.md) · [All operations](https://skmtc.net/synctera/apis/synctera-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/synctera/synctera-api/revisions/b0d812e6cdd0/schema)