---
title: "What a recipient needs before trying a passphrase"
method: GET
path: "/OneTimeSecrets/{token}/Meta"
tags: ["Onetimesecrets"]
---

# What a recipient needs before trying a passphrase

`GET /OneTimeSecrets/{token}/Meta`

**Auth:** Anonymous - no token required.

Returns the key-derivation parameters for a secret and whether there is anything left to release. Deliberately NOT the ciphertext: knowing the salts alone gives an attacker nothing to work offline against. Anonymous by design — the recipient is usually not a Panoptic user.

## Path parameters

- `token` string, required

## Response `200`

Success

- GetOneTimeSecretMetaResponse
  - `exists` boolean
  - `burned` boolean
  - `burnReason` string, nullable
  - `viewedAt` string, date-time, nullable
  - `expiresAt` string, date-time, nullable
  - `attemptsRemaining` integer
  - `encryptionSalt` string, nullable
  - `authSalt` string, nullable
  - `iterations` integer
  - `nonce` string, nullable
  - `note` string, nullable

---

[API](https://skmtc.net/tonbridge/apis/tonbridge-app-api.md) · [All operations](https://skmtc.net/tonbridge/apis/tonbridge-app-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/tonbridge/tonbridge-app-api/revisions/5aa4178ca29b/schema)