---
title: "Take the one view"
method: POST
path: "/OneTimeSecrets/{token}/Reveal"
tags: ["Onetimesecrets"]
---

# Take the one view

`POST /OneTimeSecrets/{token}/Reveal`

**Auth:** Anonymous - no token required.

Checks the auth key derived from the passphrase and, on a match, returns the ciphertext exactly once and destroys it. A wrong passphrase costs an attempt but does NOT spend the view; running out of attempts destroys the secret.

## Path parameters

- `token` string, required

## Request body

- PostRevealOneTimeSecretRequest
  - `authKey` string, nullable

## Response `200`

Success - revealed, or rejected with attempts left

- PostRevealOneTimeSecretResponse
  - `revealed` boolean
  - `ciphertext` string, nullable
  - `attemptsRemaining` integer
  - `burnReason` string, nullable

---

[API](https://skmtc.net/tonbridge/apis/tonbridge-app-api.md) · [All operations](https://skmtc.net/tonbridge/apis/tonbridge-app-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/tonbridge/tonbridge-app-api/revisions/5aa4178ca29b/schema)
