---
title: "The caller's own one-time secrets"
method: GET
path: "/OneTimeSecrets"
tags: ["Onetimesecrets"]
---

# The caller's own one-time secrets

`GET /OneTimeSecrets`

**Requires permission:** *IT*

Metadata only — what it was called, when it was created, whether it has been opened. No ciphertext and no key material, so this screen cannot help anybody open a secret they do not have the passphrase for.

## Response `200`

Success

- GetOneTimeSecretsResponse
  - `secrets` GetOneTimeSecretsOneTimeSecretSummary[]
    - `id` integer
    - `token` string
    - `note` string, nullable
    - `created` string, date-time
    - `expiresAt` string, date-time
    - `viewedAt` string, date-time, nullable
    - `burnReason` string, nullable
    - `burned` boolean
    - `failedAttempts` integer
    - `shortLinkBackHalf` string, nullable
    - `shareUrl` string

## Other responses

- `401` — Unauthorized
- `403` — Forbidden

---

[API](https://skmtc.net/tonbridge/apis/tonbridge-app-api.md) · [All operations](https://skmtc.net/tonbridge/apis/tonbridge-app-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/tonbridge/tonbridge-app-api/revisions/5aa4178ca29b/schema)