Reveal one credential field
POST /v1/gateway/providers/:id/fields/:envVar/reveal — Return the plaintext value of a single masked credential field (e.g. `TELEGRAM_BOT_TOKEN`) for the Settings → Messaging
POST /v1/gateway/providers/:id/fields/:envVar/reveal
Return the plaintext value of a single masked credential field (e.g. TELEGRAM_BOT_TOKEN) for the Settings → Messaging "Show" button. The implicit GET /v1/gateway/providers payload always masks; this endpoint narrowly widens to plaintext on explicit user request, one field at a time. Auth: same-origin / loopback / missing-Origin requests pass through (the single-user local-dev case); cross-origin callers must present the gateway bearer token or receive 503 gateway_auth_required. Non-masked, unknown, or unset fields return 404.
| Method | POST |
| Path | /v1/gateway/providers/:id/fields/:envVar/reveal |
| Auth | Authorization: Bearer <token> required when GATEWAY_AUTH_TOKEN is set |
| Category | gateway |
Response body
{ "value": "85123abcdef..." }