This endpoint retrieves the raw secret for an API key associated with your account. It exists to let you recover a key you created through the dashboard in a context where you did not immediately copy it. Like all key-management operations, it requires an active browser session so that it cannot be accessed programmatically using another API key. Treat the response with the same care as a password — do not log it, do not include it in error reports, and do not expose it to client-side code.
Endpoint
Authentication: SessionAuth — browser session cookie (not an API key)
Path Parameters
The unique identifier of the API key you want to reveal. You can find this value in the id field returned by the List Keys endpoint. Response — 200 OK
The raw API key secret. This is the full value — including the pb_live_ prefix — that you use in the Authorization: Bearer header when calling the Prompt Bank API.
Example
Request
Response
Treat this response as a credential. Never log it, print it to a terminal that is screen-shared, or include it in error-tracking payloads. If you believe the key has been exposed, revoke it immediately and issue a replacement.