# Sensitive Fields

Read the real value of a field marked Sensitive (such as a tax file number). Everywhere else these fields only return a masked copy, and every reveal is logged.

**Base URL:** `https://api.trustpager.com/functions/v1/api/v1`

## Endpoints

### POST /sensitive-fields/reveal

Read the real value of a field marked Sensitive, such as a tax file number. Everywhere else (get_contact, list and search results, exports, merge fields, automations, form submissions) a Sensitive field only ever returns its masked copy, e.g. "••••••782". Every call is logged with who asked and when. Requires the sensitive-fields:read permission ticked explicitly on the key: full (admin) access does not include it, and AI connectors never get it by default. Only call this when the person you are helping genuinely needs the number.

**Scopes:** `sensitive-fields:read` — [full detail](./sensitive-fields/post-sensitive-fields-reveal.md)