Goldmine
Accounts

Reveal saved Steam account credentials

POST
/steam.v1.Steam/RevealAccountCredentials

Return an active account's saved password, shared secret and optional identity secret and account-tier API key within the calling workspace. Requires the same manage permission as updating the account. This explicit no-store operation does not log in, refresh a session, contact Steam or return web cookies or refresh tokens. General account reads and events never contain these plaintext values.

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

accountName?string

Exact account name in the calling workspace.

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

curl -X POST "https://loading/steam.v1.Steam/RevealAccountCredentials" \  -H "Content-Type: application/json" \  -d '{}'
{
  "accountName": "string",
  "apiKey": "string",
  "identitySecret": "string",
  "password": "string",
  "sharedSecret": "string"
}
{
  "code": "invalid_argument",
  "message": "The request was malformed, such as a missing required field or an unparseable cursor."
}
{
  "code": "unauthenticated",
  "message": "The request lacks a valid API key in the Authorization header."
}
{
  "code": "permission_denied",
  "message": "The API key is not allowed to perform this action on this workspace."
}
{
  "code": "not_found",
  "message": "The requested resource does not exist in this workspace."
}
{
  "code": "internal",
  "message": "An internal server error occurred."
}

ListAccounts

Return a paginated list of the Steam accounts in the workspace. Each page carries the full hydrated accounts, so a caller renders it directly without a follow-up lookup. Use the returned cursor to fetch subsequent pages.

SetWorkspaceAPIKey

Upsert the workspace-tier Steam Web API key shared by every account in the workspace, the second tier of the key resolution hierarchy. Write-only: the key is never returned by any RPC.