Returns the CURRENT raw HMAC secret (decrypted) so a partner-admin can re-copy it if the value shown at create/rotate time was lost. Does not change the secret. Every call writes a PARTNER_WEBHOOK_SECRET_REVEALED audit row. No request body required.

Auth: Partner — authentication; findCallerSubscription enforces bundle_id === 1 and scopes by partner_company_id (404 if not owned).

Rate limit: No rate limit.

Request

• No body.

Response — { data: { data: {.} } } envelope (HTTP 200). All presenter fields from Show one subscription, PLUS:

• hmac_secret (string) — the current raw secret (decrypted from hmac_secret_encrypted). No hmac_secret_warning field on this endpoint.

Path params