Token Database: Search & Profiles

The Tokenized database page (/dashboard/database) is an advanced browser for tokens you are allowed to see (RBAC + organization policies).

Search by plaintext value (blind index)

Find tokens without storing searchable plaintext in your app database:

1. Enter a value (e.g. email) and optional type filter.
2. Veilio hashes the value with your user key and matches lookupHash in the Clients DB.
3. Results respect the same visibility rules as the token list.

API (session only):

POST /api/tokens/lookup
Content-Type: application/json

{
  "value": "[e-mail]",
  "type": "email"
}

Search actions are audited. The searched value is never written to audit logs.

Search by profile (entityId)

Group tokens belonging to the same person or business record:

• Set entityId when tokenizing (metadata.entityId or entityIdColumn on datasets / bulk / format).
• Filter the database view by entityId to see all tokens for one profile.

Bulk reveal

Select rows and Reveal to detokenize up to 100 tokens at once (POST /api/tokens/reveal-bulk). Requires write access (not VIEWER).

Crypto-shred (destroy)

Action	Scope	API
Shred one token	Single row	DELETE /api/tokens/[id] (session) or POST /api/tokens/shred (API key)
Shred selection	Up to 200 IDs	POST /api/tokens/shred-bulk with { "ids": [...] }
Shred entire profile	All tokens with same entityId	POST /api/tokens/shred-bulk with { "entityId": "customer_42" }

Shredding is irreversible: encrypted payload and blind index are erased.

The dashboard asks for confirmation; profile shred requires typing the entityId.

Visibility consistency

List, search, reveal, and shred all use buildTokenVisibility so a user never sees tokens outside their org role, dataset policies, or VIEWER whitelist.