diff --git a/backend/atlas_portal/routes/access_requests.py b/backend/atlas_portal/routes/access_requests.py
index 25a1a6a..6190ab7 100644
--- a/backend/atlas_portal/routes/access_requests.py
+++ b/backend/atlas_portal/routes/access_requests.py
@@ -630,6 +630,9 @@ def register(app) -> None:
 
         payload = request.get_json(silent=True) or {}
         code = (payload.get("request_code") or payload.get("code") or "").strip()
+        reveal_initial_password = bool(
+            payload.get("reveal_initial_password") or payload.get("reveal_password")
+        )
         token = (payload.get("token") or payload.get("verify") or "").strip()
         if not code:
             return jsonify({"error": "request_code is required"}), 400