v8

latestOpenAPI 3.1.0raw.githubusercontent.com2026-07-05730512.7 KB

OpenID4VCI Protocol

OpenID4VCI issuer metadata

Fetch the OpenID4VCI (OpenID for Verifiable Credential Issuance) issuer metadata for a tenant. Wallets use this document to discover the credential, nonce, token, and SD-JWT VC (Selective-Disclosure JWT Verifiable Credential) issuer endpoints. The metadata also lists credential configurations keyed by VCT (Verifiable Credential Type).

get/v1/issuers/{slug}/.well-known/openid-credential-issuer

Path parameters

slugstring required

Send the issuer tenant slug.

Response

Didit returned the OpenID4VCI issuer metadata.

credential_endpointstring uri

Call this endpoint to redeem a holder proof for the issued credential.

credential_issuerstring uri

Use this issuer identifier as the audience for holder proofs.

jwt_vc_issuerstring uri

Fetch this URL to get the SD-JWT VC (Selective-Disclosure JWT Verifiable Credential) issuer metadata and JWKS (JSON Web Key Set).

nonce_endpointstring uri

Call this endpoint to mint the nonce for the holder proof.

token_endpointstring uri

Call this endpoint to exchange the pre-authorized code for an issuance access token.

Example response

{
  "credential_configurations_supported": {
    "AgeOver18": {
      "credential_signing_alg_values_supported": [
        "ES256"
      ],
      "cryptographic_binding_methods_supported": [
        "jwk"
      ],
      "format": "dc+sd-jwt",
      "proof_types_supported": {
        "jwt": {
          "proof_signing_alg_values_supported": [
            "<redacted>",
            "<redacted>"
          ]
        }
      },
      "vct": "AgeOver18"
    },
    "AirlineLoyalty": {
      "credential_signing_alg_values_supported": [
        "ES256"
      ],
      "cryptographic_binding_methods_supported": [
        "jwk"
      ],
      "format": "dc+sd-jwt",
      "proof_types_supported": {
        "jwt": {
          "proof_signing_alg_values_supported": [
            "<redacted>",
            "<redacted>"
          ]
        }
      },
      "vct": "AirlineLoyalty"
    },
    "EmployeeBadge": {
      "credential_signing_alg_values_supported": [
        "ES256"
      ],
      "cryptographic_binding_methods_supported": [
        "jwk"
      ],
      "format": "dc+sd-jwt",
      "proof_types_supported": {
        "jwt": {
          "proof_signing_alg_values_supported": [
            "<redacted>",
            "<redacted>"
          ]
        }
      },
      "vct": "EmployeeBadge"
    },
    "MembershipCard": {
      "credential_signing_alg_values_supported": [
        "ES256"
      ],
      "cryptographic_binding_methods_supported": [
        "jwk"
      ],
      "format": "dc+sd-jwt",
      "proof_types_supported": {
        "jwt": {
          "proof_signing_alg_values_supported": [
            "<redacted>",
            "<redacted>"
          ]
        }
      },
      "vct": "MembershipCard"
    },
    "StudentID": {
      "credential_signing_alg_values_supported": [
        "ES256"
      ],
      "cryptographic_binding_methods_supported": [
        "jwk"
      ],
      "format": "dc+sd-jwt",
      "proof_types_supported": {
        "jwt": {
          "proof_signing_alg_values_supported": [
            "<redacted>",
            "<redacted>"
          ]
        }
      },
      "vct": "StudentID"
    }
  },
  "credential_endpoint": "http://localhost:8011/v1/credential",
  "credential_issuer": "http://localhost:8011/v1/issuers/docs-capture-6clew6",
  "jwt_vc_issuer": "http://localhost:8011/v1/issuers/docs-capture-6clew6/.well-known/jwt-vc-issuer",
  "nonce_endpoint": "http://localhost:8011/v1/nonce",
  "token_endpoint": "http://localhost:8011/v1/oauth/token"
}