---
title: "List issued credentials"
method: GET
path: "/v1/credentials"
tags: ["Credentials"]
---

# List issued credentials

`GET /v1/credentials`

List issued credentials for your tenant. Each credential includes lifecycle status, issuer, validity timestamps, holder confirmation key, and source session information. Use this to manage issued credentials after issuance.

## Response `200`

Array of issued credential records. Each array element contains these fields.

- object[]
  - `expires_at` string, date-time — Timestamp when the credential expires.
  - `holder_cnf` object — Holder confirmation key as a JWK (JSON Web Key) object. Some captured list records include private key material.
    - `crv` string — Elliptic curve name in the JWK (JSON Web Key).
    - `kty` string — JWK (JSON Web Key) key type.
    - `x` string — X coordinate of the key.
    - `y` string — Y coordinate of the key.
  - `iss` string, uri — Issuer URL that issued the credential.
  - `issued_at` string, date-time — Timestamp when the credential was issued.
  - `source_session_id` string — Source Didit verification session identifier. The captured records use an empty string when no source session is linked.
  - `status` string — Lifecycle status of the credential.
  - `status_idx` integer — Status-list index assigned to the credential.
  - `uuid` string, uuid — Unique identifier of the issued credential.
  - `vct` string — VCT (Verifiable Credential Type) value of the issued credential.

## Other responses

- `401` — Unauthorized — a valid tenant API key (Bearer) was not supplied. (Example: missing bearer token.)

---

[API](https://skmtc.net/didit-protocol/apis/didit-credentials-api.md) · [All operations](https://skmtc.net/didit-protocol/apis/didit-credentials-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/didit-protocol/didit-credentials-api/versions/e4eddba66557/schema)