---
title: "Get issuer testing-surface bootstrap links"
method: GET
path: "/api/oid4vci/v1/testing/instances/{instanceId}/bootstrap"
tags: ["Testing"]
---

# Get issuer testing-surface bootstrap links

`GET /api/oid4vci/v1/testing/instances/{instanceId}/bootstrap`

## Path parameters

- `instanceId` string, required

## Query parameters

- `redirectUri` string, uri

## Response `200`

Public testing-surface routing, login, theme, discovery, and capability metadata.

- IssuerTestingBootstrap
  - `service` 'oid4vci-issuer', required
  - `kind` 'issuer', required
  - `instanceId` string, required
  - `displayName` string, required
  - `access` 'PUBLIC' | 'AS_PROTECTED', required
  - `publicBaseUrl` string, uri, required — Canonical public scheme, authority, and optional instance route prefix. HTTPS is required except for localhost or 127.0.0.1. Contains no query or fragment and has no trailing slash.
  - `displayUrl` string, uri, required — Canonical public testing-console page URL for this instance. This is not the API base; use publicBaseUrl for protocol testing API requests.
  - `themeUrl` string, uri, required — Host-resolved public theme bootstrap URL; never contains the internal tenant identifier.
  - `themeCssUrl` string, uri, required — Host-resolved public theme CSS URL; never contains the internal tenant identifier.
  - `themeApplicationId` string, required — Application id used by the tenant theme resolver for this portal.
  - `discoveryUrl` string, uri, required
  - `capabilitiesUrl` string, uri, required
  - `workspaceUrl` string, uri, required — Explicit operational workspace resource.
  - `discovery` TestingLink[], required
    - `label` string, required
    - `href` string, uri, required
  - `capabilities` IssuerTestingFeatureSet, required
    - `templates` boolean, required
    - `statusLists` boolean, required
    - `dcql` boolean, required
    - `sessions` boolean, required
  - `authentication` IssuerTestingAuthentication, required — Canonical authorization-code with PKCE metadata for an AS-protected testing surface.
    - `mode` 'AUTHORIZATION_CODE_PKCE', required
    - `issuer` string, uri, required
    - `metadataUrl` string, uri, required
    - `authorizationEndpoint` string, uri, required
    - `tokenEndpoint` string, uri, required
    - `jwksUri` string, uri, required
    - `clientId` string, required
    - `redirectUri` string, uri, required
    - `scopes` string[], required
    - `audience` string, required
    - `resource` string, nullable

## Other responses

- `400` — The required redirect URI is missing, malformed, or not registered for the configured client.
- `404` — Testing surface is disabled or unavailable.

---

[API](https://skmtc.net/sphereon-opensource/apis/oid4vci-issuer-integration-api.md) · [All operations](https://skmtc.net/sphereon-opensource/apis/oid4vci-issuer-integration-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/sphereon-opensource/oid4vci-issuer-integration-api/versions/9672e59cf758/schema)