---
title: "Information about credentials which can be issued."
method: GET
path: "/.well-known/openid-credential-issuer/oid4vci"
tags: ["Well-known endpoints API"]
---

# Information about credentials which can be issued.

`GET /.well-known/openid-credential-issuer/oid4vci`

## Headers

- `Accept` string, required

## Response `200`

Credential Issuer Metadata

- IssuerMetadata — The OID4VCI Credential Issuer Metadata contains information on the Credential Issuer's technical capabilities, supported Credentials, and (internationalized) display information.
  - `credential_issuer` string, required — The Credential Issuer's identifier
  - `authorization_servers` string[]
  - `credential_endpoint` string, required — Information for the holder where to get the credential.
  - `nonce_endpoint` string, required — Nonce for proof of possessions. Required for VCs to be bound to a holder.
  - `deferred_credential_endpoint` string
  - `credential_configurations_supported` object, required
  - `credential_request_encryption` IssuerCredentialRequestEncryption
    - `enc_values_supported` string[], required — List of supported JWE encryption algorithms
    - `zip_values_supported` string[] — If present must be a non-empty array of JWE compression algorithms
    - `encryption_required` boolean, required — Boolean value specifying whether the Credential Issuer requires the additional encryption on top of TLS
    - `jwks` object — A JSON Web Key Set that contains one or more public keys, to be used by the Wallet as an input to a key agreement for encryption of the Credential Request.
  - `credential_response_encryption` IssuerCredentialResponseEncryption
    - `enc_values_supported` string[], required — List of supported JWE encryption algorithms
    - `zip_values_supported` string[] — If present must be a non-empty array of JWE compression algorithms
    - `encryption_required` boolean, required — Boolean value specifying whether the Credential Issuer requires the additional encryption on top of TLS
    - `alg_values_supported` string[], required
  - `batch_credential_issuance` BatchCredentialIssuance
    - `batch_size` integer, required
  - `display` MetadataIssuerDisplayInfo[] — Array of objects, where each object contains display properties of a Credential Issuer for a certain language
    - `locale` string — String value that identifies the language of this object represented as a language tag taken from values defined in BCP47 [RFC5646]. There MUST be only one object for each language identifier.
    - `name` string, required
    - `logo` MetadataLogo
      - `uri` string, required — String value that contains a data URL containing the logo of the Credential Issuer. The Wallet needs to determine the scheme, since the URI value could use the https: scheme, the data: scheme, etc.
      - `alt_text` string — String value of the alternative text for the logo image
  - `profile_version` string
  - `credential_issuer_identity_trust_statement` string — Identity Trust Statement (idTS) JWT proving the issuer's identity within the Swiss Trust ecosystem.

---

[API](https://skmtc.net/swiyu/apis/issuer-service-api.md) · [All operations](https://skmtc.net/swiyu/apis/issuer-service-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/swiyu/issuer-service-api/revisions/3335603aa636/schema)