Issue a credential through OpenID4VCI

POST

/oid4vci/credential

curl --request POST \
  --url https://example.com/oid4vci/credential \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "credential_configuration_id": "example", "credential_identifier": "example", "format": "dc+sd-jwt", "proof": { "jwt": "example", "proof_type": "jwt" }, "proofs": { "jwt": [ "example" ] }, "vct": "https://example.com" }'

Materializes at most one dc+sd-jwt credential from the immutable registry-backed evaluation transaction authorized before the issuer-initiated offer. The access token supplies the transaction nonce, holder proof must use EdDSA with did:jwk, and an exact retry returns the cached response without another Relay call or signature. Source-free, delegated, and legacy evaluations are not issuable. Error responses use the OpenID4VCI error envelope, not RFC 9457 Problem Details.

Authorizations

• bearerAuth

Request Body^required

Media typeapplication/json

object

credential_configuration_id

string

credential_identifier

string

format

string

Example

dc+sd-jwt

proof

object

jwt

required

string

proof_type

required

string

Example

jwt

proofs

object

jwt

Array<string>

>= 1 items

vct

string format: uri

Responses

200

Credential response

Media typeapplication/json

object

credential

required

string

credential_profile

string

credentials

Array<object>

object

credential

required

string

key

additional properties

any

format

string

Example

{
  "credential": "eyJhbGciOiJFZERTQSIsInR5cCI6ImRjK3NkLWp3dCJ9.payload.signature~disclosure~",
  "format": "dc+sd-jwt"
}

400

Invalid credential request, proof, or type

Media typeapplication/json

object

error

required

string

error_description

string

Example

{
  "error": "invalid_proof",
  "error_description": "credential proof is invalid"
}

401

Invalid credential access token

Media typeapplication/json

object

error

required

string

error_description

string

Example

{
  "error": "invalid_token",
  "error_description": "credential access token is invalid"
}

403

Credential request is denied

Media typeapplication/json

object

error

required

string

error_description

string

Example

{
  "error": "access_denied",
  "error_description": "credential request is denied"
}

429

Credential request is rate limited

Media typeapplication/json

object

error

required

string

error_description

string

Example

{
  "error": "temporarily_unavailable",
  "error_description": "credential request is rate limited"
}

500

OpenID4VCI issuer failed

Media typeapplication/json

object

error

required

string

error_description

string

Example

{
  "error": "server_error",
  "error_description": "credential issuer failed"
}