Issuer Credentials

List issued credentials

get

Lists credentials that have been issued by this issuer instance. The list can be filtered, sorted, and paginated by using the available query parameters. Filtering by credential format is also supported to easily retrieve credentials of a specific format.

Authorizations

bearerAuthmutualTLS

AuthorizationstringOptional

Bearer authentication header of the form Bearer <token>.

Query parameters

orderstring · enumOptionalPossible values:

order_bystring · enumOptionalPossible values:

per_pageinteger · min: 1 · max: 50OptionalDefault: 50

pageinteger · min: 1Optional

formatstring · enumOptional

Filter by credential format (Supported: jwt_vc_json, dc+sd-jwt, mso_mdoc)

Possible values:

Responses

200

Credentials successfully loaded

application/json

400

Invalid query params

application/json

get/issuer/credentials

HTTPcURLJavaScriptPython

GET /issuer/credentials HTTP/1.1
Host: zyfla-wallet-sandbox.meeco.cloud
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

{
  "credentials": [
    {
      "id": "3fa85f64-5717-4562-b3fc-2c963f66afa6",
      "credential": "eyJhbGciOiJFUzI1NiJ9...",
      "format": "jwt_vc_json",
      "credential_configuration_id": "EmailCredential_jwt_vc_json",
      "holder_binding": {
        "jwk": {
          "ANY_ADDITIONAL_PROPERTY": "anything"
        }
      },
      "created_at": "2026-03-03T00:00:00.000Z"
    }
  ],
  "meta": {
    "page": 1,
    "per_page": 10,
    "page_count": 5,
    "records_count": 42,
    "order": "DESC",
    "order_by": "created_at",
    "order_from_params": true,
    "per_page_from_params": true
  }
}

Issue ad-hoc credentials

post

Protected endpoint for ad-hoc issuance of signed credentials by authorised service accounts of the organisation.

A credential of the provided credential_configuration_id will be issued for each key provided (JWK) in binding_keys. The response follows the response of a successful issuance with the OID4VCI protocol. Each credential will be returned in an array of objects.

If binding_keys is not provided, a single credential without holder binding will be issued.

Example:

• credentials: [ { credential: 'ejy0...' } ]

jwt_vc_json and dc+sd-jwt credentials will be returned as a base64url-encoded string of compact JWT.

mso_mdoc credentials will be returned as a base64url-encoded representation of the CBOR-encoded IssuerSigned structure.

Proof of possesion of the binding_keys is not checked.

Supported Standards

• jwt_vc_json: W3C Verifiable Credentials Data Model 1.1

• dc+sd-jwt: SD-JWT-based Verifiable Digital Credentials

• mso_mdoc: ISO 18013-5 Mobile Driving License (mDL) v1.0

Authorizations

bearerAuthmutualTLS

AuthorizationstringOptional

Bearer authentication header of the form Bearer <token>.

Body

application/json

credential_configuration_idstringRequired

ID of the credential configuration to use for issuance.

Example: EmailCredential_jwt_vc_json

signing_kidstringOptional

Optional key ID for the signing key to use. If omitted, the configured organisation wallet key is used.

Responses

200

OK

application/json

400

The request could not be processed due to invalid input. Refer to the detailed error codes and descriptions for more information.

application/json

500Error

application/json

503Error

application/json

post/issuer/credentials

HTTPcURLJavaScriptPython

POST /issuer/credentials HTTP/1.1
Host: zyfla-wallet-sandbox.meeco.cloud
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 277

{
  "credential_configuration_id": "EmailCredential_jwt_vc_json",
  "claims": {
    "first_name": "John",
    "family_name": "Doe"
  },
  "binding_keys": [
    {
      "kty": "EC",
      "crv": "P-256",
      "x": "MKBidNIKdTTheDivDI4eK4GhCzI0FIaK7ZT+eTor3JQ",
      "y": "4cFgTSGUO7GLazVfVTwXhSUnWjTZARKsBd-zo9dTNqg"
    }
  ],
  "signing_kid": "text"
}

{
  "credentials": [
    {
      "credential": "eyJhbGciOiJFUzI1NiJ9..."
    }
  ]
}

Verify credential

post

Verify a credential provided in the request body. This endpoint performs signature, format and optional revocation/schema checks and returns a verification summary. Useful for issuer or operator tooling that needs to verify credentials without a Wallet context.

Authorizations

bearerAuthmutualTLS

AuthorizationstringOptional

Bearer authentication header of the form Bearer <token>.

Body

application/json

credentialstringRequired

Encoded credential (compact JWT or base64url mso_mdoc)

formatstring · enumOptionalPossible values:

Responses

200

Credential verification complete

application/json

idstringRequired

400Error

application/json

500Error

application/json

post/issuer/credentials/verify

HTTPcURLJavaScriptPython

POST /issuer/credentials/verify HTTP/1.1
Host: zyfla-wallet-sandbox.meeco.cloud
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 42

{
  "credential": "text",
  "format": "dc+sd-jwt"
}

{
  "checks": [
    "format"
  ],
  "errors": [
    {
      "error": "text",
      "extra_info": {},
      "message": "text"
    }
  ],
  "id": "text",
  "warnings": [
    {
      "error": "text",
      "extra_info": {},
      "message": "text"
    }
  ]
}

Get issued credential

get

Returns an issued credential if it exists by ID. The credential information includes the original credential content returned at the time of issuance and metadata such as the linked credential template, schema, and status list information if applicable.

Authorizations

bearerAuthmutualTLS

AuthorizationstringOptional

Bearer authentication header of the form Bearer <token>.

Path parameters

idstring · uuidRequired

Responses

200

Credential successfully loaded

application/json

idstring · uuidRequiredExample: 3fa85f64-5717-4562-b3fc-2c963f66afa6

credentialstringRequired

The issued credential. For jwt_vc_json and dc+sd-jwt formats this is a compact JWT string. For mso_mdoc it is a base64url-encoded CBOR-encoded IssuerSigned structure.

Example: eyJhbGciOiJFUzI1NiJ9...

formatstring · enumRequiredExample: jwt_vc_jsonPossible values:

credential_configuration_idstringRequiredExample: EmailCredential_jwt_vc_json

holder_bindingone of · nullableOptional

or

created_atstring · date-timeRequiredExample: 2026-03-03T00:00:00.000Z

400

Invalid path param

application/json

404

Credential not found

application/json

get/issuer/credentials/{id}

HTTPcURLJavaScriptPython

GET /issuer/credentials/{id} HTTP/1.1
Host: zyfla-wallet-sandbox.meeco.cloud
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

{
  "id": "3fa85f64-5717-4562-b3fc-2c963f66afa6",
  "credential": "eyJhbGciOiJFUzI1NiJ9...",
  "format": "jwt_vc_json",
  "credential_configuration_id": "EmailCredential_jwt_vc_json",
  "holder_binding": {
    "jwk": {
      "ANY_ADDITIONAL_PROPERTY": "anything"
    }
  },
  "created_at": "2026-03-03T00:00:00.000Z"
}

Delete issued credential

delete

Deletes an issued credential record by ID. Deleted credentials can no longer be retrieved. Ensure to review the implications before deleting an issued credential, especially if it has been shared with holders or verifiers.

Authorizations

bearerAuthmutualTLS

AuthorizationstringOptional

Bearer authentication header of the form Bearer <token>.

Path parameters

idstring · uuidRequired

Responses

204

Credential deleted

No content

400

Invalid path param

application/json

404

Credential not found

application/json

delete/issuer/credentials/{id}

HTTPcURLJavaScriptPython

DELETE /issuer/credentials/{id} HTTP/1.1
Host: zyfla-wallet-sandbox.meeco.cloud
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

No content

Update credential status list entry

patch

Update credential status list entry for an issuer credential. This endpoint is used to update the revocation status of a credential by modifying the corresponding entry in the linked status list. The specific changes to the status list entry depend on the desired revocation status (e.g., revoked or active) and the implementation of the status list. Ensure to review the implications of changing a credential's revocation status, especially if it has been shared with holders or verifiers.

Supported Standards

• W3C VC Bitstring Status List v1.0

Authorizations

bearerAuthmutualTLS

AuthorizationstringOptional

Bearer authentication header of the form Bearer <token>.

Path parameters

idstring · uuidRequired

Body

application/json

Responses

204

Credential status list entry updated

No content

400

Invalid path param or payload

application/json

404

Credential status not found

application/json

patch/issuer/credentials/{id}/status

HTTPcURLJavaScriptPython

PATCH /issuer/credentials/{id}/status HTTP/1.1
Host: zyfla-wallet-sandbox.meeco.cloud
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 56

{
  "credential_status": {
    "type": "revocation",
    "status": "0"
  }
}

No content