> For the complete documentation index, see [llms.txt](https://docs.meeco.me/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.meeco.me/openapi-docs/svx-api/well-known-uris.md). # Well Known URIs ## JWT VC Issuer Metadata > A well-known endpoint required to be published as a SD-JWT VC Issuer.\ > \ > Returned metadata is an object with \`issuer\` name and a JWKS that contains public key(s) used in signing issued credentials.\ > \ > \## Purpose\ > \ > Verification of issued credentials.\ > \ > \## Supported Standards\ > \ > \- \[SD-JWT VC - JWT VC Issuer Metadata]\().
```json {"openapi":"3.1.0","info":{"title":"SVX Wallet API","version":"4.0.1"},"servers":[{"url":"https://zyfla-wallet-sandbox.meeco.cloud","description":"SVX Wallet deployment (relative)"}],"security":[],"paths":{"/.well-known/jwt-vc-issuer":{"get":{"summary":"JWT VC Issuer Metadata","description":"A well-known endpoint required to be published as a SD-JWT VC Issuer.\n\nReturned metadata is an object with `issuer` name and a JWKS that contains public key(s) used in signing issued credentials.\n\n## Purpose\n\nVerification of issued credentials.\n\n## Supported Standards\n\n- [SD-JWT VC - JWT VC Issuer Metadata](https://drafts.oauth.net/oauth-sd-jwt-vc/draft-ietf-oauth-sd-jwt-vc.html).\n","responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/WellKnownJwtIssuerResponse"}}},"description":"OK"}},"tags":["Well-Known URIs"]}}},"components":{"schemas":{"WellKnownJwtIssuerResponse":{"properties":{"issuer":{"type":"string"},"jwks":{"properties":{"keys":{"items":{"type":"object","description":"JSON Web Key representing the credential issuer's public key"},"type":"array"}},"type":"object"}},"type":"object"}}}} ``` ## Authorization Server Metadata > Authorization Server metadata as defined in \[RFC8414 - OAuth 2.0 Authorization Server Metadata]\() and extended with additional fields and values in:\ > \ > \- \[RFC 9126 – OAuth 2.0 Pushed Authorization Requests (PAR)]\( > \- \[RFC 9449 - OAuth 2.0 Demonstrating Proof of Possession (DPoP)]\( > \- \[OAuth 2.0 JWT Secured Authorization Response Mode (JARM)]\( > \- \[RFC 9396 - OAuth 2.0 Rich Authorization Requests]\( > \- \[OpenID for Verifiable Credential Issuance (OpenID4VCI 1.0)]\( > \ > The use of this endpoint is optional. It is relevant when the server acts and an Authorization Server. It does so when \`authorization\_servers\` is omitted from Issuer Metadata or when \`authorization\_servers\` contains an item that references the server. In that case, the Credential Issuer is also an Authorization Server and its metadata is retrieved from this endpoint.
```json {"openapi":"3.1.0","info":{"title":"SVX Wallet API","version":"4.0.1"},"servers":[{"url":"https://zyfla-wallet-sandbox.meeco.cloud","description":"SVX Wallet deployment (relative)"}],"security":[],"paths":{"/.well-known/oauth-authorization-server":{"get":{"summary":"Authorization Server Metadata","description":"Authorization Server metadata as defined in [RFC8414 - OAuth 2.0 Authorization Server Metadata](https://datatracker.ietf.org/doc/html/rfc8414) and extended with additional fields and values in:\n\n- [RFC 9126 – OAuth 2.0 Pushed Authorization Requests (PAR)](https://datatracker.ietf.org/doc/rfc9126/)\n- [RFC 9449 - OAuth 2.0 Demonstrating Proof of Possession (DPoP)](https://datatracker.ietf.org/doc/rfc9449/)\n- [OAuth 2.0 JWT Secured Authorization Response Mode (JARM)](https://openid.net/specs/oauth-v2-jarm.html#name-authorization-server-metada)\n- [RFC 9396 - OAuth 2.0 Rich Authorization Requests](https://datatracker.ietf.org/doc/rfc9396/)\n- [OpenID for Verifiable Credential Issuance (OpenID4VCI 1.0)](https://openid.net/specs/openid-4-verifiable-credential-issuance-1_0.html#name-credential-issuer-metadata)\n\nThe use of this endpoint is optional. It is relevant when the server acts and an Authorization Server. It does so when `authorization_servers` is omitted from Issuer Metadata or when `authorization_servers` contains an item that references the server. In that case, the Credential Issuer is also an Authorization Server and its metadata is retrieved from this endpoint.\n","responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/OpenidConfigResponse"}}},"description":"OK"}},"tags":["Well-Known URIs"]}}},"components":{"schemas":{"OpenidConfigResponse":{"properties":{"authorization_endpoint":{"type":"string"},"authorization_response_iss_parameter_supported":{"type":"boolean"},"authorization_signing_alg_values_supported":{"items":{"type":"string"},"type":"array"},"claim_types_supported":{"items":{"type":"string"},"type":"array"},"claims_supported":{"items":{"type":"string"},"type":"array"},"code_challenge_methods_supported":{"items":{"type":"string"},"type":"array"},"grant_types_supported":{"items":{"type":"string"},"type":"array"},"id_token_signing_alg_values_supported":{"items":{"type":"string"},"type":"array"},"issuer":{"type":"string"},"jwks_uri":{"type":"string"},"pushed_authorization_request_endpoint":{"type":"string"},"request_object_signing_alg_values_supported":{"items":{"type":"string"},"type":"array"},"request_parameter_supported":{"type":"boolean"},"request_uri_parameter_supported":{"type":"boolean"},"response_modes_supported":{"items":{"type":"string"},"type":"array"},"response_types_supported":{"items":{"type":"string"},"type":"array"},"scopes_supported":{"items":{"type":"string"},"type":"array"},"subject_types_supported":{"items":{"type":"string"},"type":"array"},"token_endpoint":{"type":"string"},"token_endpoint_auth_methods_supported":{"items":{"type":"string"},"type":"array"}},"type":"object"}}}} ``` ## OpenID Provider Configuration Metadata > This endpoint serves the same content as \`/.well-known/oauth-authorization-server\` and is here for interoperability reasons. The recommendation is\ > to use \`/.well-known/oauth-authorization-server\` whenever possible.\ > \ > \## Supported Standards\ > \ > \- \[OpenID Connect Discovery 1.0]\()
```json {"openapi":"3.1.0","info":{"title":"SVX Wallet API","version":"4.0.1"},"servers":[{"url":"https://zyfla-wallet-sandbox.meeco.cloud","description":"SVX Wallet deployment (relative)"}],"security":[],"paths":{"/.well-known/openid-configuration":{"get":{"summary":"OpenID Provider Configuration Metadata","description":"This endpoint serves the same content as `/.well-known/oauth-authorization-server` and is here for interoperability reasons. The recommendation is\nto use `/.well-known/oauth-authorization-server` whenever possible.\n\n## Supported Standards\n\n- [OpenID Connect Discovery 1.0](https://openid.net/specs/openid-connect-discovery-1_0.html)\n","responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/OpenidConfigResponse"}}},"description":"OK"}},"tags":["Well-Known URIs"]}}},"components":{"schemas":{"OpenidConfigResponse":{"properties":{"authorization_endpoint":{"type":"string"},"authorization_response_iss_parameter_supported":{"type":"boolean"},"authorization_signing_alg_values_supported":{"items":{"type":"string"},"type":"array"},"claim_types_supported":{"items":{"type":"string"},"type":"array"},"claims_supported":{"items":{"type":"string"},"type":"array"},"code_challenge_methods_supported":{"items":{"type":"string"},"type":"array"},"grant_types_supported":{"items":{"type":"string"},"type":"array"},"id_token_signing_alg_values_supported":{"items":{"type":"string"},"type":"array"},"issuer":{"type":"string"},"jwks_uri":{"type":"string"},"pushed_authorization_request_endpoint":{"type":"string"},"request_object_signing_alg_values_supported":{"items":{"type":"string"},"type":"array"},"request_parameter_supported":{"type":"boolean"},"request_uri_parameter_supported":{"type":"boolean"},"response_modes_supported":{"items":{"type":"string"},"type":"array"},"response_types_supported":{"items":{"type":"string"},"type":"array"},"scopes_supported":{"items":{"type":"string"},"type":"array"},"subject_types_supported":{"items":{"type":"string"},"type":"array"},"token_endpoint":{"type":"string"},"token_endpoint_auth_methods_supported":{"items":{"type":"string"},"type":"array"}},"type":"object"}}}} ``` ## Credential Issuer Metadata > Returns the Credential Issuer Metadata document as defined in Section 12.2 of\ > the OpenID for Verifiable Credential Issuance (OID4VCI) specification.\ > \ > This endpoint is mandatory for Credential Issuers and serves as the primary\ > discovery mechanism for wallets and other clients interacting with the issuer.\ > \ > The \`credential\_configurations\_supported\` object is populated from the available Credential Templates.\ > \ > Each configuration describes a credential that can be issued and provides\ > the information required to initiate and complete the issuance flow.\ > \ > \## Supported Standard\ > \[OpenID for Verifiable Credential Issuance]\()
```json {"openapi":"3.1.0","info":{"title":"SVX Wallet API","version":"4.0.1"},"servers":[{"url":"https://zyfla-wallet-sandbox.meeco.cloud","description":"SVX Wallet deployment (relative)"}],"security":[],"paths":{"/.well-known/openid-credential-issuer":{"get":{"summary":"Credential Issuer Metadata","description":"Returns the Credential Issuer Metadata document as defined in Section 12.2 of\nthe OpenID for Verifiable Credential Issuance (OID4VCI) specification.\n\nThis endpoint is mandatory for Credential Issuers and serves as the primary\ndiscovery mechanism for wallets and other clients interacting with the issuer.\n\nThe `credential_configurations_supported` object is populated from the available Credential Templates.\n\nEach configuration describes a credential that can be issued and provides\nthe information required to initiate and complete the issuance flow.\n\n## Supported Standard\n[OpenID for Verifiable Credential Issuance](https://openid.net/specs/openid-4-verifiable-credential-issuance-1_0.html#name-credential-issuer-metadata)\n","responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/WellKnownOpenidCredentialIssuerResponse"}}},"description":"OK"}},"tags":["Well-Known URIs"]}}},"components":{"schemas":{"WellKnownOpenidCredentialIssuerResponse":{"properties":{"authorization_servers":{"items":{"description":"identifier of the OAuth 2.0 Authorization Server (as defined in [RFC8414]) the Credential Issuer relies on for authorization","type":"string"},"type":"array"},"batch_credential_issuance":{"properties":{"batch_size":{"type":"integer"}},"type":"object"},"credential_configurations_supported":{"items":{"$ref":"#/components/schemas/CredentialConfigurationsProperty"},"type":"array"},"credential_endpoint":{"type":"string"},"credential_issuer":{"type":"string"},"display":{"items":{"$ref":"#/components/schemas/DisplayName"},"type":"array"},"nonce_endpoint":{"type":"string","description":"nonce_endpoint is only present if `issuer.issuance_policy.nonce_required` is configured to true.\n\nIf present the `nonce` must be used in the proof sent during credential issuance.\n"}},"type":"object"},"CredentialConfigurationsProperty":{"type":"object","properties":{"credential_metadata":{"type":"object","properties":{"claims":{"$ref":"#/components/schemas/CredentialConfigurationClaims"},"display":{"items":{"$ref":"#/components/schemas/DisplayName"},"type":"array"}}},"credential_definition":{"description":"Object containing the detailed description of the Credential type. Specific for `jwt_vc_json`\n","type":"object","properties":{"type":{"type":"array","items":{"type":"string"}}}},"vct":{"type":"string","description":"credential type identifier specific for `dc+sd-jwt`\n"},"doctype":{"type":"string","description":"document (credential type) identifier specific for `mso_mdoc`\n"},"cryptographic_binding_methods_supported":{"items":{"type":"string"},"type":"array"},"credential_signing_alg_values_supported":{"items":{"type":"string"},"type":"array","description":"numeric alg values supported for COSE. Relevant for `mso_mdoc`\n"},"format":{"type":"string"},"proof_types_supported":{"properties":{"jwt":{"properties":{"proof_signing_alg_values_supported":{"items":{"type":"string"},"type":"array"},"key_attestations_required":{"type":"object","description":"an object even empty signifies that key attestation is required.\n"}},"type":"object"},"attestation":{"type":"object","properties":{"proof_signing_alg_values_supported":{"type":"array","items":{"type":"string"}},"key_attestations_required":{"type":"object","description":"an object even empty signifies that key attestation is required.\n"}}}},"type":"object"},"scope":{"type":"string"}}},"CredentialConfigurationClaims":{"type":"array","items":{"type":"object","properties":{"path":{"type":"array","description":"JSONPath-like segments; each entry can be string, number, or null.","items":{}},"mandatory":{"type":"boolean"},"display":{"type":"array","items":{"type":"object","properties":{"name":{"type":"string"},"locale":{"type":"string"}}}}},"required":["path"]}},"DisplayName":{"properties":{"name":{"type":"string"},"locale":{"type":"string"}},"type":"object"}}}} ``` ## SelectID Relying Party metadata > SelectID Relying Party metadata.\ > \ > Available for SelectID Authorizers to interact with the Wallet as a relying party.
```json {"openapi":"3.1.0","info":{"title":"SVX Wallet API","version":"4.0.1"},"servers":[{"url":"https://zyfla-wallet-sandbox.meeco.cloud","description":"SVX Wallet deployment (relative)"}],"security":[],"paths":{"/.well-known/appspecific/selectid.rp":{"get":{"summary":"SelectID Relying Party metadata","description":"SelectID Relying Party metadata.\n\nAvailable for SelectID Authorizers to interact with the Wallet as a relying party.\n","responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/SelectIDRPConfigResponse"}}},"description":"OK"}},"tags":["Well-Known URIs"]}}},"components":{"schemas":{"SelectIDRPConfigResponse":{"properties":{"issuer":{"type":"string"},"redirect_uris":{"type":"array","items":{"type":"string"}},"client_name":{"type":"string"},"client_uri":{"type":"string"},"logo_uri":{"type":"string"},"jwks_uri":{"type":"string"},"resume_uri":{"type":"string"}}}}}} ```