Skip to main content
GET
List your organization's credential issuance records

Authorizations

X-API-Key
string
header
required

Query Parameters

principal_ref
string | null

Only credentials minted for this individual or by this acting principal for a business.

Required string length: 1 - 255
business_ref
string | null

Only credentials minted for this pairwise business reference.

Required string length: 1 - 255
audience
string | null

Only credentials scoped to this counterparty — a domain, or a URL reduced to its hostname.

Required string length: 1 - 512
credential_type
enum<string> | null

Only credentials of this layer. The KYA credential layer.

L2 is the audience-scoped pairwise DID ("same customer returning"); L3 is the selectively disclosed verified-identity credential. Both ride the same SD-JWT-VC wire format; the layer decides what the issuer JWT carries. Counterparty is the counterparty-verification credential (ENG-6598): a domain-bound business entity attestation a merchant hosts for arriving agents — plain JWS, no selective disclosure, no agent key.

Available options:
L2,
L3,
COUNTERPARTY
lifecycle_state
enum<string> | null

Only credentials in this derived state right now: ACTIVE (valid and unexpired), EXPIRED (valid but past expiry), or REVOKED. Distinct from each record's status field, which carries only the persisted revocation status (VALID or REVOKED) — an EXPIRED credential is still status: VALID. A credential's effective state as an issuance-log reader sees it.

Derived, never stored: IssuedCredentialStatus deliberately keeps expiry out of the persisted status (verifiers check exp), but the console and API consumers filter the log by what a credential is right now — still presentable, aged out, or killed.

Available options:
ACTIVE,
EXPIRED,
REVOKED
jti
string | null

Only the credential with this token id.

Minimum string length: 1
limit
integer
default:10

Maximum number of records to return in a single page. Must be between 1 and 1000.

Required range: 1 <= x <= 1000
offset
integer | null

Number of records to skip from the beginning. Use 0 for the first page. Cannot be used with cursor.

Required range: x >= 0
cursor
string | null

Opaque pagination cursor token that identifies the position in the result set. Use the cursor from the previous response to get the next page. Cannot be used with offset.

start_date
string<date> | null

Filter records created on or after this date (format: YYYY-MM-DD).

end_date
string<date> | null

Filter records created on or before this date (format: YYYY-MM-DD).

tz
string
default:UTC

IANA timezone identifier used to interpret start_date and end_date (defaults to UTC).

Examples:

"UTC"

"America/Los_Angeles"

"Europe/London"

Response

Paginated issuance records, newest first, scoped to the calling organization's own mints.

jti
string
required

The credential's unique token id; the issuance-record handle.

credential_type
enum<string>
required

The credential layer minted.

Available options:
L2,
L3,
COUNTERPARTY
status
enum<string>
required

The credential's current revocation status: VALID, or REVOKED once its bit is set on the published status list.

Available options:
VALID,
REVOKED
audience
string
required

The canonical counterparty domain the credential is scoped to.

issued_at
string<date-time>
required

Issuance instant (the issuer JWT's iat).

expires_at
string<date-time>
required

Expiry instant (the issuer JWT's exp).

signing_kid
string
required

The id of the issuer key that signed the credential (the RFC 7638 thumbprint published in the issuer's JWKS).

revoked_at
string<date-time> | null

The instant the credential was revoked; null while it remains valid.

principal_ref
string | null

The pairwise principal reference involved in the mint: the individual subject, or the acting principal who authorized a business mint. Null on counterparty mints and when that principal no longer exists.

business_ref
string | null

The pairwise business reference minted for, as issued to your organization; null on individual mints and when the subject no longer exists.

subject
string | null

Counterparty credentials only: the public business DID the credential's sub claim carries; null on agent credentials.

disclosed_fields
string[]

The dotted disclosure paths the credential carries; empty for L2 mints.

active_keys
string[]

Dotted keys of the identity attributes the credential attests to.

minted_by
string | null

Who initiated the mint, rendered as key: <api key name> for API mints or user: <email> for console mints. Captured at mint time and never rewritten, so it keeps naming the actor after a rename or a deletion — an issuance record describes what was true when the credential minted. Null only on records minted before actor attribution existed.

agent_key_kid
string | null

The caller-supplied kid of the agent key the credential was bound to, if one was provided. Null on counterparty credentials and on records minted before it was recorded.

agent_key_thumbprint
string | null

RFC 7638 thumbprint of the agent public key bound into the credential's cnf claim. Null on counterparty credentials and on records minted before it was recorded.

disclosure_mode
enum<string> | null

The selective-disclosure mode the mint requested. Null on L2 and counterparty mints, and on L3 records minted before it was recorded.

Available options:
CLEARTEXT_AND_HASH,
HASH_ONLY