Skip to main content
POST
Mint a counterparty credential for a business's web domain

Authorizations

X-API-Key
string
header
required

Body

Body for POST /credentials/counterparty: mint the domain-bound business entity credential a merchant hosts for counterparty verification (ENG-6598).

No agent key and no disclosure selection: the credential binds to the merchant's domain rather than a presenting key, and every claim is public-record fact, always disclosed.

business_ref
string
required

Pairwise reference to the verified business the counterparty credential attests, as issued to the calling organization.

Required string length: 1 - 255
domain
string
required

The domain the credential binds to — must match the business's verified website domain. A full URL is reduced to its hostname.

Required string length: 1 - 512

Response

Response

Body for the counterparty mint route: the hostable wire credential and its issuance facts.

credential is one plain EdDSA JWS (typ: bl-counterparty+jwt) — the merchant serves it verbatim at https://<domain>/.well-known/baselayer-counterparty-credential.

credential
string
required

The counterparty credential JWS wire string.

credential_type
enum<string>
required

Always COUNTERPARTY for this route.

Available options:
L2,
L3,
COUNTERPARTY
jti
string
required

The credential's unique token id; the issuance-record handle.

business_ref
string
required

The pairwise business reference minted for.

subject
string
required

The credential's public business DID (the JWT sub claim), derived from the entity's registry coordinates.

domain
string
required

The canonical domain the credential is bound to.

issued_at
string<date-time>
required

Issuance instant (the JWT's iat).

expires_at
string<date-time>
required

Expiry instant (the JWT's exp).

disclosed_fields
string[]

The business.* claim paths the credential carries, in wire form.

active_keys
string[]

The attestation-primitive keys backing the business_verification block.