{
"type": "resource_not_found",
"code": 1,
"message": "Could not locate the resource for the given URI.",
"metadata": {}
}
{
"type": "credential_snapshot_not_current",
"code": 6301,
"message": "The subject's verification is missing, superseded or expired; verify again before minting.",
"metadata": {}
}
{
"type": "invalid_credential_mint_payload",
"code": 6303,
"message": "The credential mint payload failed validation.",
"metadata": {}
}
Mint
Preview what a Level 3 mint would disclose
Takes the mint body and returns the exact leaves a Level 3 mint with the same body would disclose, and the requested paths with nothing on file, one entry per credential the mint would produce. A business preview also returns the operator authorization the credential always carries. Runs the mint’s validation and refusals; signs, stores and allocates nothing.
{
"type": "resource_not_found",
"code": 1,
"message": "Could not locate the resource for the given URI.",
"metadata": {}
}
{
"type": "credential_snapshot_not_current",
"code": 6301,
"message": "The subject's verification is missing, superseded or expired; verify again before minting.",
"metadata": {}
}
{
"type": "invalid_credential_mint_payload",
"code": 6303,
"message": "The credential mint payload failed validation.",
"metadata": {}
}
The counterparty the credential is scoped to: a bare domain (login.example.com), or an https authorization-server identifier (https://login.example.com) kept whole, which derives a different pairwise subject than the bare host. Paths, queries, fragments and non-default ports are refused.
Maximum credential validity in seconds, capped at supporting evidence expiry. Omitted or null uses the server default (3600 seconds). Must not exceed the configured maximum (86400 seconds by default). Applies to Level 2 and Level 3.
L3 only: the dotted disclosure paths the subject credential should carry, e.g. email or hashes.email. A business mint lists business paths here and the actor credential's paths, e.g. given_name, in actor_disclosed_fields.
Level 3 only: disclose a use case's fields instead of listing disclosed_fields; never both. GET /issuance/credentials/presets lists each preset's paths. A preset always shares values in the clear, and B2B presets need a business mint.
Accepted so a mint body previews unchanged; a preview binds no key.
Show child attributes
Response
Response
Body of POST /issuance/credentials/preview: what a mint with the same body
would disclose, without signing, storing or allocating anything. The
mint response's shape, with leaves in place of the credential strings.
The application lane the mint would run in: production for a live application, sandbox for a test one. A self-mint has no test application, so it is always production. The lane does not name the deployment: read that from the token's iss, in the issuer-signed JWT payload (the segment before the first ~).
The credentials a mint would produce, subject first.
Show child attributes
{"docsConfig":{"theme":"mint","$schema":"https://mintlify.com/docs.json","name":"Baselayer","colors":{"primary":"#384ce3","light":"#c6dbf6","dark":"#2232b5"},"logo":{"light":"https://mintcdn.com/baselayer-81245324/D2HqlyNVJCqb8u23/logo/baselayer-wordmark-white.svg?fit=max\u0026auto=format\u0026n=D2HqlyNVJCqb8u23\u0026q=85\u0026s=533e2ee556334e910d3a6d1f2f66ca6a","dark":"https://mintcdn.com/baselayer-81245324/D2HqlyNVJCqb8u23/logo/baselayer-wordmark-white.svg?fit=max\u0026auto=format\u0026n=D2HqlyNVJCqb8u23\u0026q=85\u0026s=533e2ee556334e910d3a6d1f2f66ca6a","href":"https://www.baselayer.com"},"favicon":"https://mintcdn.com/baselayer-81245324/y8jjNyo-CIhfj2Df/favicon.ico?fit=max\u0026auto=format\u0026n=y8jjNyo-CIhfj2Df\u0026q=85\u0026s=5f1029f95d2abd5d4ffd1699330f82ff","navbar":{"links":[{"href":"https://console.baselayer.com","label":"Console"}]},"fonts":{"heading":{"family":"Season Mix","source":"fonts/SeasonMix-Variable.woff2","format":"woff2"},"body":{"family":"Uncut Sans","source":"fonts/UncutSans-Variable.woff2","format":"woff2"}},"styling":{"latex":true},"navigation":{"pages":[]}},"deployment":{"deploymentMetadataValue":{"subdomain":"baselayer-81245324","hasAudioNarration":false,"actualSubdomain":"baselayer-81245324","customDomains":["docs.baselayer.com"],"gitSource":{"type":"github","owner":"osiris-ratings","repo":"docs-mintlify","deployBranch":"main","contentDirectory":"","isPrivate":true,"mountPath":"","label":""},"entitlements":{"AI_CHAT":{"status":"ENABLED"},"WEB_MCP":{"status":"ENABLED"},"NARRATION":{"status":"ENABLED"}},"buildId":"6af26d723a191ec9c64c34e9","clientVersion":"0.0.4094","searchFilterCounts":[{"language":"default","tag":"API Reference","count":286},{"language":"default","tag":"Changelog","count":172},{"language":"default","tag":"Businesses","count":133},{"language":"default","tag":"Webhooks","count":81},{"language":"default","tag":"Know Your Agent","count":73},{"language":"default","tag":"Webhook Events","count":68},{"language":"default","tag":"PRODUCT GUIDES","count":64},{"language":"default","tag":"Verify Businesses \u0026 People","count":60},{"language":"default","tag":"Business Verification","count":49},{"language":"default","tag":"Portfolio Monitoring","count":48}]},"assistantConfig":{"enableAskAiButton":false,"enableStarterQuestions":false,"enableContextualStarterQuestions":false,"enableAskAiSearchBar":true},"basePath":"","hasChatPermissions":true,"hasWebMcpPermissions":true,"toggles":[{"name":"kill-isr","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-rbac-roles","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-mintlify-slack","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-integrations-settings","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"rbac-expansion","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-pr-grouping","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-prefix","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"analytics-v7","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"user-flows-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"no-publish-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-onboarding","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"llms-txt-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving-live","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"stripTemperatureMiddleware","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"support-platform-pylon-zendesk","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"instant-rollback","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications-server","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-fable","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fixed-ai-action-pricing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automation-resolve-merge-conflict","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"scoped-publishing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"mintql","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"page-level-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-version-history-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-page-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"full-page-search","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workspace-projects","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"assistant-v5","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fork-pr-previews","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"revalidation-jwt","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-sso-scim","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"hobby-abuse-scan","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"dashboard-inbox","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-signup","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-dual-write","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-enabled","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"approve-review-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-metadata","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"sso-setup-deadline-banner","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-serve","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"live-agents","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"comment-mode","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false}],"googleFontsInlined":false},"customCss":[{"filePath":"style.css","content":"html:not(.dark) #navbar{background:#384ce3!important}html:not(.dark) #navbar div,html:not(.dark) #navbar nav{background-color:transparent!important;backdrop-filter:none!important}html:not(.dark) #navbar *{border-color:rgba(255, 255, 255, 0.18)!important}html:not(.dark) #navbar a,html:not(.dark) #navbar span,html:not(.dark) #navbar svg,html:not(.dark) #navbar button,html:not(.dark) #navbar p,html:not(.dark) #navbar div{color:#fff!important}html:not(.dark) #navbar button{background:rgba(255, 255, 255, 0.12)!important;border-color:rgba(255, 255, 255, 0.25)!important}"}],"page":{"pagePath":"api-reference/credentials/preview-what-a-level-3-mint-would-disclose","slug":"/api-reference/credentials/preview-what-a-level-3-mint-would-disclose","pageMetadata":{"title":"Preview what a Level 3 mint would disclose","description":"Takes the mint body and returns the exact leaves a Level 3 mint with the same body would disclose, and the requested paths with nothing on file, one entry per credential the mint would produce. A business preview also returns the operator authorization the credential always carries. Runs the mint's validation and refusals; signs, stores and allocates nothing.","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json post /issuance/credentials/preview","href":"/api-reference/credentials/preview-what-a-level-3-mint-would-disclose","autogeneratedByOpenApi":true},"description":{"compiledSource":"\"use strict\";\nconst {jsx: _jsx} = arguments[0];\nconst {useMDXComponents: _provideComponents} = arguments[0];\nfunction _createMdxContent(props) {\n const _components = {\n p: \"p\",\n ..._provideComponents(),\n ...props.components\n };\n return _jsx(_components.p, {\n children: \"Takes the mint body and returns the exact leaves a Level 3 mint with the same body would disclose, and the requested paths with nothing on file, one entry per credential the mint would produce. A business preview also returns the operator authorization the credential always carries. Runs the mint’s validation and refusals; signs, stores and allocates nothing.\"\n });\n}\nfunction MDXContent(props = {}) {\n const {wrapper: MDXLayout} = {\n ..._provideComponents(),\n ...props.components\n };\n return MDXLayout ? _jsx(MDXLayout, {\n ...props,\n children: _jsx(_createMdxContent, {\n ...props\n })\n }) : _createMdxContent(props);\n}\nreturn {\n default: MDXContent\n};\n","frontmatter":{},"scope":{}},"pageType":"default","mdx":{"mdxSource":{"compiledSource":"\"use strict\";const{Fragment:_Fragment,jsx:_jsx}=arguments[0];const{useMDXComponents:_provideComponents}=arguments[0];function _createMdxContent(props){return _jsx(_Fragment,{})}function MDXContent(props={}){const{wrapper:MDXLayout}={..._provideComponents(),...props.components};return MDXLayout?_jsx(MDXLayout,{...props,children:_jsx(_createMdxContent,{...props})}):_createMdxContent(props)}return{default:MDXContent}","frontmatter":{},"scope":{"config":{},"pageMetadata":{"title":"Preview what a Level 3 mint would disclose","description":"Takes the mint body and returns the exact leaves a Level 3 mint with the same body would disclose, and the requested paths with nothing on file, one entry per credential the mint would produce. A business preview also returns the operator authorization the credential always carries. Runs the mint's validation and refusals; signs, stores and allocates nothing.","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json post /issuance/credentials/preview","href":"/api-reference/credentials/preview-what-a-level-3-mint-would-disclose","autogeneratedByOpenApi":true}}},"mdxSourceWithNoJs":null},"mdxExtracts":{"tableOfContents":[],"codeExamples":{}},"jsLinks":["/_mintlify/custom/baselayer-81245324/8f3f8776472b6600/kya-nudge.js"],"openApiReferenceData":{"operation":{"tags":["Credentials"],"summary":"Preview what a Level 3 mint would disclose","description":"Takes the mint body and returns the exact leaves a Level 3 mint with the same body would disclose, and the requested paths with nothing on file, one entry per credential the mint would produce. A business preview also returns the operator authorization the credential always carries. Runs the mint's validation and refusals; signs, stores and allocates nothing.","operationId":"issuance_credentials_preview","requestBody":"49a812a0-be50-40bc-b78b-348e39ccfc51","responses":{"200":"d8dd26cd-9363-42c6-8bb7-4e68fb52ea20","404":"acf429ca-d338-42d7-8271-5b4f5969831f","409":"6176268b-b631-4a17-abc3-cdc7c20357d9","422":"b73765a4-4568-47f2-90ef-99f2d0ccd2eb"},"security":["c1571aad-0cf4-4b05-8502-4484471ed6a4"],"x-computation":true,"method":"post","type":"path","servers":["279408f9-2647-4b56-8ce7-e176bc3fec32"],"path":"/issuance/credentials/preview","baseUrlOptions":["https://api.baselayer.com/"],"title":"Preview what a Level 3 mint would disclose","codeSamples":[],"requiredOnlyExamples":false,"requestExampleType":"generated","responseExampleType":"generated"},"dependencies":{"parameters":{},"requestBody":{"content":{"application/json":{"schema":{"oneOf":[{"type":"object","title":"IndividualCredentialPreviewRequest (v1)","description":"The individual mint body, so one body previews and then mints.\n``agent_key`` is optional and unused; a preview is Level 3 only.","required":["audience","individual_ref","type"],"properties":{"audience":{"description":"The counterparty the credential is scoped to: a bare domain (`login.example.com`), or an https authorization-server identifier (`https://login.example.com`) kept whole, which derives a different pairwise subject than the bare host. Paths, queries, fragments and non-default ports are refused.","maxLength":512,"minLength":1,"title":"Audience","type":"string","isRequired":true,"uniqueKey":"oneOf.0.audience","typeLabel":"string"},"individual_ref":{"description":"Pairwise reference to the verified individual, as issued to the calling organization at verification completion.","maxLength":255,"minLength":1,"title":"Individual Ref","type":"string","isRequired":true,"uniqueKey":"oneOf.0.individual_ref","typeLabel":"string"},"type":{"const":"INDIVIDUAL","description":"`INDIVIDUAL`: the person as themselves.","title":"Type","type":"string","isRequired":true,"uniqueKey":"oneOf.0.type","typeLabel":"string"},"format":{"description":"Credential wire format. `dc+sd-jwt` (media type `application/dc+sd-jwt`, draft-ietf-oauth-sd-jwt-vc-19 §2.1) is the only format issued.","enum":["dc+sd-jwt"],"title":"CredentialWireFormat","type":"string","default":"dc+sd-jwt","uniqueKey":"oneOf.0.format","typeLabel":"enum\u003cstring>"},"level":{"description":"Credential layer to mint (defaults to `L3`): `L2` (audience-scoped pairwise DID) or `L3` (selectively disclosed verified identity).","enum":["L2","L3"],"title":"CredentialMintLevel","type":"string","default":"L3","uniqueKey":"oneOf.0.level","typeLabel":"enum\u003cstring>"},"ttl_seconds":{"oneOf":[{"type":"integer","title":"Ttl Seconds","description":"Maximum credential validity in seconds, capped at supporting evidence expiry. Omitted or null uses the server default (3600 seconds). Must not exceed the configured maximum (86400 seconds by default). Applies to Level 2 and Level 3.","minimum":0,"exclusiveMinimum":true,"uniqueKey":"oneOf.0.ttl_seconds.oneOf.0","typeLabel":"integer"},{"type":"null","title":"Ttl Seconds","description":"Maximum credential validity in seconds, capped at supporting evidence expiry. Omitted or null uses the server default (3600 seconds). Must not exceed the configured maximum (86400 seconds by default). Applies to Level 2 and Level 3.","uniqueKey":"oneOf.0.ttl_seconds.oneOf.1","typeLabel":"null"}],"uniqueKey":"oneOf.0.ttl_seconds","typeLabel":"integer | null"},"disclosed_fields":{"description":"`L3` only: the dotted disclosure paths the subject credential should carry, e.g. `email` or `hashes.email`. A business mint lists business paths here and the actor credential's paths, e.g. `given_name`, in `actor_disclosed_fields`.","items":{"type":"string","uniqueKey":"oneOf.0.disclosed_fields.items.[INDEX]","typeLabel":"string"},"maxItems":64,"title":"Disclosed Fields","type":"array","uniqueKey":"oneOf.0.disclosed_fields","typeLabel":"string[]"},"preset":{"oneOf":[{"type":"string","title":"CredentialPreset","description":"Level 3 only: disclose a use case's fields instead of listing `disclosed_fields`; never both. `GET /issuance/credentials/presets` lists each preset's paths. A preset always shares values in the clear, and B2B presets need a business mint.","enum":["consumer_ecommerce","age_gated","consumer_regulated","b2b_ecommerce","b2b_regulated"],"uniqueKey":"oneOf.0.preset.oneOf.0","typeLabel":"enum\u003cstring>"},{"type":"null","description":"Level 3 only: disclose a use case's fields instead of listing `disclosed_fields`; never both. `GET /issuance/credentials/presets` lists each preset's paths. A preset always shares values in the clear, and B2B presets need a business mint.","uniqueKey":"oneOf.0.preset.oneOf.1","typeLabel":"null"}],"uniqueKey":"oneOf.0.preset","typeLabel":"enum\u003cstring> | null"},"disclosure_mode":{"description":"Level 3 disclosure mode: CLEARTEXT_AND_HASH (default) discloses requested fields as cleartext alongside their recognition hashes; HASH_ONLY discloses only the recognition hashes.","enum":["CLEARTEXT_AND_HASH","HASH_ONLY"],"title":"DisclosureMode","type":"string","default":"CLEARTEXT_AND_HASH","uniqueKey":"oneOf.0.disclosure_mode","typeLabel":"enum\u003cstring>"},"agent_key":{"oneOf":[{"type":"object","title":"CredentialAgentKey (v1)","description":"Accepted so a mint body previews unchanged; a preview binds no key.","required":["x"],"properties":{"x":{"description":"Base64url-encoded Ed25519 public key bytes.","minLength":1,"title":"X","type":"string","isRequired":true,"uniqueKey":"oneOf.0.agent_key.oneOf.0.x","typeLabel":"string"},"kty":{"const":"OKP","default":"OKP","description":"JWK key type; v1 accepts OKP only.","title":"Kty","type":"string","uniqueKey":"oneOf.0.agent_key.oneOf.0.kty","typeLabel":"string"},"crv":{"const":"Ed25519","default":"Ed25519","description":"JWK curve; v1 accepts Ed25519 only.","title":"Crv","type":"string","uniqueKey":"oneOf.0.agent_key.oneOf.0.crv","typeLabel":"string"},"kid":{"oneOf":[{"type":"string","title":"Kid","description":"Optional key identifier.","maxLength":255,"uniqueKey":"oneOf.0.agent_key.oneOf.0.kid.oneOf.0","typeLabel":"string"},{"type":"null","title":"Kid","description":"Optional key identifier.","uniqueKey":"oneOf.0.agent_key.oneOf.0.kid.oneOf.1","typeLabel":"null"}],"uniqueKey":"oneOf.0.agent_key.oneOf.0.kid","typeLabel":"string | null"}},"additionalProperties":false,"uniqueKey":"oneOf.0.agent_key.oneOf.0","typeLabel":"CredentialAgentKey (v1) · object"},{"type":"null","description":"Accepted so a mint body previews unchanged; a preview binds no key.","uniqueKey":"oneOf.0.agent_key.oneOf.1","typeLabel":"null"}],"uniqueKey":"oneOf.0.agent_key","typeLabel":"CredentialAgentKey (v1) · object | null"}},"additionalProperties":false,"uniqueKey":"oneOf.0","typeLabel":"IndividualCredentialPreviewRequest (v1) · object"},{"type":"object","title":"BusinessCredentialPreviewRequest (v1)","description":"The business mint body, so one body previews and then mints.\n``agent_key`` is optional and unused; a preview is Level 3 only.","required":["audience","individual_ref","type","business_ref"],"properties":{"audience":{"description":"The counterparty the credential is scoped to: a bare domain (`login.example.com`), or an https authorization-server identifier (`https://login.example.com`) kept whole, which derives a different pairwise subject than the bare host. Paths, queries, fragments and non-default ports are refused.","maxLength":512,"minLength":1,"title":"Audience","type":"string","isRequired":true,"uniqueKey":"oneOf.1.audience","typeLabel":"string"},"individual_ref":{"description":"Pairwise reference to the verified individual, as issued to the calling organization at verification completion.","maxLength":255,"minLength":1,"title":"Individual Ref","type":"string","isRequired":true,"uniqueKey":"oneOf.1.individual_ref","typeLabel":"string"},"type":{"const":"BUSINESS","description":"`BUSINESS`: a person acting as the operator of the business `business_ref` names.","title":"Type","type":"string","isRequired":true,"uniqueKey":"oneOf.1.type","typeLabel":"string"},"business_ref":{"description":"Pairwise reference to the verified business whose identity the individual assumes, as issued to the calling organization.","maxLength":255,"minLength":1,"title":"Business Ref","type":"string","isRequired":true,"uniqueKey":"oneOf.1.business_ref","typeLabel":"string"},"format":{"description":"Credential wire format. `dc+sd-jwt` (media type `application/dc+sd-jwt`, draft-ietf-oauth-sd-jwt-vc-19 §2.1) is the only format issued.","enum":["dc+sd-jwt"],"title":"CredentialWireFormat","type":"string","default":"dc+sd-jwt","uniqueKey":"oneOf.1.format","typeLabel":"enum\u003cstring>"},"level":{"description":"Credential layer to mint (defaults to `L3`): `L2` (audience-scoped pairwise DID) or `L3` (selectively disclosed verified identity).","enum":["L2","L3"],"title":"CredentialMintLevel","type":"string","default":"L3","uniqueKey":"oneOf.1.level","typeLabel":"enum\u003cstring>"},"ttl_seconds":{"oneOf":[{"type":"integer","title":"Ttl Seconds","description":"Maximum credential validity in seconds, capped at supporting evidence expiry. Omitted or null uses the server default (3600 seconds). Must not exceed the configured maximum (86400 seconds by default). Applies to Level 2 and Level 3.","minimum":0,"exclusiveMinimum":true,"uniqueKey":"oneOf.1.ttl_seconds.oneOf.0","typeLabel":"integer"},{"type":"null","title":"Ttl Seconds","description":"Maximum credential validity in seconds, capped at supporting evidence expiry. Omitted or null uses the server default (3600 seconds). Must not exceed the configured maximum (86400 seconds by default). Applies to Level 2 and Level 3.","uniqueKey":"oneOf.1.ttl_seconds.oneOf.1","typeLabel":"null"}],"uniqueKey":"oneOf.1.ttl_seconds","typeLabel":"integer | null"},"disclosed_fields":{"description":"`L3` only: the dotted disclosure paths the subject credential should carry, e.g. `email` or `hashes.email`. A business mint lists business paths here and the actor credential's paths, e.g. `given_name`, in `actor_disclosed_fields`.","items":{"type":"string","uniqueKey":"oneOf.1.disclosed_fields.items.[INDEX]","typeLabel":"string"},"maxItems":64,"title":"Disclosed Fields","type":"array","uniqueKey":"oneOf.1.disclosed_fields","typeLabel":"string[]"},"preset":{"oneOf":[{"type":"string","title":"CredentialPreset","description":"Level 3 only: disclose a use case's fields instead of listing `disclosed_fields`; never both. `GET /issuance/credentials/presets` lists each preset's paths. A preset always shares values in the clear, and B2B presets need a business mint.","enum":["consumer_ecommerce","age_gated","consumer_regulated","b2b_ecommerce","b2b_regulated"],"uniqueKey":"oneOf.1.preset.oneOf.0","typeLabel":"enum\u003cstring>"},{"type":"null","description":"Level 3 only: disclose a use case's fields instead of listing `disclosed_fields`; never both. `GET /issuance/credentials/presets` lists each preset's paths. A preset always shares values in the clear, and B2B presets need a business mint.","uniqueKey":"oneOf.1.preset.oneOf.1","typeLabel":"null"}],"uniqueKey":"oneOf.1.preset","typeLabel":"enum\u003cstring> | null"},"disclosure_mode":{"description":"Level 3 disclosure mode: CLEARTEXT_AND_HASH (default) discloses requested fields as cleartext alongside their recognition hashes; HASH_ONLY discloses only the recognition hashes.","enum":["CLEARTEXT_AND_HASH","HASH_ONLY"],"title":"DisclosureMode","type":"string","default":"CLEARTEXT_AND_HASH","uniqueKey":"oneOf.1.disclosure_mode","typeLabel":"enum\u003cstring>"},"agent_key":{"oneOf":[{"type":"object","title":"CredentialAgentKey (v1)","description":"Accepted so a mint body previews unchanged; a preview binds no key.","required":["x"],"properties":{"x":{"description":"Base64url-encoded Ed25519 public key bytes.","minLength":1,"title":"X","type":"string","isRequired":true,"uniqueKey":"oneOf.1.agent_key.oneOf.0.x","typeLabel":"string"},"kty":{"const":"OKP","default":"OKP","description":"JWK key type; v1 accepts OKP only.","title":"Kty","type":"string","uniqueKey":"oneOf.1.agent_key.oneOf.0.kty","typeLabel":"string"},"crv":{"const":"Ed25519","default":"Ed25519","description":"JWK curve; v1 accepts Ed25519 only.","title":"Crv","type":"string","uniqueKey":"oneOf.1.agent_key.oneOf.0.crv","typeLabel":"string"},"kid":{"oneOf":[{"type":"string","title":"Kid","description":"Optional key identifier.","maxLength":255,"uniqueKey":"oneOf.1.agent_key.oneOf.0.kid.oneOf.0","typeLabel":"string"},{"type":"null","title":"Kid","description":"Optional key identifier.","uniqueKey":"oneOf.1.agent_key.oneOf.0.kid.oneOf.1","typeLabel":"null"}],"uniqueKey":"oneOf.1.agent_key.oneOf.0.kid","typeLabel":"string | null"}},"additionalProperties":false,"uniqueKey":"oneOf.1.agent_key.oneOf.0","typeLabel":"CredentialAgentKey (v1) · object"},{"type":"null","description":"Accepted so a mint body previews unchanged; a preview binds no key.","uniqueKey":"oneOf.1.agent_key.oneOf.1","typeLabel":"null"}],"uniqueKey":"oneOf.1.agent_key","typeLabel":"CredentialAgentKey (v1) · object | null"},"actor_disclosed_fields":{"description":"`L3` only: the dotted paths the separate actor credential should carry, unprefixed, e.g. `given_name` or `hashes.email` — the individual vocabulary `/vct/kya/individual/v1` lists. Never with `preset`.","items":{"type":"string","uniqueKey":"oneOf.1.actor_disclosed_fields.items.[INDEX]","typeLabel":"string"},"maxItems":64,"title":"Actor Disclosed Fields","type":"array","uniqueKey":"oneOf.1.actor_disclosed_fields","typeLabel":"string[]"}},"additionalProperties":false,"uniqueKey":"oneOf.1","typeLabel":"BusinessCredentialPreviewRequest (v1) · object"}],"uniqueKey":"","typeLabel":"IndividualCredentialPreviewRequest (v1) · object | BusinessCredentialPreviewRequest (v1) · object"},"examples":{"Example":{"title":"Example","value":{"audience":"\u003cstring>","individual_ref":"\u003cstring>","type":"INDIVIDUAL","format":"dc+sd-jwt","level":"L3","ttl_seconds":1,"disclosed_fields":["\u003cstring>"],"disclosure_mode":"CLEARTEXT_AND_HASH","agent_key":{"x":"\u003cstring>","kty":"OKP","crv":"Ed25519","kid":"\u003cstring>"}}}},"exampleType":"generated"},"application/vnd.baselayer.v1+json":{"schema":{"oneOf":[{"type":"object","title":"IndividualCredentialPreviewRequest (v1)","description":"The individual mint body, so one body previews and then mints.\n``agent_key`` is optional and unused; a preview is Level 3 only.","required":["audience","individual_ref","type"],"properties":{"audience":{"description":"The counterparty the credential is scoped to: a bare domain (`login.example.com`), or an https authorization-server identifier (`https://login.example.com`) kept whole, which derives a different pairwise subject than the bare host. Paths, queries, fragments and non-default ports are refused.","maxLength":512,"minLength":1,"title":"Audience","type":"string","isRequired":true,"uniqueKey":"oneOf.0.audience","typeLabel":"string"},"individual_ref":{"description":"Pairwise reference to the verified individual, as issued to the calling organization at verification completion.","maxLength":255,"minLength":1,"title":"Individual Ref","type":"string","isRequired":true,"uniqueKey":"oneOf.0.individual_ref","typeLabel":"string"},"type":{"const":"INDIVIDUAL","description":"`INDIVIDUAL`: the person as themselves.","title":"Type","type":"string","isRequired":true,"uniqueKey":"oneOf.0.type","typeLabel":"string"},"format":{"description":"Credential wire format. `dc+sd-jwt` (media type `application/dc+sd-jwt`, draft-ietf-oauth-sd-jwt-vc-19 §2.1) is the only format issued.","enum":["dc+sd-jwt"],"title":"CredentialWireFormat","type":"string","default":"dc+sd-jwt","uniqueKey":"oneOf.0.format","typeLabel":"enum\u003cstring>"},"level":{"description":"Credential layer to mint (defaults to `L3`): `L2` (audience-scoped pairwise DID) or `L3` (selectively disclosed verified identity).","enum":["L2","L3"],"title":"CredentialMintLevel","type":"string","default":"L3","uniqueKey":"oneOf.0.level","typeLabel":"enum\u003cstring>"},"ttl_seconds":{"oneOf":[{"type":"integer","title":"Ttl Seconds","description":"Maximum credential validity in seconds, capped at supporting evidence expiry. Omitted or null uses the server default (3600 seconds). Must not exceed the configured maximum (86400 seconds by default). Applies to Level 2 and Level 3.","minimum":0,"exclusiveMinimum":true,"uniqueKey":"oneOf.0.ttl_seconds.oneOf.0","typeLabel":"integer"},{"type":"null","title":"Ttl Seconds","description":"Maximum credential validity in seconds, capped at supporting evidence expiry. Omitted or null uses the server default (3600 seconds). Must not exceed the configured maximum (86400 seconds by default). Applies to Level 2 and Level 3.","uniqueKey":"oneOf.0.ttl_seconds.oneOf.1","typeLabel":"null"}],"uniqueKey":"oneOf.0.ttl_seconds","typeLabel":"integer | null"},"disclosed_fields":{"description":"`L3` only: the dotted disclosure paths the subject credential should carry, e.g. `email` or `hashes.email`. A business mint lists business paths here and the actor credential's paths, e.g. `given_name`, in `actor_disclosed_fields`.","items":{"type":"string","uniqueKey":"oneOf.0.disclosed_fields.items.[INDEX]","typeLabel":"string"},"maxItems":64,"title":"Disclosed Fields","type":"array","uniqueKey":"oneOf.0.disclosed_fields","typeLabel":"string[]"},"preset":{"oneOf":[{"type":"string","title":"CredentialPreset","description":"Level 3 only: disclose a use case's fields instead of listing `disclosed_fields`; never both. `GET /issuance/credentials/presets` lists each preset's paths. A preset always shares values in the clear, and B2B presets need a business mint.","enum":["consumer_ecommerce","age_gated","consumer_regulated","b2b_ecommerce","b2b_regulated"],"uniqueKey":"oneOf.0.preset.oneOf.0","typeLabel":"enum\u003cstring>"},{"type":"null","description":"Level 3 only: disclose a use case's fields instead of listing `disclosed_fields`; never both. `GET /issuance/credentials/presets` lists each preset's paths. A preset always shares values in the clear, and B2B presets need a business mint.","uniqueKey":"oneOf.0.preset.oneOf.1","typeLabel":"null"}],"uniqueKey":"oneOf.0.preset","typeLabel":"enum\u003cstring> | null"},"disclosure_mode":{"description":"Level 3 disclosure mode: CLEARTEXT_AND_HASH (default) discloses requested fields as cleartext alongside their recognition hashes; HASH_ONLY discloses only the recognition hashes.","enum":["CLEARTEXT_AND_HASH","HASH_ONLY"],"title":"DisclosureMode","type":"string","default":"CLEARTEXT_AND_HASH","uniqueKey":"oneOf.0.disclosure_mode","typeLabel":"enum\u003cstring>"},"agent_key":{"oneOf":[{"type":"object","title":"CredentialAgentKey (v1)","description":"Accepted so a mint body previews unchanged; a preview binds no key.","required":["x"],"properties":{"x":{"description":"Base64url-encoded Ed25519 public key bytes.","minLength":1,"title":"X","type":"string","isRequired":true,"uniqueKey":"oneOf.0.agent_key.oneOf.0.x","typeLabel":"string"},"kty":{"const":"OKP","default":"OKP","description":"JWK key type; v1 accepts OKP only.","title":"Kty","type":"string","uniqueKey":"oneOf.0.agent_key.oneOf.0.kty","typeLabel":"string"},"crv":{"const":"Ed25519","default":"Ed25519","description":"JWK curve; v1 accepts Ed25519 only.","title":"Crv","type":"string","uniqueKey":"oneOf.0.agent_key.oneOf.0.crv","typeLabel":"string"},"kid":{"oneOf":[{"type":"string","title":"Kid","description":"Optional key identifier.","maxLength":255,"uniqueKey":"oneOf.0.agent_key.oneOf.0.kid.oneOf.0","typeLabel":"string"},{"type":"null","title":"Kid","description":"Optional key identifier.","uniqueKey":"oneOf.0.agent_key.oneOf.0.kid.oneOf.1","typeLabel":"null"}],"uniqueKey":"oneOf.0.agent_key.oneOf.0.kid","typeLabel":"string | null"}},"additionalProperties":false,"uniqueKey":"oneOf.0.agent_key.oneOf.0","typeLabel":"CredentialAgentKey (v1) · object"},{"type":"null","description":"Accepted so a mint body previews unchanged; a preview binds no key.","uniqueKey":"oneOf.0.agent_key.oneOf.1","typeLabel":"null"}],"uniqueKey":"oneOf.0.agent_key","typeLabel":"CredentialAgentKey (v1) · object | null"}},"additionalProperties":false,"uniqueKey":"oneOf.0","typeLabel":"IndividualCredentialPreviewRequest (v1) · object"},{"type":"object","title":"BusinessCredentialPreviewRequest (v1)","description":"The business mint body, so one body previews and then mints.\n``agent_key`` is optional and unused; a preview is Level 3 only.","required":["audience","individual_ref","type","business_ref"],"properties":{"audience":{"description":"The counterparty the credential is scoped to: a bare domain (`login.example.com`), or an https authorization-server identifier (`https://login.example.com`) kept whole, which derives a different pairwise subject than the bare host. Paths, queries, fragments and non-default ports are refused.","maxLength":512,"minLength":1,"title":"Audience","type":"string","isRequired":true,"uniqueKey":"oneOf.1.audience","typeLabel":"string"},"individual_ref":{"description":"Pairwise reference to the verified individual, as issued to the calling organization at verification completion.","maxLength":255,"minLength":1,"title":"Individual Ref","type":"string","isRequired":true,"uniqueKey":"oneOf.1.individual_ref","typeLabel":"string"},"type":{"const":"BUSINESS","description":"`BUSINESS`: a person acting as the operator of the business `business_ref` names.","title":"Type","type":"string","isRequired":true,"uniqueKey":"oneOf.1.type","typeLabel":"string"},"business_ref":{"description":"Pairwise reference to the verified business whose identity the individual assumes, as issued to the calling organization.","maxLength":255,"minLength":1,"title":"Business Ref","type":"string","isRequired":true,"uniqueKey":"oneOf.1.business_ref","typeLabel":"string"},"format":{"description":"Credential wire format. `dc+sd-jwt` (media type `application/dc+sd-jwt`, draft-ietf-oauth-sd-jwt-vc-19 §2.1) is the only format issued.","enum":["dc+sd-jwt"],"title":"CredentialWireFormat","type":"string","default":"dc+sd-jwt","uniqueKey":"oneOf.1.format","typeLabel":"enum\u003cstring>"},"level":{"description":"Credential layer to mint (defaults to `L3`): `L2` (audience-scoped pairwise DID) or `L3` (selectively disclosed verified identity).","enum":["L2","L3"],"title":"CredentialMintLevel","type":"string","default":"L3","uniqueKey":"oneOf.1.level","typeLabel":"enum\u003cstring>"},"ttl_seconds":{"oneOf":[{"type":"integer","title":"Ttl Seconds","description":"Maximum credential validity in seconds, capped at supporting evidence expiry. Omitted or null uses the server default (3600 seconds). Must not exceed the configured maximum (86400 seconds by default). Applies to Level 2 and Level 3.","minimum":0,"exclusiveMinimum":true,"uniqueKey":"oneOf.1.ttl_seconds.oneOf.0","typeLabel":"integer"},{"type":"null","title":"Ttl Seconds","description":"Maximum credential validity in seconds, capped at supporting evidence expiry. Omitted or null uses the server default (3600 seconds). Must not exceed the configured maximum (86400 seconds by default). Applies to Level 2 and Level 3.","uniqueKey":"oneOf.1.ttl_seconds.oneOf.1","typeLabel":"null"}],"uniqueKey":"oneOf.1.ttl_seconds","typeLabel":"integer | null"},"disclosed_fields":{"description":"`L3` only: the dotted disclosure paths the subject credential should carry, e.g. `email` or `hashes.email`. A business mint lists business paths here and the actor credential's paths, e.g. `given_name`, in `actor_disclosed_fields`.","items":{"type":"string","uniqueKey":"oneOf.1.disclosed_fields.items.[INDEX]","typeLabel":"string"},"maxItems":64,"title":"Disclosed Fields","type":"array","uniqueKey":"oneOf.1.disclosed_fields","typeLabel":"string[]"},"preset":{"oneOf":[{"type":"string","title":"CredentialPreset","description":"Level 3 only: disclose a use case's fields instead of listing `disclosed_fields`; never both. `GET /issuance/credentials/presets` lists each preset's paths. A preset always shares values in the clear, and B2B presets need a business mint.","enum":["consumer_ecommerce","age_gated","consumer_regulated","b2b_ecommerce","b2b_regulated"],"uniqueKey":"oneOf.1.preset.oneOf.0","typeLabel":"enum\u003cstring>"},{"type":"null","description":"Level 3 only: disclose a use case's fields instead of listing `disclosed_fields`; never both. `GET /issuance/credentials/presets` lists each preset's paths. A preset always shares values in the clear, and B2B presets need a business mint.","uniqueKey":"oneOf.1.preset.oneOf.1","typeLabel":"null"}],"uniqueKey":"oneOf.1.preset","typeLabel":"enum\u003cstring> | null"},"disclosure_mode":{"description":"Level 3 disclosure mode: CLEARTEXT_AND_HASH (default) discloses requested fields as cleartext alongside their recognition hashes; HASH_ONLY discloses only the recognition hashes.","enum":["CLEARTEXT_AND_HASH","HASH_ONLY"],"title":"DisclosureMode","type":"string","default":"CLEARTEXT_AND_HASH","uniqueKey":"oneOf.1.disclosure_mode","typeLabel":"enum\u003cstring>"},"agent_key":{"oneOf":[{"type":"object","title":"CredentialAgentKey (v1)","description":"Accepted so a mint body previews unchanged; a preview binds no key.","required":["x"],"properties":{"x":{"description":"Base64url-encoded Ed25519 public key bytes.","minLength":1,"title":"X","type":"string","isRequired":true,"uniqueKey":"oneOf.1.agent_key.oneOf.0.x","typeLabel":"string"},"kty":{"const":"OKP","default":"OKP","description":"JWK key type; v1 accepts OKP only.","title":"Kty","type":"string","uniqueKey":"oneOf.1.agent_key.oneOf.0.kty","typeLabel":"string"},"crv":{"const":"Ed25519","default":"Ed25519","description":"JWK curve; v1 accepts Ed25519 only.","title":"Crv","type":"string","uniqueKey":"oneOf.1.agent_key.oneOf.0.crv","typeLabel":"string"},"kid":{"oneOf":[{"type":"string","title":"Kid","description":"Optional key identifier.","maxLength":255,"uniqueKey":"oneOf.1.agent_key.oneOf.0.kid.oneOf.0","typeLabel":"string"},{"type":"null","title":"Kid","description":"Optional key identifier.","uniqueKey":"oneOf.1.agent_key.oneOf.0.kid.oneOf.1","typeLabel":"null"}],"uniqueKey":"oneOf.1.agent_key.oneOf.0.kid","typeLabel":"string | null"}},"additionalProperties":false,"uniqueKey":"oneOf.1.agent_key.oneOf.0","typeLabel":"CredentialAgentKey (v1) · object"},{"type":"null","description":"Accepted so a mint body previews unchanged; a preview binds no key.","uniqueKey":"oneOf.1.agent_key.oneOf.1","typeLabel":"null"}],"uniqueKey":"oneOf.1.agent_key","typeLabel":"CredentialAgentKey (v1) · object | null"},"actor_disclosed_fields":{"description":"`L3` only: the dotted paths the separate actor credential should carry, unprefixed, e.g. `given_name` or `hashes.email` — the individual vocabulary `/vct/kya/individual/v1` lists. Never with `preset`.","items":{"type":"string","uniqueKey":"oneOf.1.actor_disclosed_fields.items.[INDEX]","typeLabel":"string"},"maxItems":64,"title":"Actor Disclosed Fields","type":"array","uniqueKey":"oneOf.1.actor_disclosed_fields","typeLabel":"string[]"}},"additionalProperties":false,"uniqueKey":"oneOf.1","typeLabel":"BusinessCredentialPreviewRequest (v1) · object"}],"uniqueKey":"","typeLabel":"IndividualCredentialPreviewRequest (v1) · object | BusinessCredentialPreviewRequest (v1) · object"},"examples":{"Example":{"title":"Example","value":{"audience":"\u003cstring>","individual_ref":"\u003cstring>","type":"INDIVIDUAL","format":"dc+sd-jwt","level":"L3","ttl_seconds":1,"disclosed_fields":["\u003cstring>"],"disclosure_mode":"CLEARTEXT_AND_HASH","agent_key":{"x":"\u003cstring>","kty":"OKP","crv":"Ed25519","kid":"\u003cstring>"}}}},"exampleType":"generated"}},"required":true,"exampleType":"generated"},"responses":{"d8dd26cd-9363-42c6-8bb7-4e68fb52ea20":{"description":"Response","content":{"application/json":{"schema":{"description":"Body of ``POST /issuance/credentials/preview``: what a mint with the same body\nwould disclose, without signing, storing or allocating anything. The\nmint response's shape, with leaves in place of the credential strings.","properties":{"environment":{"enum":["sandbox","production"],"title":"ApplicationType","type":"string","description":"The application lane the mint would run in: `production` for a live application, `sandbox` for a test one. A self-mint has no test application, so it is always `production`. The lane does not name the deployment: read that from the token's `iss`, in the issuer-signed JWT payload (the segment before the first `~`).","isRequired":true,"uniqueKey":"environment","typeLabel":"enum\u003cstring>"},"ttl_capped":{"description":"Whether supporting evidence expiry would shorten the requested validity.","title":"Ttl Capped","type":"boolean","isRequired":true,"uniqueKey":"ttl_capped","typeLabel":"boolean"},"credentials":{"description":"The credentials a mint would produce, subject first.","items":{"description":"What one credential of a mint with the same body would carry.","properties":{"role":{"description":"Whether this is the subject's or the actor's.","enum":["subject","actor"],"title":"CredentialRole","type":"string","isRequired":true,"uniqueKey":"credentials.items.[INDEX].role","typeLabel":"enum\u003cstring>"},"disclosed":{"description":"The leaves the credential would carry, in path order.","items":{"description":"One leaf a Level 3 mint with the same body would disclose.","properties":{"path":{"description":"The wire-form disclosure path.","title":"Path","type":"string","isRequired":true,"uniqueKey":"credentials.items.[INDEX].disclosed.items.[INDEX].path","typeLabel":"string"},"value":{"description":"The exact value the credential would carry; for a recognition hash, the hash.","isRequired":true,"uniqueKey":"credentials.items.[INDEX].disclosed.items.[INDEX].value","typeLabel":"any"},"hashed":{"description":"Whether the leaf is a recognition hash.","title":"Hashed","type":"boolean","isRequired":true,"uniqueKey":"credentials.items.[INDEX].disclosed.items.[INDEX].hashed","typeLabel":"boolean"}},"required":["path","value","hashed"],"title":"CredentialPreviewDisclosure (v1)","type":"object","uniqueKey":"credentials.items.[INDEX].disclosed.items.[INDEX]","typeLabel":"CredentialPreviewDisclosure (v1) · object"},"title":"Disclosed","type":"array","isRequired":true,"uniqueKey":"credentials.items.[INDEX].disclosed","typeLabel":"CredentialPreviewDisclosure (v1) · object[]"},"missing_paths":{"description":"Requested paths with nothing on file, which the mint would skip. Measured after HASH_ONLY collapses a family onto its hash.","items":{"type":"string","uniqueKey":"credentials.items.[INDEX].missing_paths.items.[INDEX]","typeLabel":"string"},"title":"Missing Paths","type":"array","isRequired":true,"uniqueKey":"credentials.items.[INDEX].missing_paths","typeLabel":"string[]"},"expires_at":{"description":"When a mint now would expire.","format":"date-time","title":"Expires At","type":"string","isRequired":true,"uniqueKey":"credentials.items.[INDEX].expires_at","typeLabel":"string\u003cdate-time>"},"active_keys":{"description":"Names of the verification checks that would pass (e.g. `phone_possession` for an individual, `tax_id_match` for a business), from the token-exchange profile's key vocabulary; the verification level is derived from them.","items":{"type":"string","uniqueKey":"credentials.items.[INDEX].active_keys.items.[INDEX]","typeLabel":"string"},"title":"Active Keys","type":"array","isRequired":true,"uniqueKey":"credentials.items.[INDEX].active_keys","typeLabel":"string[]"},"authorization":{"oneOf":[{"type":"object","title":"CredentialPreviewAuthorization (v1)","description":"A business credential's subject entry only: the operator authorization it always carries.","required":["status","basis","confirmed_at"],"properties":{"status":{"description":"The operator link's status at mint.","enum":["verified"],"title":"L3OperatorLinkStatus","type":"string","isRequired":true,"uniqueKey":"credentials.items.[INDEX].authorization.oneOf.0.status","typeLabel":"enum\u003cstring>"},"basis":{"description":"Why the link is verified: the evidence recipe passed, or a reviewer decided it.","enum":["evidence","reviewer"],"title":"L3OperatorAuthorizationBasis","type":"string","isRequired":true,"uniqueKey":"credentials.items.[INDEX].authorization.oneOf.0.basis","typeLabel":"enum\u003cstring>"},"confirmed_at":{"description":"When the link was last confirmed.","format":"date-time","title":"Confirmed At","type":"string","isRequired":true,"uniqueKey":"credentials.items.[INDEX].authorization.oneOf.0.confirmed_at","typeLabel":"string\u003cdate-time>"}},"uniqueKey":"credentials.items.[INDEX].authorization.oneOf.0","typeLabel":"CredentialPreviewAuthorization (v1) · object"},{"type":"null","description":"A business credential's subject entry only: the operator authorization it always carries.","uniqueKey":"credentials.items.[INDEX].authorization.oneOf.1","typeLabel":"null"}],"uniqueKey":"credentials.items.[INDEX].authorization","typeLabel":"CredentialPreviewAuthorization (v1) · object | null"}},"required":["role","disclosed","missing_paths","expires_at","active_keys"],"title":"CredentialPreviewEntry (v1)","type":"object","uniqueKey":"credentials.items.[INDEX]","typeLabel":"CredentialPreviewEntry (v1) · object"},"title":"Credentials","type":"array","isRequired":true,"uniqueKey":"credentials","typeLabel":"CredentialPreviewEntry (v1) · object[]"}},"required":["environment","ttl_capped","credentials"],"title":"CredentialPreviewResponse (v1)","type":"object","uniqueKey":"","typeLabel":"CredentialPreviewResponse (v1) · object"},"examples":{"Example":{"title":"Example","value":{"environment":"sandbox","ttl_capped":true,"credentials":[{"role":"subject","disclosed":[{"path":"\u003cstring>","value":"\u003cunknown>","hashed":true}],"missing_paths":["\u003cstring>"],"expires_at":"2023-11-07T05:31:56Z","active_keys":["\u003cstring>"],"authorization":{"status":"verified","basis":"evidence","confirmed_at":"2023-11-07T05:31:56Z"}}]}}},"exampleType":"generated"},"application/vnd.baselayer.v1+json":{"schema":{"description":"Body of ``POST /issuance/credentials/preview``: what a mint with the same body\nwould disclose, without signing, storing or allocating anything. The\nmint response's shape, with leaves in place of the credential strings.","properties":{"environment":{"enum":["sandbox","production"],"title":"ApplicationType","type":"string","description":"The application lane the mint would run in: `production` for a live application, `sandbox` for a test one. A self-mint has no test application, so it is always `production`. The lane does not name the deployment: read that from the token's `iss`, in the issuer-signed JWT payload (the segment before the first `~`).","isRequired":true,"uniqueKey":"environment","typeLabel":"enum\u003cstring>"},"ttl_capped":{"description":"Whether supporting evidence expiry would shorten the requested validity.","title":"Ttl Capped","type":"boolean","isRequired":true,"uniqueKey":"ttl_capped","typeLabel":"boolean"},"credentials":{"description":"The credentials a mint would produce, subject first.","items":{"description":"What one credential of a mint with the same body would carry.","properties":{"role":{"description":"Whether this is the subject's or the actor's.","enum":["subject","actor"],"title":"CredentialRole","type":"string","isRequired":true,"uniqueKey":"credentials.items.[INDEX].role","typeLabel":"enum\u003cstring>"},"disclosed":{"description":"The leaves the credential would carry, in path order.","items":{"description":"One leaf a Level 3 mint with the same body would disclose.","properties":{"path":{"description":"The wire-form disclosure path.","title":"Path","type":"string","isRequired":true,"uniqueKey":"credentials.items.[INDEX].disclosed.items.[INDEX].path","typeLabel":"string"},"value":{"description":"The exact value the credential would carry; for a recognition hash, the hash.","isRequired":true,"uniqueKey":"credentials.items.[INDEX].disclosed.items.[INDEX].value","typeLabel":"any"},"hashed":{"description":"Whether the leaf is a recognition hash.","title":"Hashed","type":"boolean","isRequired":true,"uniqueKey":"credentials.items.[INDEX].disclosed.items.[INDEX].hashed","typeLabel":"boolean"}},"required":["path","value","hashed"],"title":"CredentialPreviewDisclosure (v1)","type":"object","uniqueKey":"credentials.items.[INDEX].disclosed.items.[INDEX]","typeLabel":"CredentialPreviewDisclosure (v1) · object"},"title":"Disclosed","type":"array","isRequired":true,"uniqueKey":"credentials.items.[INDEX].disclosed","typeLabel":"CredentialPreviewDisclosure (v1) · object[]"},"missing_paths":{"description":"Requested paths with nothing on file, which the mint would skip. Measured after HASH_ONLY collapses a family onto its hash.","items":{"type":"string","uniqueKey":"credentials.items.[INDEX].missing_paths.items.[INDEX]","typeLabel":"string"},"title":"Missing Paths","type":"array","isRequired":true,"uniqueKey":"credentials.items.[INDEX].missing_paths","typeLabel":"string[]"},"expires_at":{"description":"When a mint now would expire.","format":"date-time","title":"Expires At","type":"string","isRequired":true,"uniqueKey":"credentials.items.[INDEX].expires_at","typeLabel":"string\u003cdate-time>"},"active_keys":{"description":"Names of the verification checks that would pass (e.g. `phone_possession` for an individual, `tax_id_match` for a business), from the token-exchange profile's key vocabulary; the verification level is derived from them.","items":{"type":"string","uniqueKey":"credentials.items.[INDEX].active_keys.items.[INDEX]","typeLabel":"string"},"title":"Active Keys","type":"array","isRequired":true,"uniqueKey":"credentials.items.[INDEX].active_keys","typeLabel":"string[]"},"authorization":{"oneOf":[{"type":"object","title":"CredentialPreviewAuthorization (v1)","description":"A business credential's subject entry only: the operator authorization it always carries.","required":["status","basis","confirmed_at"],"properties":{"status":{"description":"The operator link's status at mint.","enum":["verified"],"title":"L3OperatorLinkStatus","type":"string","isRequired":true,"uniqueKey":"credentials.items.[INDEX].authorization.oneOf.0.status","typeLabel":"enum\u003cstring>"},"basis":{"description":"Why the link is verified: the evidence recipe passed, or a reviewer decided it.","enum":["evidence","reviewer"],"title":"L3OperatorAuthorizationBasis","type":"string","isRequired":true,"uniqueKey":"credentials.items.[INDEX].authorization.oneOf.0.basis","typeLabel":"enum\u003cstring>"},"confirmed_at":{"description":"When the link was last confirmed.","format":"date-time","title":"Confirmed At","type":"string","isRequired":true,"uniqueKey":"credentials.items.[INDEX].authorization.oneOf.0.confirmed_at","typeLabel":"string\u003cdate-time>"}},"uniqueKey":"credentials.items.[INDEX].authorization.oneOf.0","typeLabel":"CredentialPreviewAuthorization (v1) · object"},{"type":"null","description":"A business credential's subject entry only: the operator authorization it always carries.","uniqueKey":"credentials.items.[INDEX].authorization.oneOf.1","typeLabel":"null"}],"uniqueKey":"credentials.items.[INDEX].authorization","typeLabel":"CredentialPreviewAuthorization (v1) · object | null"}},"required":["role","disclosed","missing_paths","expires_at","active_keys"],"title":"CredentialPreviewEntry (v1)","type":"object","uniqueKey":"credentials.items.[INDEX]","typeLabel":"CredentialPreviewEntry (v1) · object"},"title":"Credentials","type":"array","isRequired":true,"uniqueKey":"credentials","typeLabel":"CredentialPreviewEntry (v1) · object[]"}},"required":["environment","ttl_capped","credentials"],"title":"CredentialPreviewResponse (v1)","type":"object","uniqueKey":"","typeLabel":"CredentialPreviewResponse (v1) · object"},"examples":{"Example":{"title":"Example","value":{"environment":"sandbox","ttl_capped":true,"credentials":[{"role":"subject","disclosed":[{"path":"\u003cstring>","value":"\u003cunknown>","hashed":true}],"missing_paths":["\u003cstring>"],"expires_at":"2023-11-07T05:31:56Z","active_keys":["\u003cstring>"],"authorization":{"status":"verified","basis":"evidence","confirmed_at":"2023-11-07T05:31:56Z"}}]}}},"exampleType":"generated"}},"exampleType":"generated"},"acf429ca-d338-42d7-8271-5b4f5969831f":{"description":"A reference is unknown or was issued to another organization — the cases are indistinguishable.","content":{"application/json":{"schema":{"properties":{"type":{"type":"string","title":"Type","description":"Stable snake_case name of the error. Branch on this, never on `message`.","isRequired":true,"uniqueKey":"type","typeLabel":"string"},"code":{"type":"integer","title":"Code","description":"Integer catalog code of the error.","isRequired":true,"uniqueKey":"code","typeLabel":"integer"},"message":{"type":"string","title":"Message","description":"For a person reading a log; not stable and not localized.","isRequired":true,"uniqueKey":"message","typeLabel":"string"},"metadata":{"additionalProperties":true,"type":"object","title":"Metadata","description":"Context documented per `type`.","uniqueKey":"metadata","typeLabel":"Metadata · object"},"request_id":{"oneOf":[{"type":"string","title":"Request Id","description":"The `X-Request-ID` of the failed request.","uniqueKey":"request_id.oneOf.0","typeLabel":"string"},{"type":"null","title":"Request Id","description":"The `X-Request-ID` of the failed request.","uniqueKey":"request_id.oneOf.1","typeLabel":"null"}],"uniqueKey":"request_id","typeLabel":"string | null"}},"type":"object","required":["type","code","message"],"title":"ResourceNotFound","description":"Could not locate the resource for the given URI.","examples":[{"type":"resource_not_found","code":1,"message":"Could not locate the resource for the given URI.","metadata":{}}],"uniqueKey":"","typeLabel":"ResourceNotFound · object"},"examples":{"Example":{"title":"Example","value":{"type":"resource_not_found","code":1,"message":"Could not locate the resource for the given URI.","metadata":{}}}},"exampleType":"generated"}},"exampleType":"generated"},"6176268b-b631-4a17-abc3-cdc7c20357d9":{"description":"The mint would be refused: the snapshot is not current, or (business) the operator link is not verified.","content":{"application/json":{"schema":{"properties":{"type":{"type":"string","title":"Type","description":"Stable snake_case name of the error. Branch on this, never on `message`.","isRequired":true,"uniqueKey":"type","typeLabel":"string"},"code":{"type":"integer","title":"Code","description":"Integer catalog code of the error.","isRequired":true,"uniqueKey":"code","typeLabel":"integer"},"message":{"type":"string","title":"Message","description":"For a person reading a log; not stable and not localized.","isRequired":true,"uniqueKey":"message","typeLabel":"string"},"metadata":{"additionalProperties":true,"type":"object","title":"Metadata","description":"Context documented per `type`.","uniqueKey":"metadata","typeLabel":"Metadata · object"},"request_id":{"oneOf":[{"type":"string","title":"Request Id","description":"The `X-Request-ID` of the failed request.","uniqueKey":"request_id.oneOf.0","typeLabel":"string"},{"type":"null","title":"Request Id","description":"The `X-Request-ID` of the failed request.","uniqueKey":"request_id.oneOf.1","typeLabel":"null"}],"uniqueKey":"request_id","typeLabel":"string | null"}},"type":"object","required":["type","code","message"],"title":"CredentialSnapshotNotCurrent","description":"The subject's verification is missing, superseded or expired; verify again before minting.","examples":[{"type":"credential_snapshot_not_current","code":6301,"message":"The subject's verification is missing, superseded or expired; verify again before minting.","metadata":{}}],"uniqueKey":"","typeLabel":"CredentialSnapshotNotCurrent · object"},"examples":{"Example":{"title":"Example","value":{"type":"credential_snapshot_not_current","code":6301,"message":"The subject's verification is missing, superseded or expired; verify again before minting.","metadata":{}}}},"exampleType":"generated"}},"exampleType":"generated"},"b73765a4-4568-47f2-90ef-99f2d0ccd2eb":{"description":"The body failed validation (including a Level 2 `level`), the audience cannot be canonicalized, or a path is outside the vault schema.","content":{"application/json":{"schema":{"properties":{"type":{"type":"string","title":"Type","description":"Stable snake_case name of the error. Branch on this, never on `message`.","isRequired":true,"uniqueKey":"type","typeLabel":"string"},"code":{"type":"integer","title":"Code","description":"Integer catalog code of the error.","isRequired":true,"uniqueKey":"code","typeLabel":"integer"},"message":{"type":"string","title":"Message","description":"For a person reading a log; not stable and not localized.","isRequired":true,"uniqueKey":"message","typeLabel":"string"},"metadata":{"additionalProperties":true,"type":"object","title":"Metadata","description":"Context documented per `type`.","uniqueKey":"metadata","typeLabel":"Metadata · object"},"request_id":{"oneOf":[{"type":"string","title":"Request Id","description":"The `X-Request-ID` of the failed request.","uniqueKey":"request_id.oneOf.0","typeLabel":"string"},{"type":"null","title":"Request Id","description":"The `X-Request-ID` of the failed request.","uniqueKey":"request_id.oneOf.1","typeLabel":"null"}],"uniqueKey":"request_id","typeLabel":"string | null"}},"type":"object","required":["type","code","message"],"title":"InvalidCredentialMintPayload","description":"The credential mint payload failed validation.","examples":[{"type":"invalid_credential_mint_payload","code":6303,"message":"The credential mint payload failed validation.","metadata":{}}],"uniqueKey":"","typeLabel":"InvalidCredentialMintPayload · object"},"examples":{"Example":{"title":"Example","value":{"type":"invalid_credential_mint_payload","code":6303,"message":"The credential mint payload failed validation.","metadata":{}}}},"exampleType":"generated"}},"exampleType":"generated"}},"security":{"c1571aad-0cf4-4b05-8502-4484471ed6a4":{"APIKeyHeader":{"type":"apiKey","in":"header","name":"X-API-Key","scopes":[],"schemeName":"APIKeyHeader"}}},"servers":{"279408f9-2647-4b56-8ce7-e176bc3fec32":{"url":"https://api.baselayer.com/"}},"processedSecurityOptions":[{"schemes":[{"scheme":{"type":"apiKey","in":"header","name":"X-API-Key","scopes":[],"schemeName":"APIKeyHeader"},"schema":{"title":"X-API-Key","type":"string","isRequired":true,"typeLabel":"string","deprecated":false},"schemeName":"APIKeyHeader","name":"X-API-Key"}],"title":"APIKeyHeader"}]},"originalFileLocation":"api-reference/openapi.json"},"subdomain":"baselayer-81245324","siteName":"Baselayer","title":"Preview what a Level 3 mint would disclose - Baselayer","navMaps":{"firstHrefInVersion":{},"firstHrefInLanguage":{}},"lastModified":"2026-11-10T00:56:04.225Z","originalFileLocation":"api-reference/credentials/preview-what-a-level-3-mint-would-disclose.mdx"},"headHtml":"\u003cscript data-mint-head>(function(){var d=document.documentElement,p=null;if(!p){try{p=localStorage.getItem(\"isDarkMode\")}catch(e){}if(p==='true')p='dark';else if(p==='false')p='light';if(p!=='light'\u0026\u0026p!=='dark'\u0026\u0026p!=='system')p=\"system\"}var r=p==='system'?(matchMedia(\"(prefers-color-scheme: dark)\").matches?'dark':'light'):p;d.classList.remove(r==='dark'?'light':'dark');d.classList.add(r);d.setAttribute(\"data-theme-preference\",p)})();\u003c/script>\u003cmeta data-mint-head name=\"description\" content=\"Takes the mint body and returns the exact leaves a Level 3 mint with the same body would disclose, and the requested paths with nothing on file, one entry per credential the mint would produce. A business preview also returns the operator authorization the credential always carries. Runs the mint\u0026#x27;s validation and refusals; signs, stores and allocates nothing.\">\u003cmeta data-mint-head name=\"application-name\" content=\"Baselayer\">\u003cmeta data-mint-head name=\"generator\" content=\"Mintlify\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/baselayer-81245324/PX_ZXIXr1oHoY_hi/_generated/favicon/android-chrome-192x192.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"apple-touch-icon\" type=\"image/png\" sizes=\"180x180\" href=\"/mintlify-assets/_mintlify/favicons/baselayer-81245324/PX_ZXIXr1oHoY_hi/_generated/favicon/apple-touch-icon.png\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/baselayer-81245324/PX_ZXIXr1oHoY_hi/_generated/favicon/favicon-16x16.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/baselayer-81245324/PX_ZXIXr1oHoY_hi/_generated/favicon/favicon-32x32.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/baselayer-81245324/PX_ZXIXr1oHoY_hi/_generated/favicon/favicon.ico\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/baselayer-81245324/PX_ZXIXr1oHoY_hi/_generated/favicon-dark/android-chrome-192x192.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/baselayer-81245324/PX_ZXIXr1oHoY_hi/_generated/favicon-dark/favicon-16x16.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/baselayer-81245324/PX_ZXIXr1oHoY_hi/_generated/favicon-dark/favicon-32x32.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/baselayer-81245324/PX_ZXIXr1oHoY_hi/_generated/favicon-dark/favicon.ico\" media=\"(prefers-color-scheme: dark)\">\u003cmeta data-mint-head property=\"og:title\" content=\"Preview what a Level 3 mint would disclose - Baselayer\">\u003cmeta data-mint-head property=\"og:description\" content=\"Takes the mint body and returns the exact leaves a Level 3 mint with the same body would disclose, and the requested paths with nothing on file, one entry per credential the mint would produce. A business preview also returns the operator authorization the credential always carries. Runs the mint\u0026#x27;s validation and refusals; signs, stores and allocates nothing.\">\u003cmeta data-mint-head property=\"og:site_name\" content=\"Baselayer\">\u003cmeta data-mint-head property=\"og:url\" content=\"https://docs.baselayer.com/api-reference/credentials/preview-what-a-level-3-mint-would-disclose\">\u003cmeta data-mint-head property=\"og:type\" content=\"website\">\u003cmeta data-mint-head property=\"og:image\" content=\"https://baselayer-81245324.mintlify.site/_mintlify/api/og/v2?division=Mint\u0026amp;title=Preview+what+a+Level+3+mint+would+disclose\u0026amp;description=Takes+the+mint+body+and+returns+the+exact+leaves+a+Level+3+mint+with+the+same+body+would+disclose%2C+and+the+requested+paths+with+nothing+on+file%2C+one+entry+per+c\u0026amp;theme=8062a696da8f8e4202f95a94\u0026amp;signature=03ab57fbe0a96e6021e6a044cdc6eba03207c36fb8097be1e08f5829d55419a1\">\u003cmeta data-mint-head property=\"og:image:width\" content=\"1200\">\u003cmeta data-mint-head property=\"og:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"twitter:card\" content=\"summary_large_image\">\u003cmeta data-mint-head name=\"twitter:title\" content=\"Preview what a Level 3 mint would disclose - Baselayer\">\u003cmeta data-mint-head name=\"twitter:description\" content=\"Takes the mint body and returns the exact leaves a Level 3 mint with the same body would disclose, and the requested paths with nothing on file, one entry per credential the mint would produce. A business preview also returns the operator authorization the credential always carries. Runs the mint\u0026#x27;s validation and refusals; signs, stores and allocates nothing.\">\u003cmeta data-mint-head name=\"twitter:image\" content=\"https://baselayer-81245324.mintlify.site/_mintlify/api/og/v2?division=Mint\u0026amp;title=Preview+what+a+Level+3+mint+would+disclose\u0026amp;description=Takes+the+mint+body+and+returns+the+exact+leaves+a+Level+3+mint+with+the+same+body+would+disclose%2C+and+the+requested+paths+with+nothing+on+file%2C+one+entry+per+c\u0026amp;theme=8062a696da8f8e4202f95a94\u0026amp;signature=03ab57fbe0a96e6021e6a044cdc6eba03207c36fb8097be1e08f5829d55419a1\">\u003cmeta data-mint-head name=\"twitter:image:width\" content=\"1200\">\u003cmeta data-mint-head name=\"twitter:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"msapplication-config\" content=\"/mintlify-assets/_mintlify/favicons/baselayer-81245324/PX_ZXIXr1oHoY_hi/_generated/favicon/browserconfig.xml\">\u003cmeta data-mint-head name=\"apple-mobile-web-app-title\" content=\"Baselayer\">\u003cmeta data-mint-head name=\"msapplication-TileColor\" content=\"#384ce3\">\u003clink data-mint-head rel=\"canonical\" href=\"https://docs.baselayer.com/api-reference/credentials/preview-what-a-level-3-mint-would-disclose\">\u003clink data-mint-head rel=\"alternate\" type=\"application/xml\" href=\"/sitemap.xml\">\u003clink data-mint-head rel=\"alternate\" type=\"text/markdown\" href=\"/api-reference/credentials/preview-what-a-level-3-mint-would-disclose.md\">\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https://docs.baselayer.com/#organization\",\"name\":\"Baselayer\",\"url\":\"https://docs.baselayer.com\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https://mintcdn.com/baselayer-81245324/D2HqlyNVJCqb8u23/logo/baselayer-wordmark-white.svg?fit=max\u0026auto=format\u0026n=D2HqlyNVJCqb8u23\u0026q=85\u0026s=533e2ee556334e910d3a6d1f2f66ca6a\"}},{\"@type\":\"WebSite\",\"@id\":\"https://docs.baselayer.com#website\",\"name\":\"Baselayer\",\"url\":\"https://docs.baselayer.com\",\"publisher\":{\"@id\":\"https://docs.baselayer.com/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https://docs.baselayer.com/api-reference/credentials/preview-what-a-level-3-mint-would-disclose#webpage\",\"url\":\"https://docs.baselayer.com/api-reference/credentials/preview-what-a-level-3-mint-would-disclose\",\"name\":\"Preview what a Level 3 mint would disclose\",\"description\":\"Takes the mint body and returns the exact leaves a Level 3 mint with the same body would disclose, and the requested paths with nothing on file, one entry per credential the mint would produce. A business preview also returns the operator authorization the credential always carries. Runs the mint's validation and refusals; signs, stores and allocates nothing.\",\"dateModified\":\"2026-11-10T00:56:04.225Z\",\"isPartOf\":{\"@id\":\"https://docs.baselayer.com#website\"},\"breadcrumb\":{\"@id\":\"https://docs.baselayer.com/api-reference/credentials/preview-what-a-level-3-mint-would-disclose#breadcrumb\"}},{\"@type\":\"BreadcrumbList\",\"@id\":\"https://docs.baselayer.com/api-reference/credentials/preview-what-a-level-3-mint-would-disclose#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Credentials\",\"item\":\"https://docs.baselayer.com/api-reference/credentials/mint-a-credential-for-a-person-or-a-business-operator\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Mint\",\"item\":\"https://docs.baselayer.com/api-reference/credentials/mint-a-credential-for-a-person-or-a-business-operator\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Preview what a Level 3 mint would disclose\",\"item\":\"https://docs.baselayer.com/api-reference/credentials/preview-what-a-level-3-mint-would-disclose\"}]},{\"@type\":[\"TechArticle\",\"APIReference\"],\"@id\":\"https://docs.baselayer.com/api-reference/credentials/preview-what-a-level-3-mint-would-disclose#apireference\",\"headline\":\"Preview what a Level 3 mint would disclose\",\"name\":\"Preview what a Level 3 mint would disclose\",\"description\":\"Takes the mint body and returns the exact leaves a Level 3 mint with the same body would disclose, and the requested paths with nothing on file, one entry per credential the mint would produce. A business preview also returns the operator authorization the credential always carries. Runs the mint's validation and refusals; signs, stores and allocates nothing.\",\"url\":\"https://docs.baselayer.com/api-reference/credentials/preview-what-a-level-3-mint-would-disclose\",\"mainEntityOfPage\":{\"@id\":\"https://docs.baselayer.com/api-reference/credentials/preview-what-a-level-3-mint-would-disclose#webpage\"},\"dateModified\":\"2026-11-10T00:56:04.225Z\",\"publisher\":{\"@id\":\"https://docs.baselayer.com/#organization\"},\"isPartOf\":{\"@id\":\"https://docs.baselayer.com#website\"}}]}\u003c/script>\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@type\":\"WebSite\",\"name\":\"Baselayer\",\"creator\":{\"@type\":\"Organization\",\"name\":\"Mintlify\",\"url\":\"https://mintlify.com\"}}\u003c/script>","siteName":"Baselayer","nav":{"global":null,"tabs":[{"tab":"Get Started","icon":"rocket","pages":[{"title":"Get Started","href":"/docs/meet-baselayer"}]},{"tab":"Verify Businesses \u0026 People","icon":"book-open","pages":[{"title":"Verify Businesses \u0026 People","href":"/docs/business-verification-basics"}]},{"tab":"Know Your Agent","icon":"robot","pages":[{"title":"Know Your Agent","href":"/docs/kya-overview"}]},{"tab":"Hosted Enrollment","icon":"id-card","pages":[{"title":"Hosted Enrollment","href":"/hosted-enrollment/overview"}]},{"tab":"MCP","icon":"plug","pages":[{"title":"MCP","href":"/docs/mcp"}]},{"tab":"API Reference","icon":"square-terminal","anchors":[{"anchor":"Businesses","icon":"building","pages":[{"title":"Businesses","href":"/api-reference/search/post-search"}]},{"anchor":"People","icon":"user","pages":[{"title":"People","href":"/api-reference/people/create-person"}]},{"anchor":"Know Your Agent","icon":"robot","groups":[{"group":"Credentials","pages":[{"group":"Mint","pages":[{"title":"Mint a credential for a person or a business operator","description":"Mints a Level 2 or Level 3 SD-JWT-VC credential for a verified individual, referenced by the `individual_ref` issued to your organization, scoped to a counterparty `audience`, and bound to the presenting agent's public key. `type` chooses whose credential: `INDIVIDUAL` for the person as themselves, `BUSINESS` for the person acting as the operator of the business `business_ref` names, which is never inferred and requires a verified operator link. Every credential is issuer-signed with `sub` (the audience-scoped pairwise DID of the person or business, stable across mints and levels) and `aud` (the canonical audience). A business Level 3 mint answers with two credentials, the business's and the actor's. Credentials are short-lived projections of current verification: mint on demand rather than storing them long-term. Send an `Idempotency-Key`: a retry with the same key and body within 24 hours answers with the same credentials, marked `Idempotent-Replayed: true`, instead of minting again.","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json post /issuance/credentials","href":"/api-reference/credentials/mint-a-credential-for-a-person-or-a-business-operator"},{"title":"Preview what a Level 3 mint would disclose","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json post /issuance/credentials/preview","href":"/api-reference/credentials/preview-what-a-level-3-mint-would-disclose"},{"title":"List the presets a Level 3 mint can disclose by","description":"Lists the credential presets, by name by default, a page at a time (`limit`, default 10, maximum 1000; follow `X-Next-Cursor`): a use case a Level 3 mint can name as `preset` instead of listing `disclosed_fields`, with the exact paths it requests on an individual mint and on a business mint. Paths with nothing on file are skipped at mint time. `is_individual_default` and `is_business_default` name the most conservative preset per hat, the one a mint uses when it names none. The list is the same for every caller and fixed for an API release, so it may be cached for an hour.","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /issuance/credentials/presets","href":"/api-reference/credentials/list-the-presets-a-level-3-mint-can-disclose-by"},{"title":"Mint a test credential for a person or a business operator","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json post /issuance/credentials/test","href":"/api-reference/credentials/mint-a-test-credential-for-a-person-or-a-business-operator"},{"title":"Preview what a Level 3 test mint would disclose","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json post /issuance/credentials/test/preview","href":"/api-reference/credentials/preview-what-a-level-3-test-mint-would-disclose"}]},{"group":"Issued Credentials","pages":[{"title":"Resolve one credential record by its credential_id","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /issuance/credentials/{credential_id}","href":"/api-reference/credentials/resolve-one-credential-record-by-its-credential_id"},{"title":"List your organization's credential records","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /issuance/credentials","href":"/api-reference/credentials/list-your-organizations-credential-records"},{"title":"Revoke one credential","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json post /issuance/credentials/{credential_id}/revoke","href":"/api-reference/credentials/revoke-one-credential"}]},{"group":"Credential Events","pages":[{"title":"List your organization's credential events","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /issuance/credentials/events","href":"/api-reference/credentials/list-your-organizations-credential-events"},{"title":"Export your organization's credential events","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /issuance/credentials/events/export","href":"/api-reference/credentials/export-your-organizations-credential-events"}]}]},{"group":"Identities","pages":[{"group":"Hosted Sessions","pages":[{"title":"Start a hosted enrollment session","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json post /onboarding/sessions","href":"/api-reference/onboarding/start-a-hosted-enrollment-session"},{"title":"Get a hosted enrollment session","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /onboarding/sessions/{session_id}","href":"/api-reference/onboarding/get-a-hosted-enrollment-session"},{"title":"Get a hosted enrollment session's results","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /onboarding/sessions/{session_id}/results","href":"/api-reference/onboarding/get-a-hosted-enrollment-sessions-results"}]},{"group":"Direct Verifications","pages":[{"title":"Start a direct verification","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json post /issuance/identities/verifications","href":"/api-reference/identities/start-a-direct-verification"},{"title":"Get a direct verification","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /issuance/identities/verifications/{verification_id}","href":"/api-reference/identities/get-a-direct-verification"},{"title":"List direct verifications","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /issuance/identities/verifications","href":"/api-reference/identities/list-direct-verifications"}]},{"group":"Verified Identities","pages":[{"title":"List the individuals your organization has verified","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /issuance/identities/individuals","href":"/api-reference/identities/list-the-individuals-your-organization-has-verified"},{"title":"Look up a verified identity by pairwise reference","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /issuance/identities/individuals/{individual_ref}","href":"/api-reference/identities/look-up-a-verified-identity-by-pairwise-reference"},{"title":"Re-verify an identity from its stored verification","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json post /issuance/identities/individuals/{individual_ref}/reverify","href":"/api-reference/identities/re-verify-an-identity-from-its-stored-verification"},{"title":"List the businesses your organization has verified","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /issuance/identities/businesses","href":"/api-reference/identities/list-the-businesses-your-organization-has-verified"},{"title":"Look up a verified business by pairwise reference","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /issuance/identities/businesses/{business_ref}","href":"/api-reference/identities/look-up-a-verified-business-by-pairwise-reference"}]},{"group":"Operator Links","pages":[{"title":"List your organization's operator links","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /issuance/identities/operator_links","href":"/api-reference/identities/list-your-organizations-operator-links"},{"title":"Get one operator link with its evidence","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /issuance/identities/businesses/{business_ref}/operator_links/{individual_ref}","href":"/api-reference/identities/get-one-operator-link-with-its-evidence"},{"title":"Verify or reject that an individual operates a business","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json post /issuance/identities/businesses/{business_ref}/operator_links/{individual_ref}/decide","href":"/api-reference/identities/verify-or-reject-that-an-individual-operates-a-business"}]}]},{"group":"Public keys and status lists","pages":[{"title":"Resolve the credential issuer's DID document","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /.well-known/did.json","href":"/api-reference/registry/resolve-the-credential-issuers-did-document"},{"title":"Fetch the credential issuer's public keys (JWKS)","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /.well-known/jwks.json","href":"/api-reference/registry/fetch-the-credential-issuers-public-keys-jwks"},{"title":"Fetch the credential issuer's JWT VC Issuer Metadata","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /.well-known/jwt-vc-issuer","href":"/api-reference/registry/fetch-the-credential-issuers-jwt-vc-issuer-metadata"},{"title":"Fetch the credential status list token","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /statuslists/{list_id}","href":"/api-reference/registry/fetch-the-credential-status-list-token"},{"title":"Fetch the individual credential's type metadata","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /vct/kya/individual/v1","href":"/api-reference/registry/fetch-the-individual-credentials-type-metadata"},{"title":"Fetch the business credential's type metadata","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /vct/kya/business/v1","href":"/api-reference/registry/fetch-the-business-credentials-type-metadata"}]},{"group":"Audit Log","pages":[{"title":"Read the calling organization's slice of the audit log","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /issuance/audit_log","href":"/api-reference/audit-log/read-the-calling-organizations-slice-of-the-audit-log"}]},{"group":"Acceptance","pages":[{"group":"Visits","pages":[{"title":"List your application's visits","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /acceptance/visits","href":"/api-reference/acceptance/list-your-applications-visits"},{"title":"Get one visit","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /acceptance/visits/{visit_id}","href":"/api-reference/acceptance/get-one-visit"},{"title":"List one visit's timeline","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /acceptance/visits/{visit_id}/timeline","href":"/api-reference/acceptance/list-one-visits-timeline"},{"title":"List one visit's decisions","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /acceptance/visits/{visit_id}/decisions","href":"/api-reference/acceptance/list-one-visits-decisions"}]},{"group":"Decisions","pages":[{"title":"List your application's decisions","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /acceptance/decisions","href":"/api-reference/acceptance/list-your-applications-decisions"},{"title":"Get one decision","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /acceptance/decisions/{decision_id}","href":"/api-reference/acceptance/get-one-decision"}]},{"group":"Policy","pages":[{"title":"Get your application's acceptance policy","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /acceptance/policy","href":"/api-reference/acceptance/get-your-applications-acceptance-policy"},{"title":"Replace your application's acceptance policy","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json put /acceptance/policy","href":"/api-reference/acceptance/replace-your-applications-acceptance-policy"},{"title":"List your application's acceptance policy versions","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /acceptance/policy/versions","href":"/api-reference/acceptance/list-your-applications-acceptance-policy-versions"},{"title":"Get one version of your application's acceptance policy","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /acceptance/policy/versions/{policy_version_id}","href":"/api-reference/acceptance/get-one-version-of-your-applications-acceptance-policy"}]},{"group":"Domains","pages":[{"title":"Get your application's audiences and allowed origins","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /acceptance/domains","href":"/api-reference/acceptance/get-your-applications-audiences-and-allowed-origins"},{"title":"Replace your application's audiences and allowed origins","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json put /acceptance/domains","href":"/api-reference/acceptance/replace-your-applications-audiences-and-allowed-origins"}]},{"group":"Browser Keys","pages":[{"title":"Create a browser key","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json post /acceptance/browser_keys","href":"/api-reference/acceptance/create-a-browser-key"},{"title":"List your application's browser keys","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /acceptance/browser_keys","href":"/api-reference/acceptance/list-your-applications-browser-keys"},{"title":"Get one of your application's browser keys","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /acceptance/browser_keys/{browser_key_id}","href":"/api-reference/acceptance/get-one-of-your-applications-browser-keys"},{"title":"Delete a browser key","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json delete /acceptance/browser_keys/{browser_key_id}","href":"/api-reference/acceptance/delete-a-browser-key"}]}]}]},{"anchor":"Admin","icon":"gear","pages":[{"title":"Admin","href":"/api-reference/organization-management/create-organization-for-federation"}]},{"anchor":"Webhooks","icon":"webhook","pages":[{"title":"Webhooks","href":"/api-reference/webhook-management/create-webhook-endpoint"}]}]},{"tab":"Changelog","icon":"clock-rotate-left","pages":[{"title":"Changelog","href":"/changelog/kyb-score-settings-unknown-status-and-missing-address"}]}]},"basePath":"","title":"Preview what a Level 3 mint would disclose - Baselayer","buildId":"dpl_42LwxxU1kGN114H4XzwGYXa9ZDah","deploymentId":"dpl_42LwxxU1kGN114H4XzwGYXa9ZDah","dynamics":["c2aa737661","2b790eda92","b0f84f53ff","a9bb46feb3"],"chunks":["OpenApiReferenceProvider-C-hEh3I2.js","utils-CnF4QiUD.js","cloneDeep-izs3Hzxb.js","_Uint8Array-BVIqJ90l.js","isObjectLike-C8vmzPEN.js","isArray-Dcu1dQ5t.js","utils-C7PVNbel.js","toString-BX-iyh8G.js","isSymbol-CSH9U2Gm.js","addUniqueKeysToSchema-8ytevL2A.js","snippetPresets-BT1alx3v.js","style-to-object-BY3JEAdk.js","v4-DIgz8zy6.js","conditional-requirements-CFM0id0Q.js","ApiExamples-BLXC0i_W.js","isEqual-BfaiBbcl.js","usePlaygroundInputsStore-CyLIGI9_.js","shallow-DC0lGVIW.js","getApiPlaygroundDisplay-CgDQ85tN.js","CodeSnippet-6-I-Gpv9.js","CodeSnippets-BAk1kDdu.js","Page-C945cI-W.js","getPastedJson-B276RuWN.js","icon-BqP8etTm.js","MethodPill-DM6sbxG1.js","DuplicateIcon-PyJglOaE.js","createIcon-CMeOMAc_.js","DynamicMarkdown-BoyYAA8K.js","SectionHeading-DAYv3gvZ.js","axios-vUo_bRtp.js","Markdown-BhTTmazV.js","clsx-CR-RHrVC.js","lib-DuNMoZ05.js","lib-B8HbPgcC.js","html-void-elements-mCSPHezU.js","dist-CBUH0-zX.js","katex-YMM-FMeD.js","marked.esm-CZWythHk.js","AssistantPageLink-BmARFYNC.js"]}