> ## Documentation Index
> Fetch the complete documentation index at: https://docs.baselayer.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Fetch the credential issuer's JWT VC Issuer Metadata

> JWT VC Issuer Metadata (draft-ietf-oauth-sd-jwt-vc-19 §4) for the credential issuer whose registry host the request names: `issuer` equals the `iss` of every credential that issuer signs, and `jwks` carries the same rotation set as that host's JWKS. Verifiers resolve a credential's signing key here. Unauthenticated; cacheable for one hour.



## OpenAPI

````yaml /api-reference/openapi.json get /.well-known/jwt-vc-issuer
openapi: 3.1.0
info:
  title: baselayer-api-service
  version: 0.1.0
servers:
  - url: https://api.baselayer.com/
security: []
paths:
  /.well-known/jwt-vc-issuer:
    get:
      tags:
        - Registry
      summary: Fetch the credential issuer's JWT VC Issuer Metadata
      description: >-
        JWT VC Issuer Metadata (draft-ietf-oauth-sd-jwt-vc-19 §4) for the
        credential issuer whose registry host the request names: `issuer` equals
        the `iss` of every credential that issuer signs, and `jwks` carries the
        same rotation set as that host's JWKS. Verifiers resolve a credential's
        signing key here. Unauthenticated; cacheable for one hour.
      operationId: well_known_jwt_vc_issuer_get
      responses:
        '200':
          description: The issuer's metadata and public keys.
          content:
            application/json:
              schema:
                properties:
                  issuer:
                    type: string
                    title: Issuer
                  jwks:
                    properties:
                      keys:
                        items:
                          properties:
                            kty:
                              type: string
                              const: OKP
                              title: Kty
                              default: OKP
                            crv:
                              type: string
                              const: Ed25519
                              title: Crv
                              default: Ed25519
                            x:
                              type: string
                              title: X
                            kid:
                              type: string
                              title: Kid
                            alg:
                              type: string
                              const: EdDSA
                              title: Alg
                              default: EdDSA
                            use:
                              type: string
                              const: sig
                              title: Use
                              default: sig
                          additionalProperties: false
                          type: object
                          required:
                            - x
                            - kid
                          title: Ed25519PublicJWK
                          description: >-
                            Public half of a KYA issuer signing key, as an RFC
                            8037 OKP JWK.


                            The wire form the did:web document and JWKS render
                            verbatim, and the

                            shape stored on ``IssuerKey.public_jwk`` — public
                            material only, never

                            the seed. ``kid`` is the RFC 7638 JWK thumbprint of
                            the key, so it is

                            derivable from the key material alone and can never
                            drift from ``x``.
                        type: array
                        title: Keys
                    additionalProperties: false
                    type: object
                    required:
                      - keys
                    title: JSONWebKeySet
                    description: RFC 7517 JWKS of the issuer's published public keys.
                additionalProperties: false
                type: object
                required:
                  - issuer
                  - jwks
                title: JWTVCIssuerMetadata
                description: >-
                  JWT VC Issuer Metadata (draft-ietf-oauth-sd-jwt-vc-19 §4.2):
                  the

                  credential ``iss`` and its keys inline, never a ``jwks_uri``
                  beside them.
              example:
                issuer: https://registry.baselayer.com
                jwks:
                  keys:
                    - kty: OKP
                      crv: Ed25519
                      x: 11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo
                      kid: kPrK_qmxVWaYVA9wwBF6Iuo3vVzz7TxHCTwXBygrS4k
                      alg: EdDSA
                      use: sig
        '400':
          description: The request's Host is missing, repeated or malformed.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
                title: InvalidHostHeader
                description: >-
                  The request's Host header is missing, repeated or malformed;
                  send exactly one Host of the form host[:port].
                examples:
                  - type: invalid_host_header
                    code: 6317
                    message: >-
                      The request's Host header is missing, repeated or
                      malformed; send exactly one Host of the form host[:port].
                    metadata: {}
        '404':
          description: The request's Host is not one of the issuers' registry hosts.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
                title: ResourceNotFound
                description: Could not locate the resource for the given URI.
                examples:
                  - type: resource_not_found
                    code: 1
                    message: Could not locate the resource for the given URI.
                    metadata: {}
        '422':
          description: The request is invalid.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
                title: ValidationFailed
                description: The request is invalid.
                examples:
                  - type: validation_failed
                    code: 7112
                    message: The request is invalid.
                    metadata: {}
components:
  schemas:
    Error:
      properties:
        type:
          type: string
          title: Type
          description: >-
            Stable snake_case name of the error. Branch on this, never on
            `message`.
        code:
          type: integer
          title: Code
          description: Integer catalog code of the error.
        message:
          type: string
          title: Message
          description: For a human reading a log; not stable and not localized.
        metadata:
          additionalProperties: true
          type: object
          title: Metadata
          description: Context documented per `type`.
        request_id:
          anyOf:
            - type: string
            - type: 'null'
          title: Request Id
          description: The `X-Request-ID` of the failed request.
      type: object
      required:
        - type
        - code
        - message
      title: Error
      description: The one body of every error a KYA route answers.

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.