Mint a credential for a person as a business operator

post

https://api.baselayer.com/credentials/business

Mints an L2 or L3 SD-JWT-VC credential for a verified person acting as the operator of a verified business. The business identity assumed is always explicit via business_ref — it is never inferred — and minting requires a verified operator link between the person and that business.

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Body Params

Body for POST /credentials/business: mint an L2 or L3 credential
for a verified person acting as the operator of a specific business.

Which hat the mint assumes is explicit: minting for business A vs
business B is the same request with a different business_ref.

principal_ref

string

required

length between 1 and 255

Pairwise reference to the verified principal, as issued to the calling organization at verification completion.

level

string

enum

required

Credential layer to mint: L2 (audience-scoped pairwise DID) or L3 (selectively disclosed verified identity).

Allowed:

audience

string

required

length between 1 and 512

The counterparty the credential is scoped to — a domain, or a URL reduced to its hostname.

agent_key

object

required

Public JWK of the agent that will present the credential; becomes the credential's cnf binding.

disclosed_fields

array of strings

length ≤ 64

L3 only: the dotted disclosure paths the credential should carry, e.g. user.email.hash. Individual mints take user.* paths; business mints take business.* and actor.user.* paths.

Disclosed Fields

disclosure_mode

string

enum

Defaults to CLEARTEXT_AND_HASH

L3 disclosure mode: CLEARTEXT_AND_HASH (default) discloses requested fields as cleartext alongside their recognition hashes; HASH_ONLY discloses only the recognition hashes.

Allowed:

business_ref

string

required

length between 1 and 255

Pairwise reference to the verified business whose identity the principal assumes, as issued to the calling organization.

Headers

string

enum

Defaults to application/json

Generated from available response content types

Allowed:

content-type

string

enum

Defaults to application/json

Generated from available request content types

Allowed:

Responses

Language

Credentials

Header

Loading…

Response

Click Try It! to start a request and see the response here! Or choose an example:

application/json

application/vnd.baselayer.v1+json

201Response

404The principal_ref or business_ref is unknown or was issued to another organization — the cases are indistinguishable.

409No verified operator link exists between the person and the business, or the person's verified-identity snapshot is superseded or expired.

422The mint payload failed validation, the audience cannot be reduced to a canonical counterparty domain, or a requested disclosure field is outside the vault schema.