Mint a credential for a person as themselves

post

https://api.baselayer.com/credentials/individual

Mints an L2 or L3 SD-JWT-VC credential for a verified person, referenced by the principal_ref issued to your organization, scoped to a counterparty audience, and bound to the presenting agent's public key. Every credential is issuer-signed with sub (the person's audience-scoped pairwise DID, stable across mints and levels) and aud (the canonical counterparty domain), so counterparties can verify audience binding and key returning customers offline. Credentials are short-lived projections of the person's current verification — mint on demand rather than storing them long-term.

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Body Params

Body for POST /credentials/individual: mint an L2 or L3
credential for a verified person as themselves.

principal_ref

string

required

length between 1 and 255

Pairwise reference to the verified principal, as issued to the calling organization at verification completion.

level

string

enum

required

Credential layer to mint: L2 (audience-scoped pairwise DID) or L3 (selectively disclosed verified identity).

Allowed:

audience

string

required

length between 1 and 512

The counterparty the credential is scoped to — a domain, or a URL reduced to its hostname.

agent_key

object

required

Public JWK of the agent that will present the credential; becomes the credential's cnf binding.

disclosed_fields

array of strings

length ≤ 64

L3 only: the dotted disclosure paths the credential should carry, e.g. user.email.hash. Individual mints take user.* paths; business mints take business.* and actor.user.* paths.

Disclosed Fields

disclosure_mode

string

enum

Defaults to CLEARTEXT_AND_HASH

L3 disclosure mode: CLEARTEXT_AND_HASH (default) discloses requested fields as cleartext alongside their recognition hashes; HASH_ONLY discloses only the recognition hashes.

Allowed:

Headers

string

enum

Defaults to application/json

Generated from available response content types

Allowed:

content-type

string

enum

Defaults to application/json

Generated from available request content types

Allowed:

Responses

Language

Credentials

Header

Loading…

Response

Click Try It! to start a request and see the response here! Or choose an example:

application/json

application/vnd.baselayer.v1+json

201Response

404The principal_ref is unknown or was issued to another organization — the two are indistinguishable.

409The person's verified-identity snapshot is superseded or expired; re-verify before minting.

422The mint payload failed validation, the audience cannot be reduced to a canonical counterparty domain, or a requested disclosure field is outside the vault schema.