Issue credential
Starts the issuance of a credential (OpenID4VCI 1.0). The issuer makes one credential offer for a credential definition, and one issuance history for each credential configuration of the definition, in the order of the definition. The offer always has all the configurations of the definition: to issue one configuration alone, use a definition with only that configuration.
List issuance history
Lists the issuance histories of the organisation, newest first, one page at a time. Each item is a summary; read the details with [Read issuance history](/docs/openid4vc-api/config-read-digital-wallet-open-id-credential-history). Filter with `offerId` to get the issuance histories of one issue call (one for each credential configuration), or with `status`, `revoked`, the credential definition, the holder or the time of creation. To read the next page, send the `nextCursor` of the answer as `cursor`. The list leaves out the issuance histories that you deleted and those of a deleted credential definition. For the counts in buckets, use [Read issuer statistics](/docs/openid4vc-api/config-read-issuer-statistics).
Read issuance history
Returns one issuance history: its status, offer, holder, the evidence of the wallet (wallet unit attestation, proof and key attestation, with their checks), the revocation, the re-issuances and the newest issued credential. Use it to follow an issuance after [Issue credential](/docs/openid4vc-api/config-digital-wallet-open-id-issue-credential), or to see why the issuer refused a wallet. Add `include=claims` to get the claims. The issued credentials are in [List issued credentials](/docs/openid4vc-api/config-list-issued-credentials).
Delete issuance history
Deletes an issuance history and its issued credentials, for example to stop an offer that no wallet must take. The lists and reads no longer give them, and a wallet can no longer get a credential for it. The issuer sends the issuer event `ows.issuer.issuance_history.deleted`. The delete is for this issuance history only: to stop a whole offer, delete each of its issuance histories (filter the list with `offerId`). The delete does not revoke credentials that the issuer already gave: [revoke](/docs/openid4vc-api/config-update-digital-wallet-open-id-credential-revocation-status) the issuance history first.
Provide the claims of a deferred issuance history
Gives the claims of a deferred issuance history, so that the wallet can get its credential. Use it after [Issue credential](/docs/openid4vc-api/config-digital-wallet-open-id-issue-credential) with `mode: deferred`, for each issuance history (each credential configuration) that had no claims in `credentials`. The status becomes `claims_supplied`, and the wallet gets the credential at its next request to the Deferred Credential Endpoint, or at once from the Credential Endpoint if it did not ask yet. The claims have the form of `credentials[].claims` of the issue call. For an issuance history of a data agreement, the issuer adds the data agreement to the claims.
Revoke issuance history
Revokes every credential that the issuer gave for the issuance history: each version and each copy of a batch. Use it when the holder must no longer use the credential, for example when the facts in it are no longer true. A revocation is final: a revoked credential never becomes valid again. The answer and the issuance history show the revocation at once; the published status lists show it within 60 seconds, and the issuer sends the issuer event `ows.issuer.issuance_history.revoked`. A second call changes nothing and gives the same answer. The credential configuration must have `revocation.enabled: true`. The revocation is for this issuance history only, not for the other issuance histories of the same credential offer. An issuance history without an issued credential has nothing to revoke: [delete](/docs/openid4vc-api/config-delete-digital-wallet-open-id-credential-history) it to stop its offer.