Issued credentials

Read issued credential

GET/v4/config/ows/issuer/issuance-history/{credentialExchangeId}/credentials/{credentialId}

Returns one credential that the issuer signed for an issuance history, with its token (the credential as the wallet got it) and its confirmation claim (cnf). Get the credentialId from List issued credentials or from latestCredential.id of Read issuance history. The issuer keeps the token 30 days after the issue (by default); after that, token is null.

Language of the request sample

curl 'https://demo-api.igrant.io/v4/config/ows/issuer/issuance-history/{credentialExchangeId}/credentials/{credentialId}' \
  -H 'Authorization: ApiKey <your-api-key>'

{
  "id": "ee868a36-f7ae-4079-847d-8e42c2110195",
  "version": 1,
  "copy": 0,
  "event": "issued",
  "issuedAt": "2026-11-08T14:42:10Z",
  "validFrom": "2026-11-08T14:00:00Z",
  "validUntil": "2027-10-29T03:00:00Z",
  "holderKeyThumbprint": "codT_NCUKH2JVNsAZuLXfn4rnu2sS8QUmRhHjHrU5PY",
  "holderKeyChanged": false,
  "tokenGrant": "access_token",
  "notification": null,
  "revokedAt": null,
  "token": "eyJ0eXAiOiJkYytzZC1qd3QiLCJ4NWMiOlsiTUlJQnlUQ0NBVytnQXdJQkFnSVVMMXlRbllENGlKUksxeVR5cm5yTHNMazdmRG93Q2dZSUtvWkl6ajBFQXdJd0pURWpNQ0VHQTFVRUF3d2FaWFZrYVMxM1lXeHNaWFFnWkdWMlpXeHZjRzFsYm5RZ1EwRXdIaGNOTWpZ...",
  "cnf": {
    "jwk": {
      "alg": "ES256",
      "crv": "P-256",
      "kid": "31abbd863614476e96567f844d8c8d12",
      "kty": "EC",
      "x": "2y902PApygdv1kXHW8zbOnN9yJ-EDrarHLezRwRvQRs",
      "y": "O2vBdXln5fi2Fk8wNgq5f4rKk6Fb6_CiylbKNESmIws"
    }
  }
}

Authorizations

Authorizationstringheaderrequired
Your API key with the prefix ApiKey: ApiKey <your-api-key>. Get an API key.
Scope:issuances:read

Path parameters

credentialExchangeIdstringrequired
The credential exchange id of the issuance history, from issuanceHistory[].credentialExchangeId of Issue credential, from List issuance history, or from an issuer event.
credentialIdstringrequired
The id of the issued credential, from List issued credentials or latestCredential.id of the issuance history.

Response

application/json

The issued credential.

idstring
The id of the issued credential.
Example:"c0a8e3f1-6d2b-4a7e-8f19-3b5d7c9e1a24"
versioninteger
The version of the credential: 1 for the first issue, plus 1 for each re-issuance.
Example:43
copyinteger
The position of the copy in a batch issuance (0 for the first copy, and for a credential without a batch).
Example:0
eventenum<string>
issued: the first issue. reissued: a re-issuance.
Available options:issued,reissued
issuedAtstring<date-time> | null
When the issuer signed the credential (RFC 3339, UTC).
Example:"2026-11-05T11:00:00Z"
validFromstring<date-time> | null
The start of the technical validity (nbf, or the MSO validFrom of an mdoc; RFC 3339, UTC), rounded to the hour.
validUntilstring<date-time> | null
The end of the technical validity (exp, or the MSO validUntil of an mdoc; RFC 3339, UTC), rounded to the hour. It is never later than the administrative expiry of the claims or the end of the signing certificate.
holderKeyThumbprintstring | null
The JWK thumbprint (RFC 7638) of the holder key that the credential is bound to, or null for a credential without a holder key.
holderKeyChangedboolean
true when the holder key is not the key of the version before (the wallet used a new key for the re-issuance).
tokenGrantstring | null
The token that the wallet used for the credential request: access_token (the first issue) or refresh_token (a re-issuance).
Example:"refresh_token"
notificationobject | null
The last notification of the wallet for this credential (OpenID4VCI 1.0 section 11), or null when the wallet sent none.
revokedAtstring<date-time> | null
When the issuer revoked the credential (RFC 3339, UTC), or null. A revocation is final.
tokenstring | null
The signed credential as the wallet got it (for example the SD-JWT VC with its disclosures), or null after the retention time of the token.
cnfobject | null
The confirmation claim (cnf) with the holder key that the credential is bound to, or null for a credential without a holder key.