---
title: "Changes to Create Service"
method: POST
path: "/api/service/create"
---

# Changes to Create Service

`POST /api/service/create`

> Every recorded change to this operation, newest first.

## Timeline

Changed in 10 of 19 revisions.

- **2026-10-28** `add809c8fb0f`: 32 info
- **2026-10-19** `bc25340fc023`: 206 breaking, 48 warning, 294 info
- **2026-08-03** `7ad74ab64749`: 6 warning, 51 info
- **2026-04-08** `8974f967c0ec`: 4 info
- **2026-04-08** `e8d6a1eb26b8`: 4 info
- **2026-01-09** `6b06198e1413`: 1 info
- **2025-12-18** `504771740022`: 6 info
- **2025-12-15** `07644fe9fbd8`: 15 info
- **2025-12-15** `5627d7cc0158`: 1 breaking, 8 info
- **2025-11-24** `8d73d5938a68`: 4 breaking, 2 info

## Changes

- **2026-10-28** `add809c8fb0f`: 32 info
  - added the new optional request property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/credentialRequestEncryptionEncValuesSupported` (media type: application/json)
  - added the new optional request property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/credentialRequestEncryptionEncValuesSupported` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/credentialRequestEncryptionJwks` (media type: application/json)
  - added the new optional request property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/credentialRequestEncryptionJwks` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/credentialRequestEncryptionZipValuesSupported` (media type: application/json)
  - added the new optional request property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/credentialRequestEncryptionZipValuesSupported` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/display` (media type: application/json)
  - added the new optional request property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/display` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/nonceEndpoint` (media type: application/json)
  - added the new optional request property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/nonceEndpoint` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/notificationEndpoint` (media type: application/json)
  - added the new optional request property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/notificationEndpoint` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `returnFullPayload` (media type: application/json)
  - added the new optional request property `returnFullPayload` (media type: application/x-www-form-urlencoded)
  - the request optional property `supportedAcrs` became not read-only (media type: application/json)
  - the request optional property `supportedAcrs` became not read-only (media type: application/x-www-form-urlencoded)
  - added the optional property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/credentialRequestEncryptionEncValuesSupported` to the response with the `200` status
  - added the optional property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/credentialRequestEncryptionEncValuesSupported` to the response with the `201` status
  - added the optional property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/credentialRequestEncryptionJwks` to the response with the `200` status
  - added the optional property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/credentialRequestEncryptionJwks` to the response with the `201` status
  - added the optional property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/credentialRequestEncryptionZipValuesSupported` to the response with the `200` status
  - added the optional property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/credentialRequestEncryptionZipValuesSupported` to the response with the `201` status
  - added the optional property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/display` to the response with the `200` status
  - added the optional property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/display` to the response with the `201` status
  - added the optional property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/nonceEndpoint` to the response with the `200` status
  - added the optional property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/nonceEndpoint` to the response with the `201` status
  - added the optional property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/notificationEndpoint` to the response with the `200` status
  - added the optional property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/notificationEndpoint` to the response with the `201` status
  - added the optional property `returnFullPayload` to the response with the `200` status
  - added the optional property `returnFullPayload` to the response with the `201` status
  - the response optional property `supportedAcrs` became not read-only for the status `200`
  - the response optional property `supportedAcrs` became not read-only for the status `201`
- **2026-10-19** `bc25340fc023`: 206 breaking, 48 warning, 294 info
  - added `#/components/schemas/credential_issuer_metadata` to the `credentialIssuerMetadata` request property `allOf` list (media type: application/json)
  - added `#/components/schemas/credential_issuer_metadata` to the `credentialIssuerMetadata` request property `allOf` list (media type: application/x-www-form-urlencoded)
  - added `#/components/schemas/user_code_charset` to the `userCodeCharset` request property `allOf` list (media type: application/json)
  - added `#/components/schemas/user_code_charset` to the `userCodeCharset` request property `allOf` list (media type: application/x-www-form-urlencoded)
  - removed the enum value `BASE20` of the request property `userCodeCharset` (media type: application/json)
  - removed the enum value `BASE20` of the request property `userCodeCharset` (media type: application/x-www-form-urlencoded)
  - removed the enum value `NUMERIC` of the request property `userCodeCharset` (media type: application/json)
  - removed the enum value `NUMERIC` of the request property `userCodeCharset` (media type: application/x-www-form-urlencoded)
  - the `credentialIssuerMetadata` request property type changed from `object` to no type (media type: application/json)
  - the `userCodeCharset` request property type changed from `string` to no type (media type: application/json)
  - the response property `accessTokenSignatureKeyId` became nullable for the status `200`
  - the response property `accessTokenSignatureKeyId` became nullable for the status `201`
  - the response property `accessTokenType` became nullable for the status `200`
  - the response property `accessTokenType` became nullable for the status `201`
  - the response property `apiSecret` became nullable for the status `200`
  - the response property `apiSecret` became nullable for the status `201`
  - the response property `attributes` became nullable for the status `200`
  - the response property `attributes` became nullable for the status `201`
  - the response property `authenticationCallbackApiKey` became nullable for the status `200`
  - the response property `authenticationCallbackApiKey` became nullable for the status `201`
  - the response property `authenticationCallbackApiSecret` became nullable for the status `200`
  - the response property `authenticationCallbackApiSecret` became nullable for the status `201`
  - the response property `authenticationCallbackEndpoint` became nullable for the status `200`
  - the response property `authenticationCallbackEndpoint` became nullable for the status `201`
  - the response property `authorityHints` became nullable for the status `200`
  - the response property `authorityHints` became nullable for the status `201`
  - the response property `authorizationEndpoint` became nullable for the status `200`
  - the response property `authorizationEndpoint` became nullable for the status `201`
  - the response property `authorizationSignatureKeyId` became nullable for the status `200`
  - the response property `authorizationSignatureKeyId` became nullable for the status `201`
  - the response property `backchannelAuthenticationEndpoint` became nullable for the status `200`
  - the response property `backchannelAuthenticationEndpoint` became nullable for the status `201`
  - the response property `cimdAllowlist` became nullable for the status `200`
  - the response property `cimdAllowlist` became nullable for the status `201`
  - the response property `cimdMetadataPolicy` became nullable for the status `200`
  - the response property `cimdMetadataPolicy` became nullable for the status `201`
  - the response property `clientAttesterRoots` became nullable for the status `200`
  - the response property `clientAttesterRoots` became nullable for the status `201`
  - the response property `credentialIssuerMetadata` became nullable for the status `200`
  - the response property `credentialIssuerMetadata` became nullable for the status `201`
  - …508 more
- **2026-08-03** `7ad74ab64749`: 6 warning, 51 info
  - added the new `SPIFFE_JWT` enum value to the `supportedIntrospectionAuthMethods/items/` response property for the response status `200`
  - added the new `SPIFFE_JWT` enum value to the `supportedIntrospectionAuthMethods/items/` response property for the response status `201`
  - added the new `SPIFFE_JWT` enum value to the `supportedRevocationAuthMethods/items/` response property for the response status `200`
  - added the new `SPIFFE_JWT` enum value to the `supportedRevocationAuthMethods/items/` response property for the response status `201`
  - added the new `SPIFFE_JWT` enum value to the `supportedTokenAuthMethods/items/` response property for the response status `200`
  - added the new `SPIFFE_JWT` enum value to the `supportedTokenAuthMethods/items/` response property for the response status `201`
  - added the new optional request property `backchannelLogoutSessionSupported` (media type: application/json)
  - added the new optional request property `backchannelLogoutSessionSupported` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `backchannelLogoutSupported` (media type: application/json)
  - added the new optional request property `backchannelLogoutSupported` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `clientAttesterRoots` (media type: application/json)
  - added the new optional request property `clientAttesterRoots` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `clientAttesterRootsEnabled` (media type: application/json)
  - added the new optional request property `clientAttesterRootsEnabled` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `clientAttesterRootsOnly` (media type: application/json)
  - added the new optional request property `clientAttesterRootsOnly` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `credentialIssuerMetadata/batchSize` (media type: application/json)
  - added the new optional request property `credentialIssuerMetadata/batchSize` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `credentialIssuerMetadata/credentialResponseEncryptionZipValuesSupported` (media type: application/json)
  - added the new optional request property `credentialIssuerMetadata/credentialResponseEncryptionZipValuesSupported` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `credentialIssuerMetadata/requireCredentialRequestEncryption` (media type: application/json)
  - added the new optional request property `credentialIssuerMetadata/requireCredentialRequestEncryption` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `keyAttesterRoots` (media type: application/json)
  - added the new optional request property `keyAttesterRoots` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `keyAttesterRootsEnabled` (media type: application/json)
  - added the new optional request property `keyAttesterRootsEnabled` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `keyAttesterRootsOnly` (media type: application/json)
  - added the new optional request property `keyAttesterRootsOnly` (media type: application/x-www-form-urlencoded)
  - added the new `SPIFFE_JWT` enum value to the request property `supportedIntrospectionAuthMethods/items/` (media type: application/json)
  - added the new `SPIFFE_JWT` enum value to the request property `supportedIntrospectionAuthMethods/items/` (media type: application/x-www-form-urlencoded)
  - added the new `SPIFFE_JWT` enum value to the request property `supportedRevocationAuthMethods/items/` (media type: application/json)
  - added the new `SPIFFE_JWT` enum value to the request property `supportedRevocationAuthMethods/items/` (media type: application/x-www-form-urlencoded)
  - added the new `SPIFFE_JWT` enum value to the request property `supportedTokenAuthMethods/items/` (media type: application/json)
  - added the new `SPIFFE_JWT` enum value to the request property `supportedTokenAuthMethods/items/` (media type: application/x-www-form-urlencoded)
  - added the non-success response with the status `429`
  - added the optional property `backchannelLogoutSessionSupported` to the response with the `200` status
  - added the optional property `backchannelLogoutSessionSupported` to the response with the `201` status
  - added the optional property `backchannelLogoutSupported` to the response with the `200` status
  - added the optional property `backchannelLogoutSupported` to the response with the `201` status
  - added the optional property `clientAttesterRoots` to the response with the `200` status
  - …17 more
- **2026-04-08** `8974f967c0ec`: 4 info
  - added the new optional request property `attestationChallengeTimeWindow` (media type: application/json)
  - added the new optional request property `attestationChallengeTimeWindow` (media type: application/x-www-form-urlencoded)
  - added the optional property `attestationChallengeTimeWindow` to the response with the `200` status
  - added the optional property `attestationChallengeTimeWindow` to the response with the `201` status
- **2026-04-08** `e8d6a1eb26b8`: 4 info
  - added the new optional request property `authorizationCodeDuration` (media type: application/json)
  - added the new optional request property `authorizationCodeDuration` (media type: application/x-www-form-urlencoded)
  - added the optional property `authorizationCodeDuration` to the response with the `200` status
  - added the optional property `authorizationCodeDuration` to the response with the `201` status
- **2026-01-09** `6b06198e1413`: 1 info
  - added the success response with the status `201`
- **2025-12-18** `504771740022`: 6 info
  - added the new optional request property `cimdAllowlist` (media type: application/json)
  - added the new optional request property `cimdAllowlist` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `httpAliasProhibited` (media type: application/json)
  - added the new optional request property `httpAliasProhibited` (media type: application/x-www-form-urlencoded)
  - added the optional property `cimdAllowlist` to the response with the `200` status
  - added the optional property `httpAliasProhibited` to the response with the `200` status
- **2025-12-15** `07644fe9fbd8`: 15 info
  - added the new optional request property `cimdAllowlistEnabled` (media type: application/json)
  - added the new optional request property `cimdAllowlistEnabled` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `cimdAlwaysRetrieved` (media type: application/json)
  - added the new optional request property `cimdAlwaysRetrieved` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `cimdHttpPermitted` (media type: application/json)
  - added the new optional request property `cimdHttpPermitted` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `cimdQueryPermitted` (media type: application/json)
  - added the new optional request property `cimdQueryPermitted` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `clientIdMetadataDocumentSupported` (media type: application/json)
  - added the new optional request property `clientIdMetadataDocumentSupported` (media type: application/x-www-form-urlencoded)
  - added the optional property `cimdAllowlistEnabled` to the response with the `200` status
  - added the optional property `cimdAlwaysRetrieved` to the response with the `200` status
  - added the optional property `cimdHttpPermitted` to the response with the `200` status
  - added the optional property `cimdQueryPermitted` to the response with the `200` status
  - added the optional property `clientIdMetadataDocumentSupported` to the response with the `200` status
- **2025-12-15** `5627d7cc0158`: 1 breaking, 8 info
  - the response property `accessTokenSignAlg` became nullable for the status `200`
  - added the new optional request property `cimdMetadataPolicy` (media type: application/json)
  - added the new optional request property `cimdMetadataPolicy` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `cimdMetadataPolicyEnabled` (media type: application/json)
  - added the new optional request property `cimdMetadataPolicyEnabled` (media type: application/x-www-form-urlencoded)
  - the request property `accessTokenSignAlg` became nullable (media type: application/json)
  - the request property `accessTokenSignAlg` became nullable (media type: application/x-www-form-urlencoded)
  - added the optional property `cimdMetadataPolicy` to the response with the `200` status
  - added the optional property `cimdMetadataPolicyEnabled` to the response with the `200` status
- **2025-11-24** `8d73d5938a68`: 4 breaking, 2 info
  - the `credentialIssuerMetadata/credentialEndpoint` request property type changed from `boolean` to `string`, and format from no format to `uri` (media type: application/json)
  - the `credentialIssuerMetadata/credentialsSupported` request property type changed from `boolean` to `string` (media type: application/json)
  - the `credentialIssuerMetadata/credentialEndpoint` response's property type changed from `boolean` to `string`, and format from no format to `uri` for status `200`
  - the `credentialIssuerMetadata/credentialsSupported` response's property type changed from `boolean` to `string` for status `200`
  - the `credentialIssuerMetadata/credentialEndpoint` request property type was generalized from `boolean` to `string`, and format from no format to `uri` (media type: application/x-www-form-urlencoded)
  - the `credentialIssuerMetadata/credentialsSupported` request property type was generalized from `boolean` to `string` (media type: application/x-www-form-urlencoded)

---

[Operation](https://skmtc.dev/authlete/apis/authlete-api/docs/api/service/create/post.md) - [API](https://skmtc.dev/authlete/apis/authlete-api.md) - [Page](https://skmtc.dev/authlete/apis/authlete-api/changes/api/service/create/post)