---
title: "Resolve the credential issuer's DID document"
method: GET
path: "/.well-known/did.json"
tags: ["Registry"]
---

# Resolve the credential issuer's DID document

`GET /.well-known/did.json`

## Request

- Base URL: `https://api.baselayer.com`
- URL: `https://api.baselayer.com/.well-known/did.json`
- Auth: none declared
- TypeScript: <https://skmtc.dev/baselayer/apis/baselayer-api-service/docs/.well-known/did.json/get.ts> (a function with typed inputs; its response is checked against the schema)

The W3C DID document for Baselayer's credential issuer. Every credential names its issuer as a `did:web` identifier; verifiers resolve that identifier to this document and match the credential's signing key id against `verificationMethod`. Keys publish ahead of activation and remain published through rotation overlap, so verifier caches stay warm. Unauthenticated; cacheable for one hour.

## Response `200`

The issuer's DID document (W3C DID core).

- object: The issuer's did:web document, resolved at ``/.well-known/did.json``. Renders the published rotation set: one verification method per pending, active, or retiring key, every one referenced from ``assertionMethod`` since counterparties verify credential signatures (assertions) against these keys. Wire names are the W3C forms, hence the aliases.
  - `@context` string[]
  - `id` string, required
  - `verificationMethod` object[], required
    - `id` string, required
    - `type` 'JsonWebKey2020'
    - `controller` string, required
    - `publicKeyJwk` object, required: Public half of a KYA issuer signing key, as an RFC 8037 OKP JWK. The wire form the did:web document and JWKS render verbatim, and the shape stored on ``IssuerKey.public_jwk`` — public material only, never the seed. ``kid`` is the RFC 7638 JWK thumbprint of the key, so it is derivable from the key material alone and can never drift from ``x``.
      - `kty` 'OKP'
      - `crv` 'Ed25519'
      - `x` string, required
      - `kid` string, required
      - `alg` 'EdDSA'
      - `use` 'sig'
  - `assertionMethod` string[], required

---

[API](https://skmtc.dev/baselayer/apis/baselayer-api-service.md) - [All operations](https://skmtc.dev/baselayer/apis/baselayer-api-service/llms.txt) - [OpenAPI document](https://skmtc.dev/baselayer/apis/baselayer-api-service/revisions/0cc89938bc26?raw)