---
title: "Information about credentials which can be issued."
method: GET
path: "/oid4vci/.well-known/openid-credential-issuer"
tags: ["Well-known endpoints API"]
---

# Information about credentials which can be issued.

`GET /oid4vci/.well-known/openid-credential-issuer`

## Request

- Base URL: `http://localhost:8080`
- URL: `http://localhost:8080/oid4vci/.well-known/openid-credential-issuer`
- Auth: none declared. Required headers: `Accept`

## Headers

- `Accept` string, required

## Response `200`

Credential Issuer Metadata

- IssuerMetadata: The OID4VCI Credential Issuer Metadata contains information on the Credential Issuer's technical capabilities, supported Credentials, and (internationalized) display information.
  - `credential_issuer` string, required: The Credential Issuer's identifier
  - `authorization_servers` string[]
  - `credential_endpoint` string, required: Information for the holder where to get the credential.
  - `nonce_endpoint` string, required: Nonce for proof of possessions. Required for VCs to be bound to a holder.
  - `deferred_credential_endpoint` string
  - `credential_configurations_supported` object, required
  - `credential_request_encryption` IssuerCredentialRequestEncryption
    - `enc_values_supported` string[], required: List of supported JWE encryption algorithms
    - `zip_values_supported` string[]: If present must be a non-empty array of JWE compression algorithms
    - `encryption_required` boolean, required: Boolean value specifying whether the Credential Issuer requires the additional encryption on top of TLS
    - `jwks` object: A JSON Web Key Set that contains one or more public keys, to be used by the Wallet as an input to a key agreement for encryption of the Credential Request.
  - `credential_response_encryption` IssuerCredentialResponseEncryption
    - `enc_values_supported` string[], required: List of supported JWE encryption algorithms
    - `zip_values_supported` string[]: If present must be a non-empty array of JWE compression algorithms
    - `encryption_required` boolean, required: Boolean value specifying whether the Credential Issuer requires the additional encryption on top of TLS
    - `alg_values_supported` string[], required
  - `batch_credential_issuance` BatchCredentialIssuance
    - `batch_size` integer, required
  - `display` MetadataIssuerDisplayInfo[]: Array of objects, where each object contains display properties of a Credential Issuer for a certain language
    - `locale` string: String value that identifies the language of this object represented as a language tag taken from values defined in BCP47 [RFC5646]. There MUST be only one object for each language identifier.
    - `name` string, required
    - `logo` MetadataLogo
      - `uri` string, required: String value that contains a data URL containing the logo of the Credential Issuer. The Wallet needs to determine the scheme, since the URI value could use the https: scheme, the data: scheme, etc.
      - `alt_text` string: String value of the alternative text for the logo image
  - `profile_version` string
  - `credential_issuer_identity_trust_statement` string: Identity Trust Statement (idTS) JWT proving the issuer's identity within the Swiss Trust ecosystem.

## Other responses

- `406`: None of the requested Accept media types are supported, or signed metadata was requested but is not configured for this issuer
- `500`: Internal Server Error

## Changes

- **2026-11-10** `f2f3fbbaf461`: 3 breaking
  - the response property `credential_configurations_supported/additionalProperties/cryptographic_binding_methods_supported` became optional for the status `200`
  - the response property `credential_configurations_supported/additionalProperties/proof_types_supported` became optional for the status `200`
  - the `credential_configurations_supported/additionalProperties/cryptographic_binding_methods_supported` response property's minItems was decreased from `1` to `0` for the response status `200`
- **2026-10-29** `6f5b69a49a91`: 2 info
  - the response property `credential_configurations_supported/additionalProperties/cryptographic_binding_methods_supported` became required for the status `200`
  - the response property `credential_configurations_supported/additionalProperties/proof_types_supported` became required for the status `200`
- **2026-10-06** `d24758bc44e0`: 2 info
  - the `credential_request_encryption/enc_values_supported/items/` response's property pattern was changed from `^(A128GCM|A256GCM)$` to `^(A256GCM)$` for the status `200`
  - the `credential_response_encryption/enc_values_supported/items/` response's property pattern was changed from `^(A128GCM|A256GCM)$` to `^(A256GCM)$` for the status `200`
- **2026-10-02** `ff4180af960b`: 1 info
  - the `credential_configurations_supported/additionalProperties/format` response's property pattern was changed from `^[dv]c\+sd-jwt$` to `^dc\+sd-jwt$` for the status `200`
- …earlier changes not shown

[Operation history](https://skmtc.dev/swiyu/apis/issuer-service-api/changes/oid4vci/.well-known/openid-credential-issuer/get.md)

---

[API](https://skmtc.dev/swiyu/apis/issuer-service-api.md) - [All operations](https://skmtc.dev/swiyu/apis/issuer-service-api/llms.txt) - [OpenAPI document](https://skmtc.dev/swiyu/apis/issuer-service-api/revisions/f2f3fbbaf461?raw)