Skip to main content

Credential Verification API

A Credential Verification API is the service interface a relying party calls to request and validate a presentation from a wallet, covering signature checks, the trust chain, status and revocation, and the claims returned to the relying party’s own application.

Rather than building OpenID4VP handling, signature verification and trust-chain resolution into every application that needs to check a credential, a relying party integrates once against a Credential Verification API and calls it whenever it needs to verify a presentation. The API runs the OpenID4VP exchange with the holder’s wallet, confirms the presented credential’s signature and issuer against the relevant Trust Anchor, checks its Status List entry for revocation, and returns the verified claims in a form the calling application can use directly. This is distinct from the Verifier role itself, which is the organisation that decides what to ask for and what to do with the result; the API is the technical component that role calls to actually perform the check.

Back to the glossary