Skip to content
Governance Platform

Create applied policy credential

POST
/api/v1/projects/{projectId}/policies/{appliedPolicyId}/credentials
 
curl --request POST \
  --url https://localhost:10001/api/v1/projects/example/policies/example/credentials \
  --header 'Authorization: <Authorization>' \
  --header 'Content-Type: application/json' \
  --data '{ "expiresAt": "2030-01-01T00:00:00Z" }'

Issue a new credential for an applied policy and return the persisted record

Authorizations

Section titled “Authorizations ”

Parameters

Section titled “ Parameters ”

Path Parameters

Section titled “Path Parameters ”
projectId
required
string

Project ID, UUID (urn:uuid optional), or slug:my-project

appliedPolicyId
required
string

Applied policy ID, slug:my-policy, or urn:cid:bafy…

Request Body

Section titled “Request Body ”

Applied policy credential issuance request

Media type application/json
object
expiresAt
required

Must be in the future

string format: date-time
Example 
2030-01-01T00:00:00Z

Responses

Section titled “ Responses ”

201

Section titled “201 ”

Created credential

Media type application/json

A verifiable credential issued over an applied policy, revocable but never deleted

object
appliedPolicyId

Taken from the path on create

integer
credential
object
credentialId

Urn:uuid minted per issuance; identifies the row

string
expiresAt
string format: date-time
id
integer
issuedAt
string format: date-time
issuedBy
string
issuedByDid

Verifiable actor; issuedBy is the label

string
revoked

Set via the revoke endpoint

boolean
revokedAt

Set via the revoke endpoint

string format: date-time
revokedBy

Set via the revoke endpoint

string
revokedByDid

Verifiable actor; revokedBy is the label

string
revokedReason

Set via the revoke endpoint

string
sourceCid

Assigned by the integrity service

string
Example generated
{
  "expiresAt": "2026-04-15T12:00:00Z"
}

400

Section titled “400 ”

Bad request - Invalid IDs or request body

Media type application/json

Error body returned by the governance endpoints; the message is human-readable and not a stable identifier

object
error
string
Example 
{
  "error": "Invalid request body"
}

401

Section titled “401 ”

Unauthorized - Authentication required

Media type application/json

Error body returned by the governance endpoints; the message is human-readable and not a stable identifier

object
error
string
Example 
{
  "error": "Invalid request body"
}

403

Section titled “403 ”

Forbidden - No project access or insufficient permissions

Media type application/json

Error body returned by the governance endpoints; the message is human-readable and not a stable identifier

object
error
string
Example 
{
  "error": "Invalid request body"
}

409

Section titled “409 ”

Credential already issued

Media type application/json

Error body returned by the governance endpoints; the message is human-readable and not a stable identifier

object
error
string
Example 
{
  "error": "Invalid request body"
}

500

Section titled “500 ”

Internal server error

Media type application/json

Error body returned by the governance endpoints; the message is human-readable and not a stable identifier

object
error
string
Example 
{
  "error": "Invalid request body"
}