Getting started
This guide takes you from an empty account to your first signed credential.
1. Create an account
Click Get API key on the landing page to log in, or create an account (email + OTP verification). After login you land in the issuer portal where you can create an issuer and API key.
2. Register an issuer
Credentials are signed on behalf of an issuer — an organization identity
anchored to a DID (for example did:web:acme.inflowra.io). Create one in the
portal; Inflowra provisions the DID and signing keys inside its key service.
Private keys never leave it.
3. Create an API key
In the portal, open your issuer and create an API key. Keys can be rotated and revoked at any time from the same panel. Treat keys as secrets: they are shown once at creation.
4. Issue your first credential
Call the credentials endpoint with your key, the credential format, the
subject's claims, and the holder's DID:
curl https://api.inflowra.io/v1/credentials \
-H "Authorization: Bearer sk_live_..." \
-H "Content-Type: application/json" \
-d '{
"format": "vc+sd-jwt",
"type": "EmployeeCredential",
"holder": "did:key:z6Mkf...",
"claims": {
"role": "Backend Engineer",
"clearance": "L2"
}
}'
Response:
{
"credential": "eyJhbGciOiJFZERTQSJ9...~WyJzYWx0Ii...",
"format": "vc+sd-jwt",
"status": "issued",
"expires_at": "2027-07-08T09:12:00Z"
}
The credential string is the complete signed credential — hand it to the
holder. Inflowra keeps no copy.
TODO: confirm — issuance API base URL and versioned path for your environment; the example above matches the public site's sample.
5. Verify it
Paste the returned credential into the public verify portal, or POST it to the verify API, to confirm the signature and revocation status end-to-end.
Next steps
- Read the verification guide to understand what verifiers check.
- Explore schemas for the other formats (
mdoc, JSON-LD) — same request shape, differentformatvalue.