InfoCert

InfoCert Credentials API

The credentials API from InfoCert — 5 operation(s) for credentials.

GitHub OpenAPI

Operations 5

POST /credentials/list Returns the list of credentials associated with a user identifier #
POST /credentials/info Retrieve the credential and return the main identity information and the public… #
POST /credentials/authorize Authorize the access to the credential for remote signing, according to the… #
POST /credentials/extendTransaction Extends the validity of a multi-signature transaction authorization by… #
POST /credentials/sendOTP Start the online OTP generation mechanism associated with a credential and… #

Specifications

⚙
OpenAPI
https://artifacts.apis.io/infocert/openapi/infocert-credentials-api-openapi.yml

Other Resources

🔗
WSDL
https://artifacts.apis.io/infocert/wsdl/infocert-top-onboarding-service.wsdl

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/infocert:infocert-credentials-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

infocert-credentials-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Infocert Credentials API
  version: 1.0.4.0
  contact:
    name: Infocert
    url: https://infocert.digital/
  license:
    name: Cloud Signature Consortium License
    url: https://cloudsignatureconsortium.org/
  description: 'Operations tagged credentials across 2 of this provider''s published API definitions: infocert-csc-openapi.json, infocert-csc-openapi.json. Each path carries the servers of the definition it was published in.'
servers:
- url: https://apitest.infocert.digital/signature/csc/v1/
  description: Test environment
- url: https://apistage.infocert.digital/signature/csc/v1/
  description: Stage environment
- url: https://api.infocert.digital/signature/csc/v1/
  description: Production environment
basePath: /identification/afm/v1
tags:
- name: Credentials
paths:
  /credentials/list:
    post:
      tags:
      - Credentials
      summary: Returns the list of credentials associated with a user identifier
      security:
      - BearerAuth: []
      description: ''
      operationId: credentialsList
      responses:
        '200':
          description: Credentials list response object
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/output-credentials-list'
        '400':
          description: Invalid_request
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/input-credentials-list'
        description: Credentials list request object
        required: true
    servers:
    - url: https://apitest.infocert.digital/signature/csc/v1/
      description: Test environment
    - url: https://apistage.infocert.digital/signature/csc/v1/
      description: Stage environment
    - url: https://api.infocert.digital/signature/csc/v1/
      description: Production environment
  /credentials/info:
    post:
      tags:
      - Credentials
      summary: Retrieve the credential and return the main identity information and the public…
      security:
      - BearerAuth: []
      description: ''
      operationId: credentialsInfo
      responses:
        '200':
          description: Credentials info response object
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/output-credentials-info'
        '400':
          description: Invalid_request
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/input-credentials-info'
        description: Credentials info request object
        required: true
    servers:
    - url: https://apitest.infocert.digital/signature/csc/v1/
      description: Test environment
    - url: https://apistage.infocert.digital/signature/csc/v1/
      description: Stage environment
    - url: https://api.infocert.digital/signature/csc/v1/
      description: Production environment
  /credentials/authorize:
    post:
      tags:
      - Credentials
      summary: Authorize the access to the credential for remote signing, according to the…
      security:
      - BearerAuth: []
      description: ''
      operationId: credentialsAuthorize
      responses:
        '200':
          description: Credentials authorize response object
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/output-credentials-authorize'
        '400':
          description: Invalid_request
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/input-credentials-authorize'
        description: Credentials authorize request object
        required: true
    servers:
    - url: https://apitest.infocert.digital/signature/csc/v1/
      description: Test environment
    - url: https://apistage.infocert.digital/signature/csc/v1/
      description: Stage environment
    - url: https://api.infocert.digital/signature/csc/v1/
      description: Production environment
  /credentials/extendTransaction:
    post:
      tags:
      - Credentials
      summary: Extends the validity of a multi-signature transaction authorization by…
      security:
      - BearerAuth: []
      description: ''
      operationId: credentialsExtendTransaction
      responses:
        '200':
          description: Credentials authorize response object
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/output-credentials-extendTransaction'
        '400':
          description: Invalid_request
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/input-credentials-extendTransaction'
        description: Credentials authorize request object
        required: true
    servers:
    - url: https://apitest.infocert.digital/signature/csc/v1/
      description: Test environment
    - url: https://apistage.infocert.digital/signature/csc/v1/
      description: Stage environment
    - url: https://api.infocert.digital/signature/csc/v1/
      description: Production environment
  /credentials/sendOTP:
    post:
      tags:
      - Credentials
      summary: Start the online OTP generation mechanism associated with a credential and…
      security:
      - BearerAuth: []
      description: ''
      operationId: credentialsSendOTP
      responses:
        '400':
          description: Invalid_request
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/input-credentials-sendOTP'
        description: Credentials sendOTP request object
        required: true
    servers:
    - url: https://apitest.infocert.digital/signature/csc/v1/
      description: Test environment
    - url: https://apistage.infocert.digital/signature/csc/v1/
      description: Stage environment
    - url: https://api.infocert.digital/signature/csc/v1/
      description: Production environment
components:
  schemas:
    input-credentials-list:
      type: object
      description: Input parameters for credentials/list method
      properties:
        userID:
          $ref: '#/components/schemas/userID'
        maxResults:
          $ref: '#/components/schemas/maxResults'
        pageToken:
          $ref: '#/components/schemas/pageToken'
        clientData:
          $ref: '#/components/schemas/clientData'
      example:
        maxResults: '10'
    description:
      type: string
      description: Contains a free form description of the authorization transaction in the lang language
    input-credentials-info:
      type: object
      description: Input parameters for credentials/info method
      required:
      - credentialID
      properties:
        credentialID:
          $ref: '#/components/schemas/credentialID'
        certificates:
          $ref: '#/components/schemas/certificates'
        certInfo:
          $ref: '#/components/schemas/certInfo'
        authInfo:
          $ref: '#/components/schemas/authInfo'
        lang:
          $ref: '#/components/schemas/lang'
        clientData:
          $ref: '#/components/schemas/clientData'
      example:
        credentialID: GX0112348
        certificates: chain
        certInfo: true
        authInfo: true
    nextPageToken:
      type: string
      description: The page token for the next page of items
    hash:
      type: array
      description: One or more Base64-encoded hash values to be signed
      items:
        type: string
        description: Single Base64-encoded hash value to be signed
    key:
      type: object
      description: Information about the key
      required:
      - status
      - algo
      - len
      properties:
        status:
          type: string
          description: The status of enablement of the signing key of the credential
          pattern: ^(enabled|disabled)$
        algo:
          type: array
          description: The list of OIDs of the supported key algorithms
          items:
            type: string
            description: A single OID
        len:
          type: integer
          description: The length of the cryptographic key in bits
        curve:
          type: integer
          description: The OID of the ECDSA curve
    OTP:
      type: string
      description: The OTP collected from the user
    PIN:
      type: string
      description: The PIN collected from the user
    output-credentials-extendTransaction:
      type: object
      description: Output parameters for credentials/extendTransaction method
      required:
      - SAD
      properties:
        SAD:
          $ref: '#/components/schemas/SAD'
        expiresIn:
          $ref: '#/components/schemas/expiresIn'
      example:
        SAD: 1/UsHDJ98349h9fgh9348hKKHDkHWVkl/8hsAW5usc8_5=
    output-credentials-info:
      type: object
      description: Output parameters for credentials/info method
      required:
      - key
      - cert
      - authMode
      - PIN
      - OTP
      - multisign
      - lang
      properties:
        description:
          $ref: '#/components/schemas/description'
        key:
          $ref: '#/components/schemas/key'
        cert:
          $ref: '#/components/schemas/cert'
        authMode:
          $ref: '#/components/schemas/authMode'
        SCAL:
          $ref: '#/components/schemas/SCAL'
        PIN:
          $ref: '#/components/schemas/PININFO'
        OTP:
          $ref: '#/components/schemas/OTPINFO'
        multisign:
          $ref: '#/components/schemas/multisign'
        lang:
          $ref: '#/components/schemas/lang'
      example:
        key:
          status: enabled
          algo:
          - 1.2.840.113549.1.1.1
          - 0.4.0.127.0.7.1.1.4.1.3
          len: 2048
        cert:
          status: valid
          certificates:
          - <Base64-encoded_X.509_end_entity_certificate>
          - <Base64-encoded_X.509_intermediate_CA_certificate>
          - <Base64-encoded_X.509_root_CA_certificate>
          issuerDN: <X.500_issuer_DN_printable_string>
          serialNumber: 5AAC41CD8FA22B953640
          subjectDN: <X.500_subject_DN_printable_string>
          validFrom: 20180101100000Z
          validTo: 20190101095959Z
          authMode: explicit
          PIN:
            presence: 'true'
            label: PIN
            description: Please enter the signature PIN
          OTP:
            presence: 'true'
            type: offline
            ID: MB01-K741200
            provider: totp
            format: N
            label: Mobile OTP
            description: Please enter the 6 digit code you received by SMS
          multisign: 5
          lang: en-US
    cert:
      type: object
      description: Contains information about the signature certificate
      properties:
        status:
          type: string
          description: The Status Schema
          pattern: ^(valid|expired|revoked|suspended)$
        certificates:
          type: array
          description: Contains one or more Base64-encoded X.509v3 certificates from the certificate chain
          items:
            type: string
            description: A single Base64-encoded X.509v3 certificate
        issuerDN:
          type: string
          description: The Issuer Subject Distinguished Name from the X.509v3 end entity certificate in printable string format
        serialNumber:
          type: string
          description: The Serial Number from the X.509v3 certificate in hex encoded format
        subjectDN:
          type: string
          description: The Distinguished Name from the X.509v3 certificate in printable string format
        validFrom:
          type: string
          description: The validity start date from the X.509v3 certificate in printable string format
        validTo:
          type: string
          description: The validity end date from the X.509v3 certificate in printable string format
    userID:
      type: string
      description: The user identifier associated to the user identity
    clientData:
      type: string
      description: Arbitrary data from the Signature Application
    OTPINFO:
      type: object
      description: Contains information about the credential's OTP
      properties:
        presence:
          type: string
          description: Specifies if a text-based OTP is required or not, or optional
        type:
          type: string
          description: Specifies if a text-based OTP is required or not, or optional
        format:
          type: string
          description: Specifies the data format of the OTP
        label:
          type: string
          description: Specifies an optional label for the data field used to collect the OTP in the user interface
        description:
          type: string
          description: Optionally specifies a free form description of the OTP mechanism in the language specified in the lang parameter
        ID:
          type: string
          description: Specifies the identifier of the OTP device or application
        provider:
          type: string
          description: Optionally specifies the provider of the OTP device or application.
    certInfo:
      type: boolean
      description: Specifies if the information on the end entity certificate shall be returned as printable strings
    multisign:
      type: number
      description: Specifies if the credential supports multiple signatures to be created with a single authorization request
    input-credentials-sendOTP:
      type: object
      description: The Root Schema
      required:
      - credentialID
      properties:
        credentialID:
          $ref: '#/components/schemas/credentialID'
        clientData:
          $ref: '#/components/schemas/clientData'
      example:
        credentialID: GX0112348
        clientData: '12345678'
    expiresIn:
      type: number
      description: The lifetime in seconds of the service access token
    input-credentials-extendTransaction:
      type: object
      description: Input parameters for credentials/extendTransaction method
      required:
      - credentialID
      - SAD
      properties:
        credentialID:
          $ref: '#/components/schemas/credentialID'
        hash:
          $ref: '#/components/schemas/hash'
        SAD:
          $ref: '#/components/schemas/SAD'
        clientData:
          $ref: '#/components/schemas/clientData'
      example:
        credentialID: GX0112348
        hash: '[WlTTnNwS3FiY3NlNEllaXFsRGcvSFd1ST0=]'
        SAD: _TiHRG-bAH3XlFQZ3ndFhkXf9P24/CKN69L8gdSYp5_pw
        clientData: '12345678'
    authInfo:
      type: boolean
      description: Specifies if the information on the authorization mechanisms supported by this credential (PIN and OTP groups) shall be returned
    SAD:
      type: string
      description: The Signature Activation Data to provide as input to the signatures/signHash method.
    SCAL:
      type: string
      description: Specifies the Sole Control Assurance Level required by the credential, as defined in CEN EN 419 241-1
      pattern: ^(1|2)$
    input-credentials-authorize:
      type: object
      description: Input parameters for credentials/authorize method
      required:
      - credentialID
      - numSignatures
      properties:
        credentialID:
          $ref: '#/components/schemas/credentialID'
        numSignatures:
          $ref: '#/components/schemas/numSignatures'
        hash:
          $ref: '#/components/schemas/hash'
        PIN:
          $ref: '#/components/schemas/PIN'
        OTP:
          $ref: '#/components/schemas/OTP'
        description:
          $ref: '#/components/schemas/description'
        clientData:
          $ref: '#/components/schemas/clientData'
      example:
        credentialID: GX0112348
        numSignatures: 2
        hash: '[sTOgwOm+474gFj0q0x1iSNspKqbcse4IeiqlDg/HWuI=,c1RPZ3dPbSs0NzRnRmowcTB4MWlTTnNwS3FiY3NlNEllaXFsRGcvSFd1ST0=]'
        PIN: '12345678'
        OTP: '738496'
        clientData: '12345678'
    pageToken:
      type: string
      description: The page token for the new page of items
    output-credentials-list:
      type: object
      description: Input parameters for credentials/list method
      required:
      - credentialIDs
      properties:
        credentialIDs:
          $ref: '#/components/schemas/credentialIDs'
        nextPageToken:
          $ref: '#/components/schemas/nextPageToken'
      example:
        credentialIDs:
        - GX0112348
        - HX0224685
    PININFO:
      type: object
      description: Contains information about the credential's PIN
      properties:
        presence:
          type: string
          description: Specifies if a text-based PIN is required or not, or optional
        format:
          type: string
          description: Specifies the format of the PIN
          pattern: ^(A|B)$
        label:
          type: string
          description: The Label Schema
        description:
          type: string
          description: It optionally specifies a free form description of the PIN in the language specified in the lang parameter
    maxResults:
      type: number
      description: Maximum number of items to return
    lang:
      type: string
      description: Request a preferred language according to RFC 3066
    output-credentials-authorize:
      type: object
      description: Output parameters for credentials/authorize method
      required:
      - SAD
      properties:
        SAD:
          $ref: '#/components/schemas/SAD'
        expiresIn:
          $ref: '#/components/schemas/expiresIn'
      example:
        SAD: 1/UsHDJ98349h9fgh9348hKKHDkHWVkl/8hsAW5usc8_5=
    authMode:
      type: string
      description: Specifies one of the authorization modes
      pattern: ^(implicit|explicit|oauth2code|oauth2token)$
    certificates:
      type: string
      description: The Certificates Schema
      pattern: ^(none|single|chain)$
    credentialID:
      type: string
      description: The identifier associated to the credential
    numSignatures:
      type: integer
      description: The number of signatures to authorize
    credentialIDs:
      type: array
      description: One or more credentialID associated with the provided or implicit userID
      items:
        type: string
        description: The credentialIDs Schema
  securitySchemes:
    BasicAuth:
      type: http
      scheme: basic
    BearerAuth:
      type: http
      scheme: bearer
x-refined-from:
- infocert-csc-openapi.json
- infocert-csc-openapi.json