iGrant.io OID4VC API - API Keys

When to use

Use this skill when the task is one of these:

• Make an API key so that a server can call the OID4VCI and OpenID4VP endpoints without a user session.
• Change the name, the scopes, or the lifetime of a key.
• Delete a key, or list the keys of the organisation.
• Point a key at a sandbox organisation, or back at the main wallet.

An API key replaces a bearer access token on the OID4VC endpoints. Send it as Authorization: ApiKey <apiKey>. The key lives only on the server side, in an environment variable or a secret manager. The browser never sees it.

Endpoint reference

Base URL for the demo environment: https://demo-api.igrant.io.