{"id":48268184,"url":"https://github.com/w3c/vcalm","last_synced_at":"2026-04-05T06:01:26.810Z","repository":{"id":37901050,"uuid":"287404406","full_name":"w3c/vcalm","owner":"w3c","description":"An HTTP API for performing credential lifecycle management for Verifiable Credentials.","archived":false,"fork":false,"pushed_at":"2026-04-02T13:33:37.000Z","size":6683,"stargazers_count":132,"open_issues_count":30,"forks_count":52,"subscribers_count":39,"default_branch":"main","last_synced_at":"2026-04-03T00:59:21.341Z","etag":null,"topics":["w3c-ccg","workitem"],"latest_commit_sha":null,"homepage":"https://w3c-ccg.github.io/vcalm/","language":"HTML","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/w3c.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.md","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-08-14T00:09:39.000Z","updated_at":"2026-04-02T13:32:22.000Z","dependencies_parsed_at":"2024-06-04T19:19:47.940Z","dependency_job_id":"6e1c8c56-9f82-4651-a16f-137823a282a3","html_url":"https://github.com/w3c/vcalm","commit_stats":null,"previous_names":["w3c-ccg/vcalm","w3c/vcalm"],"tags_count":2,"template":false,"template_full_name":null,"purl":"pkg:github/w3c/vcalm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/w3c%2Fvcalm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/w3c%2Fvcalm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/w3c%2Fvcalm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/w3c%2Fvcalm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/w3c","download_url":"https://codeload.github.com/w3c/vcalm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/w3c%2Fvcalm/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":31426193,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-04-05T02:22:46.605Z","status":"ssl_error","status_checked_at":"2026-04-05T02:22:33.263Z","response_time":75,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["w3c-ccg","workitem"],"created_at":"2026-04-04T22:00:29.169Z","updated_at":"2026-04-05T06:01:26.401Z","avatar_url":"https://github.com/w3c.png","language":"HTML","funding_links":[],"categories":["HTML"],"sub_categories":[],"readme":"# [VCALM](https://github.com/w3c-ccg/vcalm/) Goals\n\nThe W3C Credentials Community Group Verifiable Credential APIs are a set of\nRESTful API definitions conforming with the [OpenAPI 3.0\nSpecification](https://swagger.io/specification/v3/) that support Verifiable\nCredential Lifecycle Management such as Issuing, Holding/Presentation/Exchange,\nand Verification for the roles of Issuer, Holder, and Verifier as described in\nthe [Verifiable Credential Data Model](https://www.w3.org/TR/vc-data-model-2.0/)\nspecification.\n\nThese APIs provide a standard set of interfaces by which interoperability may be\ntested and verified by various parties who leverage Verifiable Credentials\n(VCs).\n\nYou can view the latest version of the specification here:\n\n[The VCALM Specification](https://w3c-ccg.github.io/vcalm/)\n\nor popular renderings of the OAS definitions here:\n\n* [ReDoc](https://w3c-ccg.github.io/vcalm/api/redoc.html)\n* [RapiDoc](https://w3c-ccg.github.io/vcalm/api/rapidoc.html)\n* [Swagger](https://w3c-ccg.github.io/vcalm/api/swagger.html)\n\nAs some implementations might not support all endpoints defined by this\nspecification, the APIs provide a clean measure by which to identify which\nmethods are or are not implemented when comparing solutions that provide VC\nsupport across vendors.\n\nTest procedures and specifications are provided as part of this API definition\nto allow for repeatable and automated interoperability testing between solutions\nthat interact with Verifiable Credentials. Some of these tests suites include:\n\n* [Issuer Test Suite](https://w3c-ccg.github.io/vc-api-issuer-test-suite/)\n* [Verifier Test Suite](https://w3c-ccg.github.io/vc-api-verifier-test-suite/)\n* [EdDSA Test Suite](https://w3c.github.io/vc-di-ed25519signature2020-test-suite/)\n* [Status List 2021 Test Suite](https://w3c-ccg.github.io/status-list-2021-test-suite/)\n\n## Style, Versioning, and Contribution\nThis API is versioned in conformance with the [Semantic Versioning 2.0\nspecification](https://semver.org/) to prevent breaking changes between minor\nversions, and to allow for reliable testing and integration of implementations\nof this API within enterprise environments.\n\nAPI style, endpoint naming, and object definitions within the vcalm should be\nin compliance with the guidelines laid out in the [REST API\nTutorial](https://restfulapi.net/).  The VC API conforms primarily to the\n[controller](https://restfulapi.net/resource-naming/) model as detailed in the\nREST documentation.\n\nThe actual standard and specification defined by the VC-API is provided in YAML\nformat and should be referenced directly by developers should questions arise,\nas certain interfaces on top of OpenAPI specifications may differ in their\npresentation of certain scenarios commonly encountered in API definitions,\nespecially when dealing with `nullable` parameters or properties.\n\nContributions to this repository should take place via [pull\nrequests](https://github.com/w3c-ccg/vcalm/pulls), and should generally\nreference an issue and related discussion around the topic\n\n## Best Practices\n\n### Security\n\nImplementations of this API SHOULD NOT be exposed directly over http(s) without\nauthorization. Best Practices around OAuth and other widely accepted standards\nfor authentication and/or authorization should be followed.\n\n### Holder APIs\n\nHolder APIs are optional as many implementations will not need them, however\nthey are extremely useful for testing purposes as well as for cases where WebKMS\nis not present or not an option.\n\n## Public Meetings\n\nThe editors host an open community call using W3C-CCG meeting infrastructure.\nThis entails:\n- Proposed agendas and supplemental materials for review are sent out by any\n  regularly-participating member to the [CCG mailing\n  list](https://lists.w3.org/Archives/Public/public-credentials/); editors and\n  CCG chairs reserve the right to  adjudicate if conflicting, inappropriate, or\n  contentious agenda proposals are put forward.\n- Mostly-audio calls hosted in an open virtual meeting room\n  ([Calendar invite](https://www.w3.org/events/meetings/ce3fe409-8ab6-4b25-ae46-f605108403f1/))\n  This allows members to screenshare during issue review or discussion of\n  diagrams.\n- Transcription and video is recorded and shared immediately after the calls.\n\n### Development\n\nBefore committing changes to the OpenAPI spec files, please be sure to run the linter and correct any errors:\n\n```bash\nnpm ci\nnpm run lint\n```\n\nTo view the generated specification, execute `npm run serve`. By default this\nwill start an http server on http://127.0.0.1:8080. Once you have the server\nstarted, you can view the `index.html` here:\n\n- [index.html](http://127.0.0.1:8080/index.html)\n\nTo view the API in popular renderings, execute `npm run serveAlternate`. This\nwill start an http server on http://127.0.0.1:8080. Once you have the server\nstarted, you can view the documentation in several formats:\n\n- [RapiDoc](http://127.0.0.1:8080/api/rapidoc.html)\n- [Redocly](http://127.0.0.1:8080/api/redoc.html)\n- [Swagger](http://127.0.0.1:8080/api/swagger.html)\n\nDocumentation for the [`http-server` can be found here.](https://www.npmjs.com/package/http-server)\n\nIf you need to run on another port, execute `npm run serveIndex -- -p 4543` replacing `4543` with a custom port.\n\n## Additional Documentation\n\n- [Verifiable Credentials Data Model](https://w3c.github.io/vc-data-model/)\n- [Data Integrity](https://w3c.github.io/vc-data-integrity/)\n- [Bitstring Status List](https://w3c.github.io/vc-bitstring-status-list/)\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fw3c%2Fvcalm","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fw3c%2Fvcalm","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fw3c%2Fvcalm/lists"}