15-minute tokens
OAuth2 client_credentials — no long-lived static keys. Exchange your client_secret for a 15-minute ES256 token and use that.
15-minute tokens
OAuth2 client_credentials — no long-lived static keys. Exchange your client_secret for a 15-minute ES256 token and use that.
Idempotent issuance
Safe retries with Idempotency-Key. Single or batch, all through one endpoint.
Permanent credentials
Issued VCs are preserved forever as did:key · VC-JWT — verifiable even after the user or club is deleted.
Always-live spec
The API reference renders the OpenAPI the server emits in real time — zero doc drift.
Pick the API that fits your use case — each reference renders the OpenAPI the server emits in real time.
Open API v2 · Direct issuance
For customers using Kolleges directly. Issue, look up, and revoke your own club’s certificates and badges.
Partner API · Channel partners
For channel partners that operate multiple clubs on others’ behalf. Delegated per-club issuance under a partner scope.