Skip to main content

Gx Label Credentials Issuance

At the moment, Label Credentials cannot be issued through the Issuer UI (web interface). However, they can be created via an API request to the issuer service.

Below is an example of how to issue a Label Credential using curl:

curl --location 'https://issuer.dome-marketplace-dev2.org/vci/v1/issuances' \
--header 'Content-Type: application/json' \
--header 'Authorization: Bearer eyJraW....' \
--header 'X-ID-TOKEN: ...' \
--data-raw '{
    "schema": "gx:LabelCredential",
    "operation_mode": "S",
    "format": "jwt_vc_json",
    "response_uri": "https://dome-marketplace-sbx.org/admin/uploadcertificate/urn:ngsi-ld:product-specification:6a8476a3-88e5-49de-873b-4ad36ebf6TNN",
    "credential_owner_email": "roger.miret@in2.es",
    "payload": {
        "credentialSubject": {
            "id": "urn:ngsi-ld:product-specification:6a8476a3-88e5-49de-873b-4ad36ebf6TNN",
            "gx:labelLevel": "BL",
            "gx:engineVersion": "1.3.0",
            "gx:rulesVersion": "CD25.03",
            "gx:compliantCredentials": [
                {
                    "id": "urn:criteria:dp-1",
                    "type": "gx:DataProtection",
                    "gx:digestSRI": "sha256-c482dc40dbb262467...ad8578a0466992e82f1d580b"
                }
            ],
            "gx:validatedCriteria": [
                "https://w3id.org/gaia-x/specs/cd24.06/criterion/P1.2.5",
                "https://w3id.org/gaia-x/specs/cd24.06/criterion/P1.1.1"
            ]
        },
        "validFrom": "2024-08-22T00:00:00Z",
        "validUntil": "2026-08-22T00:00:00Z"
    }
}'

Make sure to replace:

  • The Authorization and X-ID-TOKEN headers with valid tokens. The access token included as Bearer token must include a Power with function "Certification" and action "Attest".

  • The response_uri, credential_owner_email, and credentialSubject.id with the correct values for your case.

After a Gx:Label Credential is issued, it is automatically uploaded to the Marketplace to certify the product identified by the “response_uri” field.
If the upload process fails, the credential holder will receive an email with instructions to manually upload the credential.