identity-credentials
CAWG identity credentials (dormant until an identity certificate is enrolled).
| Method | Path | Operation ID |
|---|---|---|
| GET | /v1/identity-credentials |
listIdentityCredentials |
GET /v1/identity-credentials
Section titled “GET /v1/identity-credentials”Operation ID: listIdentityCredentials
List enrolled CAWG identity credentials and whether identity assertions are available.
The account’s enrolled CAWG identity credentials and whether identity assertions are available. Enrolment is done by Original Pictures operators.
Authentication: Authorization: Bearer <API key or console session> (Authentication).
Responses
Section titled “Responses”| Status | Description | Body |
|---|---|---|
| 200 | Successful Response | application/json IdentityCredentialListResponse |
| 401 | The bearer credential is missing, malformed, expired, revoked, or otherwise invalid. Clerk sessions and scoped API keys fail identically and the body never reveals which credential was presented or whether it exists. | application/json HttpErrorResponse |
| 403 | The provider deleted this identity, or the account is deactivated. A valid session cannot authorize a tombstoned identity back into use; an API key must also grant the scope required by the operation, and an operation is not classified by the route/scope policy and is denied by default. An API key restricted to client networks is refused from any other network with the API_KEY_IP_NOT_ALLOWED envelope. |
application/json HttpErrorResponse or ErrorResponse |
| 409 | Just-in-time provisioning conflicted: the verified email belongs to another provisioned account. | application/json HttpErrorResponse |
| 422 | A verified email is unavailable for account provisioning. | application/json HttpErrorResponse |
| 429 | The API key’s own request rate limit was exceeded (API_KEY_RATE_LIMITED). Only keys configured with a rate limit can receive this. Retryable after Retry-After seconds; the refused request consumed no capacity. |
application/json ErrorResponse |
| 503 | Credential verification is unavailable: Clerk session verification is not configured, no API-key pepper is enrolled, or bounded API-key verification is temporarily overloaded. Retryable. | application/json HttpErrorResponse |
200 response fields
Section titled “200 response fields”| Field | Type | Required | Description |
|---|---|---|---|
cawg_available |
boolean | yes | True when at least one credential is active and can sign. |
data |
array of IdentityCredentialResponse | yes | |
unavailable_reason |
string or null | yes | Why CAWG controls are disabled, worded for display; null when available. |