Organizations

Create and manage organizations, members, DIDs, and client credentials on the CREDEBL platform.

Organizations are the central resource in CREDEBL. Every credential schema, DID, issuance workflow, and verification policy belongs to an organization. The Organizations API lets you create organizations, manage membership through invitations, configure decentralized identifiers (DIDs), and generate machine-to-machine client credentials.

Base path

All endpoints are rooted at /orgs.

Authentication

Every endpoint requires a JWT bearer token unless noted otherwise.

Authorization: Bearer <your-jwt-token>

Tokens are obtained through the authentication flow and passed in the Authorization header on every request.

Role-based access

Most endpoints are gated by the requesting user’s role within the target organization. Roles are assigned per-organization and are enforced server-side.

Role	Value	Description
owner	owner	Full control. Can delete the org, manage all members, and generate client credentials.
admin	admin	Can invite members, update org details, and manage roles.
issuer	issuer	Can issue credentials on behalf of the organization.
verifier	verifier	Can run verification requests.
member	member	Read-only access to org resources.
holder	holder	Can hold credentials issued to them.
super_admin	super_admin	Platform-level super administrator.
platform_admin	platform_admin	Platform administrator with cross-org access.

Roles are scoped to a single organization. A user can hold different roles in different organizations simultaneously.

Endpoints

Create organization

POST /orgs — Create a new organization.

Get organization

GET /orgs/:orgId — Retrieve details for a specific organization.

List organizations

GET /orgs — List all organizations the authenticated user belongs to.

Update organization

PUT /orgs/:orgId — Update organization details.

Delete organization

DELETE /orgs/:orgId — Permanently delete an organization.

List organization DIDs

GET /orgs/:orgId/dids — List all DIDs registered to an organization.

Set primary DID

PUT /orgs/:orgId/primary-did — Designate a DID as the primary identifier.

Send invitations

POST /orgs/:orgId/invitations — Invite one or more users to the organization.

List invitations

GET /orgs/:orgId/invitations — List all pending invitations.

Delete invitation

DELETE /orgs/:orgId/invitations/:invitationId — Cancel a pending invitation.

Update user roles

PUT /orgs/:orgId/user-roles/:userId — Change a member’s roles.

Generate client credentials

POST /orgs/:orgId/client_credentials — Generate a client ID and secret for machine-to-machine access.

Get client token

POST /orgs/:clientId/token — Exchange client credentials for an access token.

Get org roles

GET /orgs/:orgId/roles — Retrieve all role definitions for an organization.

Additional endpoints

Method	Path	Description	Required roles
GET	/orgs/public-profile	List all organizations with public profiles. Supports pagination.	None
GET	/orgs/public-profiles/:orgSlug	Get a public organization profile by slug.	None
GET	/orgs/:orgId/users	List members of an organization.	owner, admin, issuer, verifier, member, holder
GET	/orgs/:orgId/client_credentials	Fetch the existing client ID and secret for an organization.	owner, admin, issuer, verifier, member
GET	/orgs/dashboard/:orgId	Get organization dashboard summary.	owner, admin, issuer, verifier, member
GET	/orgs/activity-count/:orgId	Get counts of org-level references.	owner