# List credential definitions.


Returns the credential definitions available to the calling service user's organization (X-Org-Id) in its environment (X-Environment): the org's own definitions plus the system/official/public ones it may use. Available to any authenticated service user — no specific scope is required.

Endpoint: GET /b2b/v1/credential-definitions
Version: 1.0.0
Security: BearerAuth

## Header parameters:

  - `X-Org-Id` (string, required)
    Organization the call is acting on. The authenticated service user must be a member of this organization in DeepAdmin; otherwise the request returns 404.

  - `X-Environment` (string, required)
    Environment the call is scoped to. Resources are isolated per environment.

## Response 200 fields (application/json):

  - `credential_definitions` (array, required)
    Credential definitions available to the calling organization.

  - `credential_definitions.credential_definition_id` (string, required)
    Credential definition UUID (use as credential_definition_id in offer requests). UUID v4 identifier.
    Example: 550e8400-e29b-41d4-a716-446655440000

  - `credential_definitions.default_validity_seconds` (integer, required)
    DefaultValiditySeconds is the default validity used when issuing a credential from this credential definition if the issuance request doesn't override it. NULL means the credential is issued without an "exp" claim (never expires).

  - `credential_definitions.environments` (array, required)
    Swiyu environments this credential definition is available in: "beta" and/or
"production".

  - `credential_definitions.has_logo` (boolean, required)
    Whether this credential definition currently has an uploaded logo.

  - `credential_definitions.is_official` (boolean, required)
    Whether this is an official (government-issued) credential definition.

  - `credential_definitions.is_system` (boolean, required)
    Whether this is a system credential definition available to all organizations.

  - `credential_definitions.name` (string, required)
    Human-readable credential definition name.

  - `credential_definitions.vct` (string, required)
    Verifiable credential type (vct).

  - `total` (integer, required)
    Total number of credential definitions returned.

## Response 400 fields (application/json):

  - `code` (string, required)
    Machine-readable error code.

  - `message` (string, required)
    Human-readable error description.

  - `details` (object)
    Optional structured data with additional context.

## Response 401 fields (application/json):

  - `code` (string, required)
    Machine-readable error code.

  - `message` (string, required)
    Human-readable error description.

  - `details` (object)
    Optional structured data with additional context.

## Response 403 fields (application/json):

  - `code` (string, required)
    Machine-readable error code.

  - `message` (string, required)
    Human-readable error description.

  - `details` (object)
    Optional structured data with additional context.

## Response 429 fields (application/json):

  - `code` (string, required)
    Machine-readable error code.

  - `message` (string, required)
    Human-readable error description.

  - `details` (object)
    Optional structured data with additional context.

## Response 500 fields (application/json):

  - `code` (string, required)
    Machine-readable error code.

  - `message` (string, required)
    Human-readable error description.

  - `details` (object)
    Optional structured data with additional context.