CoreX · trust infrastructure for people, records, credentials and systemsEvidence-backed · provider-neutral · expert controls remain available
COREXIntelligence at the Core
CoreX Developers & Sandbox

Build against the trust infrastructure without triggering production side effects.

Use live read APIs, machine-readable capability catalogues and side-effect-free sandbox decisions while provider-bound and authority-changing operations remain gated.

5-minute quickstarts

Start with a read-only flow that already exists in production, then move into governed write operations after tenant, identity and provider configuration is ready.

GATED_BY_PERSISTENCE

Verify a credential

Resolve lifecycle-aware credential verification without creating authority.

GET /v1/credentials/verify/{credentialId}

curl -s https://corexos.com/v1/credentials/verify/EXAMPLE_CREDENTIAL_ID

READY

Get a portable VC projection

Project an existing canonical CoreX credential into the public W3C VC representation.

GET /v1/portable-credentials/{claimId}/vc.json

curl -s https://corexos.com/v1/portable-credentials/EXAMPLE_CLAIM_ID/vc.json

LIVE

Resolve current trust state

Resolve the current/historical trust state of a supported living object.

GET /v1/objects/{reference}

curl -s https://corexos.com/v1/objects/EXAMPLE_REFERENCE

LIVE

Inspect activation readiness

Inspect human identity and wallet-protocol activation gates without exposing secrets.

GET /v1/activation-readiness

curl -s https://corexos.com/v1/activation-readiness

LIVE

Inspect production foundation readiness

Inspect production schema and persistence readiness while keeping signing, custody, treasury, settlement and regulatory authority fail-closed.

GET /v1/activation-readiness/production-foundations

curl -s https://corexos.com/v1/activation-readiness/production-foundations

API surface

LIVE

GET /studio

Studio · Human-facing CoreX operating surface.

LIVE

GET /verify

Verify · Public verification entry surface.

LIVE

GET /v1/objects/:reference

Living Trust · Resolve a canonical living object and current trust state.

LIVE

GET /trust-receipt/:reference

Trust Receipt · Human-readable lifecycle-aware trust receipt.

LIVE

GET /v1/trust-fabric/catalogue

Trust Fabric · Service tiers, assurance, disclosure and reference catalogue.

LIVE

GET /v1/trust-infrastructure

Trust Infrastructure · Capabilities, standards, vertical profiles and readiness.

GATED_BY_PERSISTENCE

GET /v1/credentials/verify/:credentialId

Credentials · Credential verification.

READY

GET /v1/portable-credentials/:claimId/vc.json

Portable Credentials · Portable credential projection.

LIVE

GET /v1/commercial-proofs/:reference

Commercial Proof · Commercial proof and current source lifecycle.

LIVE

GET /developers/openapi.json

Developer · Versioned read-only OpenAPI contract for public trust APIs.

LIVE

GET /developers/assets.json

Developer · Reusable asset/capability catalogue with usage, composition, maturity and packaging metadata.

READY

GET /developers/adapters/v2.json

Developer · Adapter Framework V2 manifest and production-acceptance catalogue; metadata does not activate adapters.

READY

GET /developers/provider-certification/v1.json

Developer · Provider certification dossiers compiled from Adapter Framework V2; kit readiness does not grant live provider acceptance.

READY

GET /developers/asyncapi.json

Developer · Generated AsyncAPI projection for canonical event/webhook contracts.

READY

GET /developers/network-conformance.json

Developer · Deterministic network-adapter conformance catalogue; not production acceptance.

SHADOW

POST /developers/sandbox/test-clock

Developer Sandbox · Deterministic test-clock evaluation without production time authority.

SHADOW

POST /developers/sandbox/providers/:providerId/run

Developer Sandbox · Execute a registered synthetic provider with no production side effects.

READY

GET /developers/telemetry/readiness.json

Developer · Read telemetry-export readiness without revealing provider endpoints or headers.

READY

GET /developers/standards/catalogue.json

Standards · Read canonical standards maturity/evidence profiles with formal claims fail-closed.

READY

GET /developers/standards/eudi-arf3.json

Standards · Read EUDI ARF 3.0.0/FCAF target-alignment and evidence requirements.

READY

GET /developers/standards/iso20022.json

Standards · Read ISO 20022 semantic projection targets; no formal message conformance claim.

READY

GET /developers/release-evidence/example.json

Release evidence · Read a deterministic supply-chain evidence projection example.

SHADOW

POST /developers/sandbox/trust-policy

Developer Sandbox · Side-effect-free Trust Fabric policy evaluation.

SHADOW

POST /developers/sandbox/offline-verification

Developer Sandbox · Side-effect-free offline verification assessment.

LIVE

GET /developers/sandbox/examples.json

Developer Sandbox · Versioned side-effect-free example payloads and sandbox boundaries.

Sandbox operations

These operations evaluate existing CoreX logic but do not issue credentials, change entitlements, call payment providers or bind external authority.

SHADOW

Trust policy evaluation

POST JSON to /developers/sandbox/trust-policy to test ALLOW, DENY and STEP_UP behavior using the existing Trust Fabric.

SHADOW

Offline verification assessment

POST JSON to /developers/sandbox/offline-verification to test PASS/HOLD/FAIL semantics without claiming live lifecycle status.

Interoperability

IMPLEMENTATION_READY

OIDC_FEDERATION

OPENID-CONNECT-1.0 · Federated authenticated identity and subject context.

TARGET_ALIGNMENT

OAUTH_RESOURCE_AUTHORIZATION

OAUTH-2.X · Scoped protected-resource authorization between clients, services and APIs.

TARGET_ALIGNMENT

FIDO_WEBAUTHN_AUTHENTICATION

FIDO2-WEBAUTHN · Phishing-resistant authentication and passkey-capable holder or administrator access.

TARGET_ALIGNMENT

SCIM_PROVISIONING

SCIM-2.0 · Enterprise subject, group and lifecycle provisioning without making an external directory canonical for CoreX trust decisions.

IMPLEMENTATION_READY

W3C_VC_2_CREDENTIAL

W3C-VC-2.0 · Portable privacy-minimal credential projection over canonical CoreX credential records; transport and formal conformance remain separate gates.

IMPLEMENTATION_READY

OPENID4VCI_ISSUANCE

OPENID4VCI-1.0 · Provider-neutral credential-issuer metadata and credential-configuration foundations over canonical CoreX credentials; live authorization/credential endpoints remain an activation gate.

IMPLEMENTATION_READY

OPENID4VP_PRESENTATION

OPENID4VP-1.0 · Policy-controlled presentation-definition foundations for verifier requests; live wallet transport remains an activation gate.

REFERENCE

EUDI_WALLET_INTEROP

EUDI-ARF · Future EU wallet issuer-holder-verifier interoperability where applicable.

REFERENCE

OPEN_BADGES_3_PRESENTATION

OPEN-BADGES-3.0 · Portable achievement and learning credential presentation where the credential schema is suitable.

IMPLEMENTATION_READY

GS1_EPCIS_EVENT_INTEROP

GS1-EPCIS-2.X · Project canonical CoreX custody, transformation and provenance events into EPCIS-style visibility events without transferring canonical authority to the projection.

IMPLEMENTATION_READY

UDI_REGULATORY_REFERENCE

UDI-REGULATORY-SOURCE · Resolve medical-device identifiers to jurisdiction-specific regulatory source references while preserving competent-source authority.