Studio
GET /studio
Human-facing CoreX operating surface.
CoreX Developer Catalogue
Browse APIs, channels and standards without reading a raw catalogue payload.
This page is the human presentation of the same machine-readable catalogue used by integrations.
API catalogue
Verify
GET /verify
Public verification entry surface.
Living Trust
GET /v1/objects/:reference
Resolve a canonical living object and current trust state.
Trust Receipt
GET /trust-receipt/:reference
Human-readable lifecycle-aware trust receipt.
Trust Fabric
GET /v1/trust-fabric/catalogue
Service tiers, assurance, disclosure and reference catalogue.
Trust Infrastructure
GET /v1/trust-infrastructure
Capabilities, standards, vertical profiles and readiness.
Credentials
GET /v1/credentials/verify/:credentialId
Credential verification.
Portable Credentials
GET /v1/portable-credentials/:claimId/vc.json
Portable credential projection.
Commercial Proof
GET /v1/commercial-proofs/:reference
Commercial proof and current source lifecycle.
Developer
GET /developers/openapi.json
Versioned read-only OpenAPI contract for public trust APIs.
Developer
GET /developers/assets.json
Reusable asset/capability catalogue with usage, composition, maturity and packaging metadata.
Developer
GET /developers/adapters/v2.json
Adapter Framework V2 manifest and production-acceptance catalogue; metadata does not activate adapters.
Developer
GET /developers/provider-certification/v1.json
Provider certification dossiers compiled from Adapter Framework V2; kit readiness does not grant live provider acceptance.
Developer
GET /developers/asyncapi.json
Generated AsyncAPI projection for canonical event/webhook contracts.
Developer
GET /developers/network-conformance.json
Deterministic network-adapter conformance catalogue; not production acceptance.
Developer Sandbox
POST /developers/sandbox/test-clock
Deterministic test-clock evaluation without production time authority.
Developer Sandbox
POST /developers/sandbox/providers/:providerId/run
Execute a registered synthetic provider with no production side effects.
Developer
GET /developers/telemetry/readiness.json
Read telemetry-export readiness without revealing provider endpoints or headers.
Standards
GET /developers/standards/catalogue.json
Read canonical standards maturity/evidence profiles with formal claims fail-closed.
Standards
GET /developers/standards/eudi-arf3.json
Read EUDI ARF 3.0.0/FCAF target-alignment and evidence requirements.
Standards
GET /developers/standards/iso20022.json
Read ISO 20022 semantic projection targets; no formal message conformance claim.
Release evidence
GET /developers/release-evidence/example.json
Read a deterministic supply-chain evidence projection example.
Developer Sandbox
POST /developers/sandbox/trust-policy
Side-effect-free Trust Fabric policy evaluation.
Developer Sandbox
POST /developers/sandbox/offline-verification
Side-effect-free offline verification assessment.
Developer Sandbox
GET /developers/sandbox/examples.json
Versioned side-effect-free example payloads and sandbox boundaries.
Channel readiness
WEB_DESKTOP
Public Verify, Trust Receipt and authenticated workspaces are deployed.
WEB_MOBILE
Public Verify and Trust Receipt are responsive; Studio/workspace responsive shell is activation-ready.
TABLET
Responsive web layouts are compatible; dedicated tablet acceptance remains a release test rather than a new architecture.
QR_SCAN
QR-linked verification surfaces are implemented; credential QR issuance remains coupled to credential persistence readiness.
PWA
Mobile-first shell and offline semantics exist; installability/service-worker caching remains a separate activation step with strict trust-data cache boundaries.
WALLET
W3C VC projection exists; live OpenID wallet transports/interoperability remain gated.
REST_API
CoreX verification, trust infrastructure, credential and living-object APIs are deployed.
WEBHOOK
Signed lifecycle/webhook receiver paths exist; some source ingress remains externally gated.
IOT_EVENT
Provider-neutral event/object architecture supports machine/device sources; device-specific adapters remain deployment-specific.
OFFLINE_VERIFY
Offline verification policy semantics are activation-ready; offline results must never claim live lifecycle freshness.
LOW_BANDWIDTH_SYNC
Resilient sync contracts support offline/2G/3G queueing, idempotency, small-batch metadata-first transfer, compression guidance and deferred large binaries; installable client queue/service-worker transport remains to be activated per client surface.
Standards and adapters
OIDC_FEDERATION
OPENID-CONNECT-1.0 · Federated authenticated identity and subject context.
OAUTH_RESOURCE_AUTHORIZATION
OAUTH-2.X · Scoped protected-resource authorization between clients, services and APIs.
FIDO_WEBAUTHN_AUTHENTICATION
FIDO2-WEBAUTHN · Phishing-resistant authentication and passkey-capable holder or administrator access.
SCIM_PROVISIONING
SCIM-2.0 · Enterprise subject, group and lifecycle provisioning without making an external directory canonical for CoreX trust decisions.
W3C_VC_2_CREDENTIAL
W3C-VC-2.0 · Portable privacy-minimal credential projection over canonical CoreX credential records; transport and formal conformance remain separate gates.
OPENID4VCI_ISSUANCE
OPENID4VCI-1.0 · Provider-neutral credential-issuer metadata and credential-configuration foundations over canonical CoreX credentials; live authorization/credential endpoints remain an activation gate.
OPENID4VP_PRESENTATION
OPENID4VP-1.0 · Policy-controlled presentation-definition foundations for verifier requests; live wallet transport remains an activation gate.
EUDI_WALLET_INTEROP
EUDI-ARF · Future EU wallet issuer-holder-verifier interoperability where applicable.
OPEN_BADGES_3_PRESENTATION
OPEN-BADGES-3.0 · Portable achievement and learning credential presentation where the credential schema is suitable.
GS1_EPCIS_EVENT_INTEROP
GS1-EPCIS-2.X · Project canonical CoreX custody, transformation and provenance events into EPCIS-style visibility events without transferring canonical authority to the projection.
UDI_REGULATORY_REFERENCE
UDI-REGULATORY-SOURCE · Resolve medical-device identifiers to jurisdiction-specific regulatory source references while preserving competent-source authority.