Credential delivery
The distribution object: one link that is the QR, the email and the tag.
A distribution mints a link for one credential and returns it. That link is the whole delivery: a QR code is it drawn, an NFC tag is it written, an email is it inside a message.
POST/v1/distributions
Hands a credential to somebody, on one channel, for one wallet.
| Field | Values |
|---|---|
credentialId | The credential being handed over. Required. |
channel | link, qr, email, api, web, app, nfc — how it travels. |
wallet | apple_wallet, google_wallet, web — where the pass ends up. |
recipientName, recipientEmail | Who it is for. Required for email. |
message | A line the recipient sees. |
expiresAt | When the link stops working. |
201 Created
{
"id": "…",
"url": "https://…",
"code": "…",
"channel": "qr",
"wallet": "apple_wallet",
"status": "ready",
"credential": { "id": "cred_…", "serial": "…", "state": "issued" }
}Taking a link back
POST /v1/distributions/{id}/revoke kills one link without touching the credential — the right call when a message went to the wrong address. POST /v1/distributions/{id}/regenerate issues a fresh one in its place.