# Submit a credential for a person

`POST /credentials/submit`

Submit a credential document for verification and transformation into a W3C Verifiable Credential.
The credential will be processed, signed, and stored according to the OpenBadges 3.0 standard.

The API supports different types of credentials, each with its own metadata structure.

## Credential Types

### ACIC NCCHC (Australian Criminal Intelligence Commission - Nationally Coordinated Criminal History Check)
- **Type**: `acicncchc`
- **Description**: A nationally coordinated criminal history check certificate
- **Metadata Structure**: As per NSS result specification

## Response

On success, the API returns a reference to the created credential which can be used to retrieve or verify the credential later.
The credential is issued as a JWT (JSON Web Token) that can be verified using the TrueVault public key as disclosed in the JWT header `iss` field.

## Security

- Credentials are signed using RSA keys
- File uploads are scanned for malicious content
- All sensitive data is encrypted at rest

Parameters, request body, responses and error codes for this
endpoint are generated from the OpenAPI description. Read it at
/dist/docs/openapi.yaml for the machine-readable version.