trusthub credential

Issue, verify, and list W3C Verifiable Credentials signed with post-quantum ML-DSA proofs. Credentials bind an issuer DID to claims about a subject DID.

Commands

CommandDescription
trusthub credential issueIssue a new W3C Verifiable Credential
trusthub credential verifyVerify a credential from a JSON file
trusthub credential listList credentials (requires running gateway)

Usage

# Issue a credential with default type (AgentCapability)
trusthub credential issue --issuer-org acme --subject-org acme

# Issue with custom type and claims
trusthub credential issue \
  --issuer-org acme \
  --subject-org globex \
  --credential-type DataAccess \
  --claims '{"scope": "read", "dataset": "customer-records"}'

# Verify a credential file
trusthub credential verify credential.json

# List credentials (requires gateway)
trusthub credential list --holder-did did:trusthub:acme:abc...

Options

OptionApplies ToDescription
--issuer-orgissueOrganization ID of the credential issuer (required)
--subject-orgissueOrganization ID of the credential subject (required)
--credential-typeissueCredential type (default AgentCapability)
--claimsissueJSON string of claims to include
--audit-pathissuePath to audit database (default audit.db)
--holder-didlistFilter credentials by holder DID

Issue Output

Credential issued: urn:uuid:7f3a...
  Issuer:  did:trusthub:acme:def456...
  Subject: did:trusthub:acme:abc123...
  Type:    VerifiableCredential, AgentCapability