Quickstart

Get a test key

One request provisions a sandbox key plus two sample credentials — one valid, one revoked:

curl -X POST https://api-sandbox.glemo.io/sandbox/keys

{
  "apiKey": "glemo_test_…",
  "credentials": {
    "valid": "3f2a…",
    "revoked": "9c1b…"
  }
}

Keep the three values handy — that's everything you need.

Verify the valid credential

curl -X POST https://api-sandbox.glemo.io/verify \
  -H "Authorization: Bearer $GLEMO_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"method": "byHash", "credentialId": "<credentials.valid>"}'

Expected response:

{ "status": "valid", "checks": [{ "name": "lookup", "ok": true }] }

Watch a revocation

Run the same call with credentials.revoked:

{ "status": "revoked", "checks": [{ "name": "status", "ok": false }] }

That's the whole loop — one key, one call, a cryptographic verdict. The revocation comes from a real W3C Status List, not a mock.