How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Accredify Dashboard API

The Accredify Dashboard API, published as two OpenAPI 3.1 documents. v1 covers OAuth 2.0 authorization-code grant and refresh, OpenBadges issuance, update and revocation, batch upload (JSON and Excel), issue-on-upload, certificate revocation by hash, email dispatch and an external-app certificate lookup. v2 covers batches, batch items, courses, documents, templates, email templates and the institution access matrix. Bearer JWT authentication; a UAT sandbox host is published in the specification servers block.

This API exposes 14 operations across 13 paths, organized into 5 resource areas. It is described by OpenAPI 3.1.0, at version 1.0.0.

Requests are made against 3 base URLs: http://dashboard.local.accredify.io/api, https://dashboard.uat.accredify.io/api, https://dashboard.accredify.io/api.

14 operations 13 paths 0 schemas 1 DELETE2 GET1 PATCH10 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.1.0
API Version
1.0.0
Base URL
https://dashboard.accredify.io/api
Authentication
HTTP Bearer
Resource Areas
5

Authentication & Security 1

Accredify Dashboard API declares 1 security scheme for authenticating requests. It accepts HTTP bearer tokens (JWT) (bearerAuth).

  • bearerAuth — JWT Authorization header using the Bearer scheme. Example: 'Authorization: Bearer {token}'

Paths & Operations 14

Across 13 paths, the API surfaces 14 operations — 1 DELETE, 2 GET, 1 PATCH, 10 POST. They span 5 resource areas: OAuth 2.0, OpenBadges, Issue, Revoke, External App Integrations. Each is listed below with its method, path, parameters, and response codes.

OAuth 2.0 4

OAuth 2.0

POST
/v1/oauth/grant
Generate an access token
authorizationCodeGrant body → 200302400401404422429500
GET
/v1/oauth/redirect
Request for user to authorize third party application access to their account. If successful, returns redirect with authorization code & state which can be used to request for an access token
redirect 2 params → 302400401404422429500
POST
/v1/oauth/refresh
Refresh expired access tokens
refresh body → 200302400401404422429500
GET
/v1/login/userTokenToLogin
Logs in user using access token in authorization header
6566d88c4b075dc49ecd14f458068a33 → 200
OpenBadges 4

OpenBadges

POST
/v1/openbadges/issue
Allow an issuer to create open badges
issueOpenBadges body → 200401404422429500
POST
/v1/openbadges/new-course
Allow an issuer to create an open badges course
createOpenBadgesCourse body → 200401404422429500
DELETE
/v1/openbadges/{assertion}
Allow an issuer to revoke an open badge
revokeOpenBadge 1 param body → 204401404422429500
PATCH
/v1/openbadges/{assertion}
Allow an issuer to update an open badge
updateOpenBadge 1 param body → 200401404422429500
Issue 4

Issue

POST
/v1/uploadBatch
Upload a batch to the dashboard
uploadBatch body → 200201400
POST
/v1/uploadBatchExcel
Upload a batch via Excel to the dashboard
uploadBatchExcel body → 200201400
POST
/v1/uploadIssueBatch
Uploads and issue a batch to the dashboard
uploadIssueBatch 1 param body → 200400
POST
/v1/sendEmails
Triggers the sending of emails for the certificates provided
sendEmails body → 200400
Revoke 1

Revoke

POST
/v1/revokeCerts
Revoked certificates by their hashes
revokeCerts body → 200400
External App Integrations 1

External App Integrations

POST
/ext/getCertificates
Retrieves an array of Certificates
getCertificates body → 200400

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

accredify0604-dashboard-v1-openapi.yaml Raw ↑
Where this information came from

This is an independent, third-party profile of Accredify Dashboard API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.