> ## Documentation Index > Fetch the complete documentation index at: https://docs.didit.me/llms.txt > Use this file to discover all available pages before exploring further. # Submit a Digital Credentials Wallet Response > Send the credential response a Digital Credentials API wallet such as Google Wallet returned to your page or app, and let Didit decide the verification. Use this operation for a wallet whose start response carries `next_action.type = request_digital_credential`, such as Google Wallet. Authenticate with the application API key that started the verification, from your backend. Send exactly what the wallet returned: `{protocol, data}` from `navigator.credentials.get` in the browser, or the parsed `credentialJson` from Android Credential Manager. The response is encrypted to Didit, so do not alter it. Didit checks the issuer's signature against its trusted issuer roots, every returned value against its signed digest, and the device signature over your `origin` and this request, then decides the verification. A response can be submitted once. A second submit returns the verification that was already decided. A verification that does not take a wallet response answers `409` with `error: "not_a_digital_credentials_wallet"`. See [Digital ID wallet APIs](https://docs.didit.me/standalone-apis/digital-id-wallets.md#digital-credentials-wallets-google-wallet) for the full sequence, including the browser and Android snippets. ## OpenAPI ````yaml POST /v3/id-verification/wallets/verifications/{request_id}/response/ openapi: 3.0.0 info: version: 3.0.0 title: Didit Verification API description: Identity verification API. Authenticate with x-api-key header. servers: - url: https://verification.didit.me security: [] tags: [] paths: /v3/id-verification/wallets/verifications/{request_id}/response/: post: tags: - Digital ID wallets summary: Submit a wallet response description: >- Digital Credentials API wallets (Google Wallet): send what the wallet returned to your page or app for a verification whose next_action is request_digital_credential. Didit decrypts it, checks the issuer's signature against the trusted issuer roots, every returned value against its signed digest, and the device signature over your origin and this request, then decides the verification: verified (billed once) or declined with the error code. Single use: a second submit returns the decided verification. operationId: submit_wallet_verification_response parameters: - in: path name: request_id schema: type: string format: uuid description: The request_id the start endpoint returned. required: true requestBody: content: application/json: schema: $ref: >- #/components/schemas/DigitalIdWalletApiWalletDigitalCredentialResponseRequest example: response: protocol: openid4vp-v1-signed data: response: application/x-www-form-urlencoded: schema: $ref: >- #/components/schemas/DigitalIdWalletApiWalletDigitalCredentialResponseRequest example: response: protocol: openid4vp-v1-signed data: response: multipart/form-data: schema: $ref: >- #/components/schemas/DigitalIdWalletApiWalletDigitalCredentialResponseRequest example: response: protocol: openid4vp-v1-signed data: response: required: true responses: '200': content: application/json: schema: $ref: >- #/components/schemas/DigitalIdWalletApiWalletVerificationResponse example: request_id: 00000000-0000-4000-8000-000000000001 wallet_verification: wallet: id: google_wallet name: Google Wallet issuing_authority: >- Google Wallet (ID pass) and US state issuers (mobile driving licence) country: USA status: Approved outcome: verified error: null interaction: digital_credentials simulated: false expires_at: '2026-01-01T10:10:00Z' next_action: null identity: full_name: Alex Example first_name: Alex last_name: Example date_of_birth: '1990-01-31' nationality: USA issuing_state: USA attributes: document_number: X0000000 document_expiry_date: '2030-01-31' level_of_assurance: substantial verified_at: '2026-01-01T10:01:00Z' signature_valid: true credential_type: person_identification vendor_data: your-customer-reference metadata: reference: example created_at: '2026-01-01T10:00:00Z' description: '' '400': content: application/json: schema: $ref: >- #/components/schemas/DigitalIdWalletApiWalletVerificationStartBadRequest description: 'Field validation errors ({field: [messages]}).' '403': content: application/json: schema: $ref: >- #/components/schemas/DigitalIdWalletApiClientCredentialsForbiddenErrorMessage description: 'Missing or invalid credentials (x-api-key or Authorization: Bearer).' '404': content: application/json: schema: $ref: '#/components/schemas/DigitalIdWalletApiWalletVerificationError' description: >- error not_found: no wallet verification of this application has this request_id. '409': content: application/json: schema: $ref: '#/components/schemas/DigitalIdWalletApiWalletVerificationError' description: >- error not_a_digital_credentials_wallet: this verification does not take a wallet response. '503': content: application/json: schema: $ref: '#/components/schemas/DigitalIdWalletApiWalletVerificationError' description: >- error wallet_not_configured: this environment cannot verify the wallet. security: - ApiKeyAuth: [] - BearerAuth: [] x-codeSamples: - lang: curl label: cURL source: |- curl --request POST \ --url https://verification.didit.me/v3/id-verification/wallets/verifications/REQUEST_ID/response/ \ --header 'x-api-key: YOUR_API_KEY' \ --header 'Content-Type: application/json' \ --data '{ "response": { "protocol": "openid4vp-v1-signed", "data": { "response": "" } } }' components: schemas: DigitalIdWalletApiWalletDigitalCredentialResponseRequest: type: object description: >- What the wallet answered your page or app, for a ``request_digital_credential`` verification. properties: response: type: object additionalProperties: {} description: >- Exactly what the wallet returned: {protocol, data} of the DigitalCredential from navigator.credentials.get, or the parsed credentialJson of Android's DigitalCredential. Encrypted to Didit; do not alter it. required: - response DigitalIdWalletApiWalletVerificationResponse: type: object description: One standalone wallet verification, as every wallet endpoint answers it. properties: request_id: type: string format: uuid wallet_verification: $ref: '#/components/schemas/DigitalIdWalletApiWalletVerificationResult' vendor_data: type: string nullable: true metadata: type: object additionalProperties: {} nullable: true description: The metadata object sent at start, or null. created_at: type: string format: date-time required: - created_at - metadata - request_id - vendor_data - wallet_verification DigitalIdWalletApiWalletVerificationStartBadRequest: oneOf: - $ref: '#/components/schemas/DigitalIdWalletApiWalletVerificationError' - $ref: '#/components/schemas/DigitalIdWalletApiWalletVerificationFieldErrors' DigitalIdWalletApiClientCredentialsForbiddenErrorMessage: type: object properties: detail: type: string default: Forbidden - User doesn't have permission DigitalIdWalletApiWalletVerificationError: type: object properties: error: type: string description: Stable machine-readable code, e.g. wallet_unavailable. detail: type: string required: - detail - error DigitalIdWalletApiWalletVerificationResult: type: object properties: wallet: allOf: - $ref: '#/components/schemas/DigitalIdWalletApiWallet' readOnly: true country: type: string status: type: string description: Not Finished while pending, then Approved (verified) or Declined. outcome: $ref: >- #/components/schemas/DigitalIdWalletApiWalletVerificationResultOutcomeEnum error: type: string nullable: true readOnly: true interaction: allOf: - $ref: '#/components/schemas/DigitalIdWalletApiInteractionEnum' readOnly: true simulated: type: boolean readOnly: true expires_at: type: string format: date-time next_action: allOf: - $ref: '#/components/schemas/DigitalIdWalletApiWalletNextAction' nullable: true readOnly: true identity: allOf: - $ref: '#/components/schemas/DigitalIdWalletApiWalletIdentity' nullable: true readOnly: true attributes: type: object additionalProperties: {} nullable: true readOnly: true level_of_assurance: type: string nullable: true verified_at: type: string format: date-time nullable: true signature_valid: type: boolean nullable: true description: >- True once the credential's signature was verified; null for a simulated one. credential_type: type: string nullable: true required: - attributes - country - credential_type - error - expires_at - identity - interaction - level_of_assurance - next_action - outcome - signature_valid - simulated - status - verified_at - wallet DigitalIdWalletApiWalletVerificationFieldErrors: type: object description: 'Request validation errors: each rejected field with its messages.' additionalProperties: type: array items: type: string DigitalIdWalletApiWallet: type: object properties: id: type: string description: Catalog id of the wallet, e.g. bankid_se. name: type: string issuing_authority: type: string nullable: true required: - id - issuing_authority - name DigitalIdWalletApiWalletVerificationResultOutcomeEnum: enum: - pending - verified - cancelled - timeout - failed type: string description: |- * `pending` - Pending * `verified` - Verified * `cancelled` - Cancelled by the user * `timeout` - Timed out * `failed` - Failed DigitalIdWalletApiInteractionEnum: enum: - redirect - in_app - digital_credentials type: string description: |- * `redirect` - redirect * `in_app` - in_app * `digital_credentials` - digital_credentials DigitalIdWalletApiWalletNextAction: type: object properties: type: allOf: - $ref: '#/components/schemas/DigitalIdWalletApiWalletNextActionTypeEnum' description: >- redirect: send the user's browser to url. confirm_in_app: show verification_code to the user, who checks it matches the code in their wallet app and confirms there; then poll. request_digital_credential: in a user gesture on the origin you started with, ask the wallet with digital_credentials.request, then send what it returns to POST .../verifications/{request_id}/response/. * `redirect` - redirect * `confirm_in_app` - confirm_in_app * `request_digital_credential` - request_digital_credential url: type: string format: uri description: 'redirect only: where the user signs in with the wallet.' digital_credentials: allOf: - $ref: >- #/components/schemas/DigitalIdWalletApiWalletDigitalCredentialsRequest description: 'request_digital_credential only: the request to hand to the wallet.' verification_code: type: string description: >- confirm_in_app only: the 4-digit comparison code the wallet app shows too. poll_interval_seconds: type: integer description: >- confirm_in_app only: how often to call POST .../verifications/{request_id}/poll/ for prompt feedback. Didit also polls pending sign-ins in the background, so the webhook reports the outcome even when you do not poll. required: - type DigitalIdWalletApiWalletIdentity: type: object properties: full_name: type: string nullable: true first_name: type: string nullable: true last_name: type: string nullable: true date_of_birth: type: string format: date nullable: true nationality: type: string nullable: true description: ISO3 nationality, only when the wallet asserts one (never inferred). issuing_state: type: string description: ISO3 country whose scheme issued the identity. required: - date_of_birth - first_name - full_name - issuing_state - last_name - nationality DigitalIdWalletApiWalletNextActionTypeEnum: enum: - redirect - confirm_in_app - request_digital_credential type: string description: |- * `redirect` - redirect * `confirm_in_app` - confirm_in_app * `request_digital_credential` - request_digital_credential DigitalIdWalletApiWalletDigitalCredentialsRequest: type: object properties: protocol: type: string description: openid4vp-v1-signed. request: type: object additionalProperties: {} description: >- Pass as is: navigator.credentials.get({digital: request}) in the browser, or JSON.stringify(request) as GetDigitalCredentialOption's requestJson on Android. Signed by Didit for your application. required: - protocol - request securitySchemes: ApiKeyAuth: type: apiKey in: header name: x-api-key description: >- Your application's API key, from Developers -> API keys in the Business Console. The primary key has full access. A named key can be scoped: none, read or write per resource, limited to some workflows or to approved sessions, to a list of IP addresses, and to an expiry date. 401 means the key is missing, wrong, revoked or expired; 403 means the key has no access to this resource or action, or the request came from an address outside its IP list; 404 on a session route means the session is outside the key's workflows or statuses. A key without media access receives image, video and PDF URLs as null, and a key without sessions write receives session links and tokens as null. See https://docs.didit.me/console/api-keys. BearerAuth: type: http scheme: bearer description: The application's client-credentials access token. ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.