Observed arrival · 2026-10-16
OpenID4VCI Doctor
A browser-based diagnostic checks an OpenID4VCI issuer’s metadata and, optionally, its pre-authorized-code issuance flow.
○Open
⊠Login
$Paid
†Ads
✦Pretty
●Pro
◎Niche
◉Human
⚑Risk
ƒJS
- For
- OpenID4VCI issuer developers and implementers
- Worth noticing
- Its score weights checks derived from MUST-level requirements three times more heavily than SHOULD-level checks; checks that could not run are excluded.
Field notes
The metadata check fetches issuer and authorization-server metadata plus the TLS certificate, trying both well-known layouts. The optional issuance run is limited to the pre-authorized-code flow and includes probes for cases such as missing or invalid key proofs, unknown parameters, notifications, and credential status. The page says generated keys stay in memory and credentials are discarded after parsing; it also cautions that test credentials may be consumed.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
○OpenPublic substance visible
✦PrettyNotable craft visible
●ProPolished or operationally mature
◎NicheUnusually specific use
One card from the complete issue