Returns the full Identity Record for a given ir key. Only accessible to
the authenticated Data User that created the record.
The email field is never returned in plaintext — has-email indicates
whether an email address is registered on the record. The credentials
array returns passkey metadata (credential ID, registered-at) but never
the public key material itself.
JWT from GET /auth/token. Pass as Authorization: Bearer <token>. Expires after 7200s.
The identity record key issued at creation.
Unique opaque identifier for an Identity Record, issued by the register on creation. Referenced from record-metadata.identity-record-ref on an AccessRecord to link the two resources.
^ir_[0-9a-f]{24}$"ir_a3c5e7f9b1d3a3c5e7f9b1d3"
Identity record found and returned.
Holds the person-property relationship for a consent or access registration.
Returned by GET /identity-records/{ir}.
The email field is never returned in plaintext — has-email indicates
whether an email address is stored. Passkey public keys are never returned —
credentials contains only metadata (ID, registered-at, transports).
ir and created-at are assigned by the register on creation.