Social — entry 004 of 38

Bluesky

Verified Sep 2026

Bluesky is the decentralized social network built on the AT Protocol, where posts, follows, and identity live on portable Personal Data Servers instead of one company's database. Its public AppView at public.api.bsky.app exposes keyless, read-only XRPC methods such as app.bsky.actor.getProfile and app.bsky.feed.getAuthorFeed, so any client can pull public profiles and feeds without registering an app. Posting, following, or reading a signed-in user's private data instead requires an authenticated session against a Personal Data Server via an app password or OAuth, not a single global API key.

Bluesky's public AppView, public.api.bsky.app, exposes a partial keyless slice of its XRPC surface: profile, author-feed, thread, and follower lookups answer with no credentials at all, while others (timeline, search) require auth or are blocked outright. A live GET this run against app.bsky.actor.getProfile?actor=bsky.app returned genuine profile JSON for Bluesky's own account with no key of any kind.

at-protocoldecentralizedsocialfeedxrpc

Visit docs.bsky.app ↗Read the docs ↗Status ↗More Social

AuthenticationNone requiredCall it straight away — no key, no signup.

HTTPSSupportedTraffic is encrypted in transit.

CORSEnabledCallable directly from browser JavaScript.

PricingFreeNo paid tier — free for the documented use case.

FormatsJSONResponses can be requested as JSON.

GreatAPIs Score

Score94out of 100

Authentication25/25No authentication required

Pricing20/20Free to use

Docs20/20Machine-readable spec file bundled

Formats9/15Single response format

Freshness20/20Verified within 6 months

Embed this badge

<a href="https://greatapis.com/api/bluesky/"><img src="https://greatapis.com/badge/bluesky.svg" alt="Scored 94 on greatapis.com"></a>

Auth quickstart

No API key, signup, or credit card required for the keyless subset — a live GET this run confirmed getProfile, getAuthorFeed, getPostThread, getFollowers, and resolveHandle all return 200 with zero credentials. Posting, following, or reading a signed-in user's private data instead needs an authenticated session against a Personal Data Server (app password or OAuth), which this keyless quickstart does not cover.

Stored keyNo key stored

Your key is stored only in this browser (localStorage) and sent directly to the API — never to greatapis.

Endpoints

Servers

https://public.api.bsky.apphttps://{host}https://bsky.network

Auth

Bearer

app.bsky.actor7

GET/xrpc/app.bsky.actor.getPreferences

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.actor.getProfile

Parameters

Name	In	Required	Type
`actor`	query	yes	string

Responses

Status	Description	Schema
`200`	OK	`app.bsky.actor.defs.profileViewDetailed`
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.actor.getProfiles

Parameters

Name	In	Required	Type
`actors`	query	yes	array

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.actor.getSuggestions

Parameters

Name	In	Required	Type
`limit`	query	no	integer
`cursor`	query	no	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/app.bsky.actor.putPreferences

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.actor.searchActors

Parameters

Name	In	Required	Type
`q`	query	no	string
`limit`	query	no	integer
`cursor`	query	no	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.actor.searchActorsTypeahead

Parameters

Name	In	Required	Type
`q`	query	no	string
`limit`	query	no	integer

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

app.bsky.ageassurance3

POST/xrpc/app.bsky.ageassurance.begin

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	`app.bsky.ageassurance.defs.state`
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.ageassurance.getConfig

Responses

Status	Description	Schema
`200`	OK	`app.bsky.ageassurance.defs.config`
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.ageassurance.getState

Parameters

Name	In	Required	Type
`regionCode`	query	no	string
`countryCode`	query	yes	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

app.bsky.bookmark3

POST/xrpc/app.bsky.bookmark.createBookmark

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/app.bsky.bookmark.deleteBookmark

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.bookmark.getBookmarks

Parameters

Name	In	Required	Type
`limit`	query	no	integer
`cursor`	query	no	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

app.bsky.contact8

POST/xrpc/app.bsky.contact.dismissMatch

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.contact.getMatches

Parameters

Name	In	Required	Type
`limit`	query	no	integer
`cursor`	query	no	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.contact.getSyncStatus

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/app.bsky.contact.importContacts

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/app.bsky.contact.removeData

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/app.bsky.contact.sendNotification

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/app.bsky.contact.startPhoneVerification

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/app.bsky.contact.verifyPhone

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

app.bsky.draft4

POST/xrpc/app.bsky.draft.createDraft

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/app.bsky.draft.deleteDraft

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.draft.getDrafts

Parameters

Name	In	Required	Type
`limit`	query	no	integer
`cursor`	query	no	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/app.bsky.draft.updateDraft

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

app.bsky.feed18

GET/xrpc/app.bsky.feed.describeFeedGenerator

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.feed.getActorFeeds

Parameters

Name	In	Required	Type
`actor`	query	yes	string
`limit`	query	no	integer
`cursor`	query	no	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.feed.getActorLikes

Parameters

Name	In	Required	Type
`actor`	query	yes	string
`limit`	query	no	integer
`cursor`	query	no	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.feed.getAuthorFeed

Parameters

Name	In	Required	Type
`actor`	query	yes	string
`limit`	query	no	integer
`cursor`	query	no	string
`filter`	query	no	string
`includePins`	query	no	boolean

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.feed.getFeed

Parameters

Name	In	Required	Type
`feed`	query	yes	string
`limit`	query	no	integer
`cursor`	query	no	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.feed.getFeedGenerator

Parameters

Name	In	Required	Type
`feed`	query	yes	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.feed.getFeedGenerators

Parameters

Name	In	Required	Type
`feeds`	query	yes	array

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.feed.getFeedSkeleton

Parameters

Name	In	Required	Type
`feed`	query	yes	string
`limit`	query	no	integer
`cursor`	query	no	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.feed.getLikes

Parameters

Name	In	Required	Type
`cid`	query	no	string
`uri`	query	yes	string
`limit`	query	no	integer
`cursor`	query	no	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.feed.getListFeed

Parameters

Name	In	Required	Type
`list`	query	yes	string
`limit`	query	no	integer
`cursor`	query	no	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.feed.getPostThread

Parameters

Name	In	Required	Type
`uri`	query	yes	string
`depth`	query	no	integer
`parentHeight`	query	no	integer

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.feed.getPosts

Parameters

Name	In	Required	Type
`uris`	query	yes	array

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.feed.getQuotes

Parameters

Name	In	Required	Type
`cid`	query	no	string
`uri`	query	yes	string
`limit`	query	no	integer
`cursor`	query	no	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.feed.getRepostedBy

Parameters

Name	In	Required	Type
`cid`	query	no	string
`uri`	query	yes	string
`limit`	query	no	integer
`cursor`	query	no	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.feed.getSuggestedFeeds

Parameters

Name	In	Required	Type
`limit`	query	no	integer
`cursor`	query	no	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.feed.getTimeline

Parameters

Name	In	Required	Type
`limit`	query	no	integer
`cursor`	query	no	string
`algorithm`	query	no	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.feed.searchPosts

Parameters

Name	In	Required	Type
`q`	query	yes	string
`tag`	query	no	array
`url`	query	no	string
`lang`	query	no	string
`sort`	query	no	string
`limit`	query	no	integer
`since`	query	no	string
`until`	query	no	string
`author`	query	no	string
`cursor`	query	no	string
`domain`	query	no	string
`mentions`	query	no	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/app.bsky.feed.sendInteractions

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

app.bsky.graph23

GET/xrpc/app.bsky.graph.getActorStarterPacks

Parameters

Name	In	Required	Type
`actor`	query	yes	string
`limit`	query	no	integer
`cursor`	query	no	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.graph.getBlocks

Parameters

Name	In	Required	Type
`limit`	query	no	integer
`cursor`	query	no	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.graph.getFollowers

Parameters

Name	In	Required	Type
`actor`	query	yes	string
`limit`	query	no	integer
`cursor`	query	no	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.graph.getFollows

Parameters

Name	In	Required	Type
`actor`	query	yes	string
`limit`	query	no	integer
`cursor`	query	no	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.graph.getKnownFollowers

Parameters

Name	In	Required	Type
`actor`	query	yes	string
`limit`	query	no	integer
`cursor`	query	no	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.graph.getList

Parameters

Name	In	Required	Type
`list`	query	yes	string
`limit`	query	no	integer
`cursor`	query	no	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.graph.getListBlocks

Parameters

Name	In	Required	Type
`limit`	query	no	integer
`cursor`	query	no	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.graph.getListMutes

Parameters

Name	In	Required	Type
`limit`	query	no	integer
`cursor`	query	no	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.graph.getLists

Parameters

Name	In	Required	Type
`actor`	query	yes	string
`limit`	query	no	integer
`cursor`	query	no	string
`purposes`	query	no	array

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.graph.getListsWithMembership

Parameters

Name	In	Required	Type
`actor`	query	yes	string
`limit`	query	no	integer
`cursor`	query	no	string
`purposes`	query	no	array

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.graph.getMutes

Parameters

Name	In	Required	Type
`limit`	query	no	integer
`cursor`	query	no	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.graph.getRelationships

Parameters

Name	In	Required	Type
`actor`	query	yes	string
`others`	query	no	array

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.graph.getStarterPack

Parameters

Name	In	Required	Type
`starterPack`	query	yes	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.graph.getStarterPacks

Parameters

Name	In	Required	Type
`uris`	query	yes	array

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.graph.getStarterPacksWithMembership

Parameters

Name	In	Required	Type
`actor`	query	yes	string
`limit`	query	no	integer
`cursor`	query	no	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.graph.getSuggestedFollowsByActor

Parameters

Name	In	Required	Type
`actor`	query	yes	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/app.bsky.graph.muteActor

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/app.bsky.graph.muteActorList

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/app.bsky.graph.muteThread

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.graph.searchStarterPacks

Parameters

Name	In	Required	Type
`q`	query	yes	string
`limit`	query	no	integer
`cursor`	query	no	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/app.bsky.graph.unmuteActor

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/app.bsky.graph.unmuteActorList

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/app.bsky.graph.unmuteThread

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

app.bsky.labeler1

GET/xrpc/app.bsky.labeler.getServices

Parameters

Name	In	Required	Type
`dids`	query	yes	array
`detailed`	query	no	boolean

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

app.bsky.notification10

GET/xrpc/app.bsky.notification.getPreferences

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.notification.getUnreadCount

Parameters

Name	In	Required	Type
`seenAt`	query	no	string
`priority`	query	no	boolean

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.notification.listActivitySubscriptions

Parameters

Name	In	Required	Type
`limit`	query	no	integer
`cursor`	query	no	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.notification.listNotifications

Parameters

Name	In	Required	Type
`limit`	query	no	integer
`cursor`	query	no	string
`seenAt`	query	no	string
`reasons`	query	no	array
`priority`	query	no	boolean

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/app.bsky.notification.putActivitySubscription

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/app.bsky.notification.putPreferences

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/app.bsky.notification.putPreferencesV2

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/app.bsky.notification.registerPush

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/app.bsky.notification.unregisterPush

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/app.bsky.notification.updateSeen

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

app.bsky.video3

GET/xrpc/app.bsky.video.getJobStatus

Parameters

Name	In	Required	Type
`jobId`	query	yes	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/app.bsky.video.getUploadLimits

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/app.bsky.video.uploadVideo

Request body

video/mp4 (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

com.atproto.admin15

POST/xrpc/com.atproto.admin.deleteAccount

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/com.atproto.admin.disableAccountInvites

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/com.atproto.admin.disableInviteCodes

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/com.atproto.admin.enableAccountInvites

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/com.atproto.admin.getAccountInfo

Parameters

Name	In	Required	Type
`did`	query	yes	string

Responses

Status	Description	Schema
`200`	OK	`com.atproto.admin.defs.accountView`
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/com.atproto.admin.getAccountInfos

Parameters

Name	In	Required	Type
`dids`	query	yes	array

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/com.atproto.admin.getInviteCodes

Parameters

Name	In	Required	Type
`sort`	query	no	string
`limit`	query	no	integer
`cursor`	query	no	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/com.atproto.admin.getSubjectStatus

Parameters

Name	In	Required	Type
`did`	query	no	string
`uri`	query	no	string
`blob`	query	no	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/com.atproto.admin.searchAccounts

Parameters

Name	In	Required	Type
`email`	query	no	string
`limit`	query	no	integer
`cursor`	query	no	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/com.atproto.admin.sendEmail

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/com.atproto.admin.updateAccountEmail

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/com.atproto.admin.updateAccountHandle

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/com.atproto.admin.updateAccountPassword

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/com.atproto.admin.updateAccountSigningKey

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/com.atproto.admin.updateSubjectStatus

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

com.atproto.identity7

GET/xrpc/com.atproto.identity.getRecommendedDidCredentials

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/com.atproto.identity.refreshIdentity

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	`com.atproto.identity.defs.identityInfo`
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/com.atproto.identity.requestPlcOperationSignature

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/com.atproto.identity.resolveHandle

Parameters

Name	In	Required	Type
`handle`	query	yes	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/com.atproto.identity.signPlcOperation

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/com.atproto.identity.submitPlcOperation

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/com.atproto.identity.updateHandle

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

com.atproto.label1

GET/xrpc/com.atproto.label.queryLabels

Parameters

Name	In	Required	Type
`limit`	query	no	integer
`cursor`	query	no	string
`sources`	query	no	array
`uriPatterns`	query	yes	array

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

com.atproto.moderation1

POST/xrpc/com.atproto.moderation.createReport

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

com.atproto.repo10

POST/xrpc/com.atproto.repo.applyWrites

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/com.atproto.repo.createRecord

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/com.atproto.repo.deleteRecord

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/com.atproto.repo.describeRepo

Parameters

Name	In	Required	Type
`repo`	query	yes	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/com.atproto.repo.getRecord

Parameters

Name	In	Required	Type
`cid`	query	no	string
`repo`	query	yes	string
`rkey`	query	yes	string
`collection`	query	yes	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/com.atproto.repo.importRepo

Request body

application/vnd.ipld.car (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/com.atproto.repo.listMissingBlobs

Parameters

Name	In	Required	Type
`limit`	query	no	integer
`cursor`	query	no	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/com.atproto.repo.listRecords

Parameters

Name	In	Required	Type
`repo`	query	yes	string
`limit`	query	no	integer
`cursor`	query	no	string
`reverse`	query	no	boolean
`collection`	query	yes	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/com.atproto.repo.putRecord

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/com.atproto.repo.uploadBlob

Request body

*/* (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

com.atproto.server25

POST/xrpc/com.atproto.server.activateAccount

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/com.atproto.server.checkAccountStatus

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/com.atproto.server.confirmEmail

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/com.atproto.server.createAccount

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/com.atproto.server.createAppPassword

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	`com.atproto.server.createAppPassword.appPassword`
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/com.atproto.server.createInviteCode

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/com.atproto.server.createInviteCodes

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/com.atproto.server.createSession

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/com.atproto.server.deactivateAccount

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/com.atproto.server.deleteAccount

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/com.atproto.server.deleteSession

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/com.atproto.server.describeServer

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/com.atproto.server.getAccountInviteCodes

Parameters

Name	In	Required	Type
`includeUsed`	query	no	boolean
`createAvailable`	query	no	boolean

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/com.atproto.server.getServiceAuth

Parameters

Name	In	Required	Type
`aud`	query	yes	string
`exp`	query	no	integer
`lxm`	query	no	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/com.atproto.server.getSession

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/com.atproto.server.listAppPasswords

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/com.atproto.server.refreshSession

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/com.atproto.server.requestAccountDelete

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/com.atproto.server.requestEmailConfirmation

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/com.atproto.server.requestEmailUpdate

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/com.atproto.server.requestPasswordReset

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/com.atproto.server.reserveSigningKey

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/com.atproto.server.resetPassword

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/com.atproto.server.revokeAppPassword

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/com.atproto.server.updateEmail

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

com.atproto.sync13

GET/xrpc/com.atproto.sync.getBlob

Parameters

Name	In	Required	Type
`cid`	query	yes	string
`did`	query	yes	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/com.atproto.sync.getBlocks

Parameters

Name	In	Required	Type
`did`	query	yes	string
`cids`	query	yes	array

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/com.atproto.sync.getHostStatus

Parameters

Name	In	Required	Type
`hostname`	query	yes	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/com.atproto.sync.getLatestCommit

Parameters

Name	In	Required	Type
`did`	query	yes	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/com.atproto.sync.getRecord

Parameters

Name	In	Required	Type
`did`	query	yes	string
`rkey`	query	yes	string
`collection`	query	yes	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/com.atproto.sync.getRepo

Parameters

Name	In	Required	Type
`did`	query	yes	string
`since`	query	no	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/com.atproto.sync.getRepoStatus

Parameters

Name	In	Required	Type
`did`	query	yes	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/com.atproto.sync.listBlobs

Parameters

Name	In	Required	Type
`did`	query	yes	string
`limit`	query	no	integer
`since`	query	no	string
`cursor`	query	no	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/com.atproto.sync.listHosts

Parameters

Name	In	Required	Type
`limit`	query	no	integer
`cursor`	query	no	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/com.atproto.sync.listRepos

Parameters

Name	In	Required	Type
`limit`	query	no	integer
`cursor`	query	no	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

GET/xrpc/com.atproto.sync.listReposByCollection

Parameters

Name	In	Required	Type
`limit`	query	no	integer
`cursor`	query	no	string
`collection`	query	yes	string

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/com.atproto.sync.notifyOfUpdate

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

POST/xrpc/com.atproto.sync.requestCrawl

Request body

application/json (required)

Responses

Status	Description	Schema
`200`	OK	—
`400`	Bad Request	—
`401`	Unauthorized	—

Try it

Operation

API key

Developer reference

Base URLhttps://public.api.bsky.app/xrpc

Rate limit

3,000 requests per 5 minutes per IP overall; content-creation additionally capped at 5,000 points/hour and 35,000 points/day per account

Key endpoints

GET/xrpc/app.bsky.actor.getProfile
GET/xrpc/app.bsky.feed.getAuthorFeed
GET/xrpc/app.bsky.feed.getPostThread

SDKs

TypeScript ↗Go ↗

Gotchas & limits

app.bsky.feed.searchPosts — deliberately left out of this API's heroEndpoints for exactly this reason — returns HTTP 403 with an HTML error page, not XRPC JSON: a live GET this run against ?q=test returned content-type: text/html and a body opening <html><head><title>403 Forbidden</title>... (a CDN edge block page). A client that assumes every XRPC failure is parseable JSON breaks here.
app.bsky.feed.getTimeline requires an authenticated session and is not keyless — a live GET this run returned HTTP 401 with genuine XRPC JSON {"error":"AuthMissing","message":"Authentication Required"}. Contrast with searchPosts's HTML 403 above: two different failure shapes for two different kinds of "you can't do this here".
Errors are not RESTful: an unknown handle is 400, not 404 — a live GET this run against getProfile?actor= a nonexistent handle returned HTTP 400 {"error":"InvalidRequest","message":"Profile not found"}. A missing required param is also 400 and names the key: a live GET with no actor at all returned {"error":"InvalidRequest","message":"Invalid app.bsky.actor.getProfile params: Missing required key \"actor\""}.
limit over the max is a 400 that names the ceiling — a live GET this run against getAuthorFeed?actor=bsky.app&limit=101 returned HTTP 400 {"error":"InvalidRequest","message":"Invalid app.bsky.feed.getAuthorFeed params: integer too big (maximum 100, got 101)"}.
getAuthorFeed items are not all authored by the requested actor — a live GET this run against getAuthorFeed?actor=bsky.app returned a first feed item whose post.author.handle was paretooptimizer.bsky.social, not bsky.app, carrying a sibling reason.$type: "app.bsky.feed.defs#reasonRepost". Reading feed[].post.author as "the requested actor" is wrong whenever reason is present — it means a repost.
An unimplemented XRPC method returns HTTP 501 {"error":"MethodNotImplemented","message":"Method Not Implemented"} — a live GET this run against a made-up method name confirmed it, distinct from the 400s above (bad params) and the 403/401s above (blocked/unauthenticated).

Availability

Uptime100%

Median latency165 ms

Last checkUp · 400 · Sep 2026

16 checks since Sep 2026. A person runs this check by hand, not an automated monitor.

Changelog

Spec version

Tracked paths152

Sep 2026gained an OpenAPI spec

Tracking since Sep 2026. See every tracked change ↗ ·Subscribe with RSS ↗

Featured in

3 collections

Spec-backed APIs No key required CORS-ready browser APIs

GreatAPIs Score

Embed this badge

Auth quickstart

Endpoints

Try it

Developer reference

Gotchas & limits

Availability

Changelog

Featured in

People comparing Bluesky also look at…

Bluesky vs HackerNews

Bluesky vs Lanyard

Bluesky vs 4chan

Bluesky vs Blogger

Bluesky vs Discord

Bluesky vs Facebook

NAVER

Open Collective

Slack

TikTok

Twitch

Foursquare