







Technical specification for client-side auth using locally stored profiles
OAuth Patterns - AT Protocol Docs - AT Protocol
Auth for AT Protocol application developers.

OAuth Patterns - AT Protocol Docs - AT Protocol
Auth for AT Protocol application developers.

Scope Builder - AT Protocol Docs - AT Protocol
Interactive tool for building OAuth scope strings and permission sets.




oauth-client-metadata.json | AT Protocol Community Wiki
A community-maintained wiki for the AT Protocol ecosystem


Pilcrow's auth book
Pilcrow's collection of guides, recommendations, and examples for implementing auth in web applications.




Updated Auth Scopes Proposal · bluesky-social atproto · Discussion #4013
This is a discussion thread for the July 2025 Auth Scopes proposal
alright protocol devs, some wonky bits: we revisited the recent service auth JWT harmonization proposal, and have a revision up that sticks with a single string 'aud' field. also touches on issuer 'kid', and makes 'lxm' mandatory for XRPC endpoints.
proposals/0014-service-auth-revised at main · bluesky-social/proposals
github.comHave just written up this proposal to standardise `prompt=create` as a part of AT Protocol's OAuth specification, since account registration is a critical component of growing the atmosphere: github.com/bluesky-social/atproto/discus…
Proposal: OAuth-based account creation · bluesky-social atproto · Discussion #4587
github.com