Another day, another odd edge case migration thing to troubleshoot. Looks like the entryway updates the user's PLC did doc if on a Bluesky PDS, and it does this by a serviceAuth token. If you migrated back, but did not update your verification method when you moved, you can lock yourself out..
Apr 17, 2026 at 7:58 PM
Running Bluesky PDS undockered
A bit over a year ago, in the first week of January 2025, I migrated my main Bluesky account to my own PDS on a Netcup VPS. It’s been quite easy to set up using the official installer, and it’s been running pretty much without any problems or maintenance the whole year.
Help! I've migrated to a new PDS, and my Bluesky doesn't work - Hitchhiker's Guide to the Atmosphere
A checklist of things to check when you move to a new PDS and new posts don't show or your account doesn't load on Bluesky
Let's fix OAuth in MCP
Update: The changes described in this blog post have been incorporated into the 2025-06-18 version of the MCP spec!
Progress on Auth Scopes Implementation (August 2025) · bluesky-social atproto · Discussion #4118
Since our last update on Auth Scopes, the Bluesky team has been hard at work adding support to our reference PDS implementation. Aspects of this work are starting to roll out in the production netw...
How to edit `did:plc` rotation keys · bluesky-social atproto · Discussion #3366
I have migrated my Bluesky handle rekmarks.com to my own PDS. I am trying to replace one of its rotation keys. Here's what I observe: I check the rotation keys returned by com.atproto.identity....
here is how i've been explaining PDS migration to the 115 users i've migrated: imagine your bluesky account as being an apartment. you're upset the rent is changing, so you move to a cheaper apartment on the other side of town. after you move, you have to update your address with the post office.
daniel holmgren 🫠
& you lose if you say the word "protocol", "decentralized", "repo", or "pds" to illustrate: the cloud is "the thing where i keep my photos when i drop my phone in a lake". if you even mention a "server" while explaining the cloud then you lost the thread
I signed up for science with verify later. You can only "explore W" while not verified (no account changes or posting). I then tried to sign in on Mu, just to see what would happen, and it wants WID verification via QR. So it looks like the account is locked behind verification, even off platform.
here is how i've been explaining PDS migration to the 115 users i've migrated: imagine your bluesky account as being an apartment. you're upset the rent is changing, so you move to a cheaper apartment on the other side of town. after you move, you have to update your address with the post office.
daniel holmgren 🫠
& you lose if you say the word "protocol", "decentralized", "repo", or "pds" to illustrate: the cloud is "the thing where i keep my photos when i drop my phone in a lake". if you even mention a "server" while explaining the cloud then you lost the thread
I think I found an issue with the existing Bluesky OAuth permission sets @matthieu.bsky.team @bnewbold.net: github.com/bluesky-social/atproto/issues…. The XRPC endpoints specified in `authViewAll` are inconsistent about aud. Minimal repro here. tangled.org/tylerjfisher.com/repro-bluesk… Might be doing something wrong, lmk!
Bluesky permission sets require inconsistent aud parameter · Issue #4850 · bluesky-social/atproto
github.comThe frustrating thing about this is that when you "Login with Bluesky", you're not even actually logging in with Bluesky The App. You may be using a Bluesky PBC-hosted PDS, but it has nothing to do with @bsky.app, other than it's the PDS you're assigned when you create an account on their client.
