The docs on this site mostly cover authenticated API requests. Authenticated API clients actually behave differently behind the scenes than
Bluesky HTTP API Reference
Bluesky HTTP API Reference
app.bsky.actor.getProfile | Bluesky
*This endpoint is part of the Bluesky application Lexicon APIs (`app.bsky.*`). Public endpoints which don't require authentication can be made directly against the public Bluesky AppView API: https://public.api.bsky.app. Authenticated requests are usually proxied via the user's PDS, using service proxy headers. Authenticated requests can be used for both public and non-public endpoints.*
ATProto OAuth Quickstart Guide | Artur | Looking for work
Setting Up Bluesky OAuth in Your Web App: A Developer's Guide If you're building an app that needs to authenticate with Bluesky, you'll need to implement their OAuth flow. While the official docs are comprehensive, they can be a bit overwhelming. Let's break down the process into manageable steps. ...
app.bsky.notification.getPreferences | Bluesky
*This endpoint is part of the Bluesky application Lexicon APIs (`app.bsky.*`). Public endpoints which don't require authentication can be made directly against the public Bluesky AppView API: https://public.api.bsky.app. Authenticated requests are usually made to the user's PDS, with automatic service proxying. Authenticated requests can be used for both public and non-public endpoints.*
OAuth Client Security in the Atmosphere · bluesky-social atproto · Discussion #3950
The following was written by the Bluesky team as an overview of OAuth client security considerations, especially for client app developers or readers of the ATProto OAuth profile specification. Set...
app.bsky.actor.searchActorsTypeahead | Bluesky
*This endpoint is part of the Bluesky application Lexicon APIs (`app.bsky.*`). Public endpoints which don't require authentication can be made directly against the public Bluesky AppView API: https://public.api.bsky.app. Authenticated requests are usually made to the user's PDS, with automatic service proxying. Authenticated requests can be used for both public and non-public endpoints.*
OAuth Client Implementation | Bluesky
This is a guide to implementing atproto OAuth clients "The Hard Way." Optimistically, most developers will have an SDK available for their programming language which supports OAuth, and they can simply refer to SDK documentation. This guide is intended for early adopters, SDK maintainers, or developers with more sophisticated OAuth needs. It is agnostic to whether developers are building clients to work the the app.bsky microblogging Lexicons, or implementing novel application Lexicons.
Proposal: OAuth Scopes · bluesky-social atproto · Discussion #3655
Note: a more complete proposal was published in July 2025: https://github.com/bluesky-social/proposals/tree/main/0011-auth-scopes We’re continuing work on rolling OAuth out to the atproto network. ...
AT Protocol, OAuth, and well, decentralization
I've been very happy with how Bluesky and AT Protocol as a whole is going, except for one thing: OAuth.
Bluesky Protocol Services
High scale open social, unlocked for every builder. Bluesky operates public infrastructure for the AT Protocol — Jetstream, Relay, and the Bluesky API — as open services anyone can build on.
How It Works | Bluesky Protocol Services
From one post to the whole network — how records, Lexicons, and the firehose fit together on the AT Protocol.
Is there a good write up anywhere on the sort of app design of Bluesky, with the frontend client and the PDS proxying requests. I'm curious about whether other approaches were considered, why this approach was chosen, how a relatively snappy experience was accomplished, anything related to that!
bluesky has always offered protocol services for devs— the relay, jetstream, and the bluesky api are the main ones. but until today those haven't really had a proper home. the crew as been working hard, and there's (even) more here than meets the eye, let's break this down!!
Bluesky Protocol Services
bsky.networkbluesky has always offered protocol services for devs— the relay, jetstream, and the bluesky api are the main ones. but until today those haven't really had a proper home. the crew as been working hard, and there's (even) more here than meets the eye, let's break this down!!
Bluesky Protocol Services
bsky.network
