







Addressing the glaring omissions from yesterday’s proof of concept, such as the fact that you could sign in as any user, you couldn’t revoke access, all hosts had the same users, and there was no mapping between Bluesky handles and POSIX users, I have updated mtelvers/bluesky-ssh-key-extractor and newly published mtelvers/bluesky-collection.
Progress on Auth Scopes Implementation (August 2025) · bluesky-social atproto · Discussion #4118
Since our last update on Auth Scopes, the Bluesky team has been hard at work adding support to our reference PDS implementation. Aspects of this work are starting to roll out in the production netw...

Bluesky PDS
Take control of your online identity with a one-click Bluesky PDS. Built on the open AT Protocol, Bluesky gives users full ownership of their social data and digital presence. Clovyr makes self-hosting simple, secure, and accessible for everyone, with no command line required.

Verified Account Tracker (@verified.evil.gay)
⚠️ ⚠️ ⚠️ !!! >>> NOT AFFILIATED WITH BLUESKY <<< !!! ⚠️ ⚠️ ⚠️ A bot tracking newly verified accounts on Bluesky. Check out the lists tab for full lists on verified accounts. ran by: @mmatt.net https://github.com/mmattbtw/bsky-verified-account-tracker

bsky.md — Bluesky as Markdown
Fetch any public Bluesky content as clean, portable Markdown. No auth, no API key.
bsky.md — Bluesky as Markdown
Fetch any public Bluesky content as clean, portable Markdown. No auth, no API key.
Chronosky - Bluesky Scheduled Posting
Schedule posts for Bluesky social network. Free with OAuth authentication

Securely authenticate with your Bluesky account using OAuth 2.0 with DPoP (Demonstrating Proof-of-Possession) tokens.
Bluesky Is Back for Mississippi Adults, But Social Giants Still Lack Required Age Checks
Months after Bluesky blocked access to Mississippi, Bluesky is available in the state once again with age verification for adults.

reminder that you can always revoke oauth access at bsky.social/account (also a good place to check for apps you forgot you logged in to !)
I think I found an issue with the existing Bluesky OAuth permission sets @matthieu.bsky.team @bnewbold.net: github.com/bluesky-social/atproto/issues…. The XRPC endpoints specified in `authViewAll` are inconsistent about aud. Minimal repro here. tangled.org/tylerjfisher.com/repro-bluesk… Might be doing something wrong, lmk!
Bluesky permission sets require inconsistent aud parameter · Issue #4850 · bluesky-social/atproto
github.comThe frustrating thing about this is that when you "Login with Bluesky", you're not even actually logging in with Bluesky The App. You may be using a Bluesky PBC-hosted PDS, but it has nothing to do with @bsky.app, other than it's the PDS you're assigned when you create an account on their client.