At this level
space.highport · 3- space.highport.authManage permission-set
- space.highport.defs defs A base's default tile: what unclaimed names under it serve. The binding pins a CID, so a later version of the tile does not change what they serve.
- space.highport.policy record An identity's statement about the Highport policies; the record key sets the kind. Keyed by a deployment's application hostname, it accepts the policy version in subject and counts only while that version is current. Keyed 'self' with optOut true, it is a permanent, public request never to be served by Highport again, whichever version it names.
- space.highport.admin.createDenylist procedure Deny a subject. It stops serving within one broadcast, whether it is reached through a site, a tile, or a parameter. Denying a space stops every domain registered to it.
- space.highport.admin.getDomain query Everything bard knows about one domain: registration, event history, job log, certificate state, and last verification result.
- space.highport.admin.getQueueStats query Job queue depth, oldest job age, and failure counts.
- space.highport.admin.getQuota query Every quota for one DID: the limit in effect, the deployment default, and any operator override.
- space.highport.admin.listDenylist query The operator denylist.
- space.highport.admin.listFindings query Malware detections, newest first. Once a sample is deleted, this is the only record of why it was quarantined.
- space.highport.admin.listNameReviews query Self-serve names the name review flagged, newest first: labels registered below a built-in base that a model judged likely to read as a brand's, the operator's, or a sign-in, security or billing page. The review band was admitted; the refuse band was refused when the review was enforcing and admitted when it was in shadow. Empty when the review is off.
- space.highport.admin.listSpaces query Every connected space with its sync state, access expiry, and registration expiry.
- space.highport.admin.listTileBindings query The domains serving a tile. Give exactly one of uri (every version) or cid (one version).
- space.highport.admin.listTopSites query Domains ranked by successful, non-crawler requests over a trailing window. Safe to publish: a domain is left out if it is not serving, has a malware finding, or is denylisted in any way (directly, by pattern, or through its identity, space, record or serving CID). Counts can lag by up to ten minutes.
- space.highport.admin.listUserAgents query User agents that reached the network over a trailing window, with request counts and how each was classified, for reviewing crawlers, bots and automation. Operator only. Names no visitor: agents are grouped across all traffic, and the domain count is a number, never a list. Read from raw request events, so the window cannot reach past raw retention (30 days by default).
- space.highport.admin.rebuildSnapshot procedure Rebuild a snapshot from stored content, without refetching from the publisher's repository.
- space.highport.admin.removeDenylist procedure Remove a subject from the denylist.
- space.highport.admin.rescanBlob procedure Rescan stored content against the current signature database now, instead of waiting for the sweep. Quarantines on a detection.
- space.highport.admin.setDomainState procedure Suspend, unsuspend, or force-release a domain.
- space.highport.admin.setQuota procedure Override one quota for one DID, or clear the override to restore the default. Lowering a count blocks new creations but removes nothing. A bandwidth change also applies to the current month.
- space.highport.admin.setSpaceState procedure Suspend or resume syncing for a space. While suspended, bard pulls nothing and accepts no grants, but the space's domains keep serving.
- space.highport.admin.setTileState procedure Suspend or resume a tile. A suspended tile accepts no new bindings or versions, but snapshots already serving keep serving.
- space.highport.manage.connectSpace procedure Connect a space so bard can read and publish the authority's site and tile records from it. Only the authority can call this, with a delegation token it issued. Bard trades the token for a credential, registers for notifications, and pulls the authority's repo. Safe to repeat.
- space.highport.manage.disableDelegation procedure Stop a base handing out names: remove its probe and clear its delegation state. Refused while any reservation remains; release each one with releaseReservation. A certificate grant on the base is left in place.
- space.highport.manage.disconnectSpace procedure Forget a space: release its domains, purge them after the usual grace period, discard the credential and key, and stop renewing. Authority only.
- space.highport.manage.enableDelegation procedure Make a registered domain a delegation base, so its owner can reserve names directly under it for other identities. Returns the wildcard record that routes those names. The caller must own the base, and it must be verified or active.
- space.highport.manage.getConsumption query The caller's bandwidth allowance for a period: granted, used, remaining, which entitlements contributed, and which domains may draw on it. One allowance covers both the caller's own sites and its visits to sender-pays sites.
- space.highport.manage.getDomain query Everything a client needs to onboard one domain: registration state, DNS records to publish, last verification result, and certificate state. This is the endpoint to poll.
- space.highport.manage.getIndexStatus query Per-blob progress of a publish. Give exactly one of uri or domain. The top level describes the active revision, or the prepared record if nothing is active yet. A newer record prepared while another is active appears under preparation.
- space.highport.manage.getMyActivity query The caller's own browsing across every domain it signed in to, so it can check what it was billed for. There is no way to read anyone else's.
- space.highport.manage.getSiteTraffic query Traffic to one of the caller's domains over a time range: hourly requests and bytes, the busiest paths, and status codes. Byte figures include a fixed per-response header estimate, since the edge logs only response bodies.
- space.highport.manage.getSpace query What bard knows about a connected space: its sync state, when bard's credential expires, and its counts. Available to the space's authority and to viewers (identities with a grant inside the viewer window).
- space.highport.manage.grantSpaceAccess procedure Give bard a delegation token so it can keep reading a space. Any member can call this with a token they issued. Bard trades it for a credential, renews its notification registration when due, and catches up on anything it missed.
- space.highport.manage.listDomainBilling query The payer policy of every domain the caller owns. A domain with nothing set reports the default: the owner pays, with no visitor cap.
- space.highport.manage.listDomains query The caller's registrations: domains it registered itself, and domains registered to spaces it is the authority of.
- space.highport.manage.listReservations query Names reserved under one of the caller's delegation bases, with who each is reserved for and whether it routes. The base's probe is not included.
- space.highport.manage.listSiteVisitors query Identities that signed in to one of the caller's domains, and what each spent there. Anonymous traffic is not listed, and no query links a visitor across domains.
- space.highport.manage.listSpaceEvents query Events in a space, as bard saw them. Pass the last seq returned as the cursor. Available to the authority and viewers.
- space.highport.manage.listSpaceSites query Domains registered to a space, with each one's state. Available to the authority and viewers.
- space.highport.manage.listSpaceTiles query Tiles bard has indexed from a space's authority. Space tiles are never listed publicly, so this is the only place to find them. Available to the authority and viewers.
- space.highport.manage.listSpaces query The caller's spaces: first those it is the authority of, then those it has granted bard access to within the viewer window.
- space.highport.manage.purge procedure Clear the domain's cached pointer and snapshot on every origin replica. There is no shared HTTP cache, so this is only an escape hatch for a suspected stale in-process cache; publishing never needs it. Rate-limited.
- space.highport.manage.register procedure Register a domain to the caller, or to a space the caller is the authority of, and get the DNS records needed to prove ownership and route traffic.
- space.highport.manage.reindex procedure Fetch the record from its repository again and reprocess it. Use this after a missed firehose event or a temporary blob fetch failure. For a space-form URI it pulls the authority's repo again, which needs a live credential. Rate-limited.
- space.highport.manage.releaseDomain procedure Release a domain: deactivate its site and stop authorizing it for TLS. Certificates already issued for it stay valid until they expire. If the domain is a base with a wildcard grant, the grant ends and the wildcard is revoked and deleted; no account can take the domain until that finishes. Stored blobs are left for garbage collection.
- space.highport.manage.releaseReservation procedure Release a name reserved under one of the caller's delegation bases. Bard stops answering for it and stops authorizing it for TLS, and any site the subject published there stops serving.
- space.highport.manage.reserveDomain procedure Reserve a name directly under a delegation base for another identity. The name answers /.well-known/atproto-did with the subject right away, and the subject can then publish a site there. The caller must own the base. Any unproven claim on the name is replaced. Repeating the call for the same subject returns the existing reservation and does not count against maxNames. Reservations last as long as the base.
- space.highport.manage.setCertificateMode procedure Choose how names under a proven base get certificates. wildcard lets this service get one wildcard certificate for the base over DNS-01, through the base's own challenge target, and returns the record that delegates it. per-name ends that grant. The caller must own the base, which must be verified or active. Delegation does not need to be enabled.
- space.highport.manage.setDelegationDefaultTile procedure Set or clear the tile served on every name reserved under a delegation base whose subject has not yet published a site. The tile is pinned by CID and takes no parameters, so a tile with a required parameter is refused. It never answers /.well-known/atproto-did, which keeps returning the DID the name is reserved for. The base owner pays for the traffic. The caller must own the base, which must have delegation enabled.
- space.highport.manage.setDomainBilling procedure Set whose allowance a domain's traffic uses. Changing payerPolicy revokes every visitor approval on the domain, since visitors agreed to the old arrangement. The owner always pays whatever nobody else covers.
- space.highport.manage.syncSpace procedure Pull the authority's repo in a space now, instead of waiting for a write notification. Authority only.
- space.highport.manage.validate procedure Validate a site or tile record before writing it and, for an authorized caller, prepare bard to serve it. Returns the AT-URI and CID the record will have, and the canonical record to write with putRecord at that key.
- space.highport.manage.verify procedure Check a domain's DNS now instead of waiting for the poller. Limited to once every thirty seconds per domain.
- space.highport.sites.defs defs Which parts of a site require a signed-in reader, and which readers qualify. Absent means nothing is gated and the owner budget decides every path, which suits most sites. This is content policy, not billing: it lives in the record, so it moves with the site and anyone can read it.
- space.highport.sites.getSite query The public view of the site serving a domain: its owner, its active revision, and the tile it binds, if any. No DNS or diagnostic detail. A domain registered to a space includes the space.
- space.highport.sites.getTile query A published tile. Without cid, returns the latest published version. Never returns a prepared but uncommitted version, or a space tile.
- space.highport.sites.getTileIcon query A tile's icon bytes, served with the blob's mimeType and a one-year immutable Cache-Control. Lets directories show icons even after the author's PDS has dropped the blob.
- space.highport.sites.getVisitorAccess query The requesting visitor's access to the site serving this request: whether its members-only pages admit them. Served only at /_bard/xrpc/ on a Highport site, from the visitor's site session; never by highport.space. Uncacheable.
- space.highport.sites.getWebTile query An ing.dasl.masl Web Tile from Highport's Web Tile index, which takes records from every author on the network. Returns the record as it currently stands; the index keeps no earlier versions, can lag the author's repository, and omits records its limits skipped.
- space.highport.sites.listSites query The public directory of active sites. Filter by did for one identity's sites, or by tile for the sites bound to one tile.
- space.highport.sites.listTiles query Published tiles a site owner can browse to find one to bind. Space tiles are never listed.
- space.highport.sites.listWebTiles query ing.dasl.masl Web Tiles in Highport's Web Tile index, in AT-URI order. Each entry is the record's current version, without the record body; getWebTile returns the body.
- space.highport.sites.resolveDomain query Look up which identity and record serve a domain. Useful for checking who owns a site.
- space.highport.sites.site record A static website hosted from an AT Protocol repository. The record key is the site's hostname in lowercase IDNA A-label form. A site serves either an inline manifest or a tile bound by strong reference: a space.highport.sites.tile, with parameters, or an ing.dasl.masl DASL Web Tile, without.
- space.highport.sites.space space A private place where an identity keeps site and tile records for highport.space to publish, optionally shared with members who can read them. Only the authority's own repo in the space is read; records other members write there are not served. Only the authority can register domains to a space.
- space.highport.sites.tile record A reusable, parameterized web tile: a bundle of static resources that a space.highport.sites.site can bind to a domain by strong reference. Authors publish tiles under a TID key, and a tile is never tied to a domain.