ai.newnal.pdn.server.createAttestedAccount
{
"$type": "com.atproto.lexicon.schema",
"defs": {
"main": {
"description": "Create an account on behalf of a client attested by a trusted issuer. Authenticated with a service-auth JWT (iss = trusted issuer DID, aud = this PDN, lxm = this method, exp - iat <= 60 s, unique jti). No invite code, no captcha. Without handle the server generates a memorable one; without email the server stores the placeholder <label>@newnal.id. Returns a full session, like createAccount; clients that need a scoped session create a scoped app password with it.",
"errors": [
{
"name": "InvalidAttestation"
},
{
"name": "UntrustedIssuer"
},
{
"name": "AttestationReplayed"
},
{
"name": "InvalidHandle"
},
{
"name": "HandleNotAvailable"
},
{
"name": "InvalidEmail"
},
{
"name": "EmailNotAvailable"
},
{
"name": "InvalidPassword"
},
{
"name": "HandleGenerationFailed"
}
],
"input": {
"encoding": "application/json",
"schema": {
"properties": {
"email": {
"type": "string"
},
"handle": {
"format": "handle",
"type": "string"
},
"password": {
"type": "string"
},
"recoveryKey": {
"description": "DID PLC rotation key to include in the creation operation.",
"type": "string"
}
},
"required": [
"password"
],
"type": "object"
}
},
"output": {
"encoding": "application/json",
"schema": {
"properties": {
"accessJwt": {
"type": "string"
},
"did": {
"format": "did",
"type": "string"
},
"didDoc": {
"type": "unknown"
},
"email": {
"type": "string"
},
"emailPlaceholder": {
"type": "boolean"
},
"handle": {
"format": "handle",
"type": "string"
},
"refreshJwt": {
"type": "string"
}
},
"required": [
"accessJwt",
"refreshJwt",
"handle",
"did",
"email",
"emailPlaceholder"
],
"type": "object"
}
},
"type": "procedure"
}
},
"id": "ai.newnal.pdn.server.createAttestedAccount",
"lexicon": 1
}
Metadata
- DID
-
did:plc:vciktevzoffubdvdaajz2yp3 - CID
-
bafyreia2wypzz5tbweaxhhfeewr2vixgnjnnfmyihcuzekvvcscktv2qca - Indexed At
- 2026-10-19 15:22 UTC
- AT-URI
-
at://did:plc:vciktevzoffubdvdaajz2yp3/com.atproto.lexicon.schema/ai.newnal.pdn.server.createAttestedAccount
Similar Lexicons
Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.
-
com.atproto.server.createAccount procedure
Create an account. Implemented by PDS.
-
com.atproto.server.createSession procedure
Create an authentication session.
-
Issue a 60-second creation grant (a service-auth JWT for the PDN's ai.newnal.pdn.server.createAttestedAccount) to an attested ILLI client. In the PoC a device needs no attestation; in production the manufacturing-key or…
-
social.coves.actor.signup procedure
Register a new account on the Coves instance. Creates account on PDS and indexes in AppView.
-
town.muni.arbiter.createArbiter procedure
Provision a brand-new stewarded PDS account. The caller authenticates via serviceAuth (aud = arbiter-server DID, lxm = town.muni.arbiter.createArbiter). The server creates a new account on the configured default PDS us…