ai.newnal.pdn.server.createAttestedAccount

newnal-platform.newnal.id

Documentation

Create an account on behalf of a client attested by a trusted issuer. Authenticated with a service-auth JWT (iss = trusted issuer DID, aud = this PDN, lxm = this method, exp - iat <= 60 s, unique jti). No invite code, no captcha. Without handle the server generates a memorable one; without email the server stores the placeholder <label>@newnal.id. Returns a full session, like createAccount; clients that need a scoped session create a scoped app password with it.

main procedure

Create an account on behalf of a client attested by a trusted issuer. Authenticated with a service-auth JWT (iss = trusted issuer DID, aud = this PDN, lxm = this method, exp - iat <= 60 s, unique jti). No invite code, no captcha. Without handle the server generates a memorable one; without email the server stores the placeholder <label>@newnal.id. Returns a full session, like createAccount; clients that need a scoped session create a scoped app password with it.

Input

Encodingapplication/json
email string Optional

No description available.

handle stringhandle Optional

An AT Protocol handle (e.g., alice.bsky.social).

password string Required

No description available.

recoveryKey string Optional

DID PLC rotation key to include in the creation operation.

Output

Encodingapplication/json
accessJwt string Required

No description available.

did stringdid Required

A decentralized identifier (DID).

didDoc unknown Optional

No description available.

email string Required

No description available.

emailPlaceholder boolean Required

No description available.

handle stringhandle Required

An AT Protocol handle (e.g., alice.bsky.social).

refreshJwt string Required

No description available.

Errors

InvalidAttestation
UntrustedIssuer
AttestationReplayed
InvalidHandle
HandleNotAvailable
InvalidEmail
EmailNotAvailable
InvalidPassword
HandleGenerationFailed
Try It

Requests are sent directly from your browser. Some servers may block requests due to CORS.

Base URL for XRPC calls (e.g., https://bsky.social)
Enter valid JSON for the request body
View raw schema 
{
  "description": "Create an account on behalf of a client attested by a trusted issuer. Authenticated with a service-auth JWT (iss = trusted issuer DID, aud = this PDN, lxm = this method, exp - iat <= 60 s, unique jti). No invite code, no captcha. Without handle the server generates a memorable one; without email the server stores the placeholder <label>@newnal.id. Returns a full session, like createAccount; clients that need a scoped session create a scoped app password with it.",
  "errors": [
    {
      "name": "InvalidAttestation"
    },
    {
      "name": "UntrustedIssuer"
    },
    {
      "name": "AttestationReplayed"
    },
    {
      "name": "InvalidHandle"
    },
    {
      "name": "HandleNotAvailable"
    },
    {
      "name": "InvalidEmail"
    },
    {
      "name": "EmailNotAvailable"
    },
    {
      "name": "InvalidPassword"
    },
    {
      "name": "HandleGenerationFailed"
    }
  ],
  "input": {
    "encoding": "application/json",
    "schema": {
      "properties": {
        "email": {
          "type": "string"
        },
        "handle": {
          "format": "handle",
          "type": "string"
        },
        "password": {
          "type": "string"
        },
        "recoveryKey": {
          "description": "DID PLC rotation key to include in the creation operation.",
          "type": "string"
        }
      },
      "required": [
        "password"
      ],
      "type": "object"
    }
  },
  "output": {
    "encoding": "application/json",
    "schema": {
      "properties": {
        "accessJwt": {
          "type": "string"
        },
        "did": {
          "format": "did",
          "type": "string"
        },
        "didDoc": {
          "type": "unknown"
        },
        "email": {
          "type": "string"
        },
        "emailPlaceholder": {
          "type": "boolean"
        },
        "handle": {
          "format": "handle",
          "type": "string"
        },
        "refreshJwt": {
          "type": "string"
        }
      },
      "required": [
        "accessJwt",
        "refreshJwt",
        "handle",
        "did",
        "email",
        "emailPlaceholder"
      ],
      "type": "object"
    }
  },
  "type": "procedure"
}

Lexicon Garden

@