Lexicon Garden

town.muni.arbiter.createArbiter

Provision a brand-new stewarded PDS account. The caller authenticates via serviceAuth (aud = arbiter-server DID, lxm = town.muni.arbiter.createArbiter). The server creates a new account on the configured default PDS using an invite code + random password, stores the credentials, and writes the service + recovery records from the new account's session. No policy is written: the arbiter stays offline (fail-closed) until the recovery admin installs the first policy via `town.muni.arbiter.resetPolicy`.

Repository @zicklag.dev did:plc:ulg2bzgrgs7ddjjlmhtegk3v namespace authority
Details · procedure
Kindprocedure
Authorityarbiter.muni.town
Indexed
Compare Edit in builder → Fork →

Procedure

procedure · POST

Output

application/json

did

requiredstring · did

The DID of the newly created stewarded account.

Errors

ErrPermissionDenied

The requesting user is not allowed to create an arbiter.

ErrProvisioningFailed

Account creation or initial record writes failed.

Similar lexicons

semantic match

Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.

  • town.muni.arbiter.createAppPasswordArbiter

    procedure

    Import an existing account as a stewarded arbiter. The caller provides an app password proving control of the account. The server stores the credentials and writes the service + recovery records from the account's session. No policy is written: the arbiter stays offline (fail-closed) until the recovery admin installs the first policy via `town.muni.arbiter.resetPolicy`.

  • town.muni.arbiter.createDid

    procedure

    Create a new DID that will be managed by this service. A new arbiter will be created in order to manage access to the DID. The arbiter will be configured with a default policy that sets the creator as the owner of the arbiter and allows them to change the DID document. The policy can also be changed later. The created DID will be returned

  • com.atproto.server.createAccount

    procedure

    Create an account. Implemented by PDS.

  • rip.pds.admin.createAccount

    procedure

    Issue an account on any configured domain, including operator-only and permanent ones, optionally on somebody else's behalf. Bypasses the quota. Operators only.

  • ai.newnal.pdn.server.createAttestedAccount

    procedure not from the namespace authority

    Create an account on behalf of a client attested by a trusted issuer. Authenticated with a service-auth JWT (iss = trusted issuer DID, aud = this PDN, lxm = this method, exp - iat <= 60 s, unique jti). No invite code, no captcha. Without handle the server generates a memorable one; without email the server stores the placeholder <label>@newnal.id. Returns a full session, like createAccount; clients that need a scoped session create a scoped app password with it.