XRPC API

XRPC is the HTTP-based RPC protocol used by the atproto. HappyView dynamically registers XRPC endpoints based on your uploaded lexicons: query lexicons become GET /xrpc/{nsid} routes, procedure lexicons become POST /xrpc/{nsid} routes.

If a query or procedure lexicon has a script attached, the script handles the request. Otherwise, HappyView uses built-in default behavior (described below).

Auth

XRPC routes accept several authentication methods:

• DPoP auth — Authorization: DPoP <token> + DPoP proof header + X-Client-Key
• Service auth JWTs — Authorization: Bearer <service_auth_jwt> (inter-service calls). A token whose lxm names a different method than the one called is rejected.
• Space credentials — Authorization: Atproto-Space <credential> with an Atproto-Space-Audience header and an HTTP Message Signature (space routes only). See Space credentials.
• Cookie-based session auth — signed session cookies (used by the dashboard, falls back when no Authorization header is present)
• Anonymous — no auth headers (identity is nil in Lua scripts)

Bearer API keys (hv_*) are rejected on XRPC routes — they are only accepted on the admin API.

Default auth behavior:

• Queries (GET /xrpc/{method}): unauthenticated by default (identity available if provided)
• Procedures (POST /xrpc/{method}): require authentication (DPoP, session cookie, or service auth)
• getProfile: requires auth
• uploadBlob: requires auth

Fixed endpoints

These endpoints are always available regardless of which lexicons are loaded.

Health check

GET /health

TypeScript

const response = await fetch("http://127.0.0.1:3000/health");
const text = await response.text(); // "ok"

JavaScript

const response = await fetch("http://127.0.0.1:3000/health");
const text = await response.text(); // "ok"

Rust

let client = reqwest::Client::new();

let response = client
    .get("http://127.0.0.1:3000/health")
    .send()
    .await?;

let text = response.text().await?; // "ok"

Go

resp, err := http.Get("http://127.0.0.1:3000/health")

cURL

curl http://127.0.0.1:3000/health

Response: 200 OK with body ok

Get profile

GET /xrpc/app.bsky.actor.getProfile

Returns the authenticated user’s profile, resolved from their PDS via PLC directory lookup.

TypeScript

const CLIENT_KEY = "hvc_..."; // your API client key
const TOKEN = "..."; // your access token

interface ProfileResponse {
  did: string;
  handle: string;
  displayName: string;
  description: string;
  avatarURL: string;
}

const response = await fetch(
  "http://127.0.0.1:3000/xrpc/app.bsky.actor.getProfile",
  {
    headers: {
      "X-Client-Key": CLIENT_KEY,
      Authorization: `Bearer ${TOKEN}`,
    },
  },
);

const profile: ProfileResponse = await response.json();

JavaScript

const CLIENT_KEY = "hvc_..."; // your API client key
const TOKEN = "..."; // your access token

const response = await fetch(
  "http://127.0.0.1:3000/xrpc/app.bsky.actor.getProfile",
  {
    headers: {
      "X-Client-Key": CLIENT_KEY,
      Authorization: `Bearer ${TOKEN}`,
    },
  },
);

const profile = await response.json();

Rust

let client_key = "hvc_..."; // your API client key
let token = "..."; // your access token

let response = client
    .get("http://127.0.0.1:3000/xrpc/app.bsky.actor.getProfile")
    .header("X-Client-Key", client_key)
    .bearer_auth(token)
    .send()
    .await?;

let profile: serde_json::Value = response.json().await?;

Go

clientKey := "hvc_..." // your API client key
token := "..."         // your access token

req, _ := http.NewRequest("GET",
  "http://127.0.0.1:3000/xrpc/app.bsky.actor.getProfile", nil)
req.Header.Set("X-Client-Key", clientKey)
req.Header.Set("Authorization", "Bearer "+token)

resp, err := http.DefaultClient.Do(req)

cURL

curl http://127.0.0.1:3000/xrpc/app.bsky.actor.getProfile \
  -H "X-Client-Key: $CLIENT_KEY" \
  -H "Authorization: DPoP $ACCESS_TOKEN" \
  -H "DPoP: $DPOP_PROOF"

Response: 200 OK

{
  "did": "did:plc:abc123",
  "handle": "user.bsky.social",
  "displayName": "User Name",
  "description": "Bio text",
  "avatarURL": "https://pds.example.com/xrpc/com.atproto.sync.getBlob?did=did:plc:abc123&cid=bafyabc"
}

Upload blob

POST /xrpc/com.atproto.repo.uploadBlob

Proxies a blob upload to the authenticated user’s PDS. Maximum size: 50MB.

TypeScript

import { readFile } from "node:fs/promises";

const imageData = await readFile("image.png");

const response = await fetch(
  "http://127.0.0.1:3000/xrpc/com.atproto.repo.uploadBlob",
  {
    method: "POST",
    headers: {
      "X-Client-Key": CLIENT_KEY,
      Authorization: `Bearer ${TOKEN}`,
      "Content-Type": "image/png",
    },
    body: imageData,
  },
);

JavaScript

import { readFile } from "node:fs/promises";

const imageData = await readFile("image.png");

const response = await fetch(
  "http://127.0.0.1:3000/xrpc/com.atproto.repo.uploadBlob",
  {
    method: "POST",
    headers: {
      "X-Client-Key": CLIENT_KEY,
      Authorization: `Bearer ${TOKEN}`,
      "Content-Type": "image/png",
    },
    body: imageData,
  },
);

Rust

let image_data = std::fs::read("image.png")?;

let response = client
    .post("http://127.0.0.1:3000/xrpc/com.atproto.repo.uploadBlob")
    .header("X-Client-Key", client_key)
    .bearer_auth(token)
    .header("Content-Type", "image/png")
    .body(image_data)
    .send()
    .await?;

Go

imageData, _ := os.ReadFile("image.png")

req, _ := http.NewRequest("POST",
  "http://127.0.0.1:3000/xrpc/com.atproto.repo.uploadBlob",
  bytes.NewReader(imageData))
req.Header.Set("X-Client-Key", clientKey)
req.Header.Set("Authorization", "Bearer "+token)
req.Header.Set("Content-Type", "image/png")

resp, err := http.DefaultClient.Do(req)

cURL

curl -X POST http://127.0.0.1:3000/xrpc/com.atproto.repo.uploadBlob \
  -H "X-Client-Key: $CLIENT_KEY" \
  -H "Authorization: DPoP $ACCESS_TOKEN" \
  -H "DPoP: $DPOP_PROOF" \
  -H "Content-Type: image/png" \
  --data-binary @image.png

Response: proxied from the user’s PDS.

Dynamic query endpoints

Query endpoints are generated from lexicons with type: "query". Without a script, they support two built-in modes depending on whether a uri parameter is provided.

Single record

GET /xrpc/{method}?uri={at-uri}

TypeScript

const CLIENT_KEY = "hvc_..."; // your API client key

const params = new URLSearchParams({
  uri: "at://did:plc:abc/xyz.statusphere.status/abc123",
});

interface RecordResponse {
  record: {
    uri: string;
    $type: string;
    status: string;
    createdAt: string;
  };
}

const response = await fetch(
  `http://127.0.0.1:3000/xrpc/xyz.statusphere.listStatuses?${params}`,
  { headers: { "X-Client-Key": CLIENT_KEY } },
);

const data: RecordResponse = await response.json();

JavaScript

const CLIENT_KEY = "hvc_..."; // your API client key

const params = new URLSearchParams({
  uri: "at://did:plc:abc/xyz.statusphere.status/abc123",
});

const response = await fetch(
  `http://127.0.0.1:3000/xrpc/xyz.statusphere.listStatuses?${params}`,
  { headers: { "X-Client-Key": CLIENT_KEY } },
);

const data = await response.json();

Rust

let client_key = "hvc_..."; // your API client key

let response = client
    .get("http://127.0.0.1:3000/xrpc/xyz.statusphere.listStatuses")
    .query(&[("uri", "at://did:plc:abc/xyz.statusphere.status/abc123")])
    .header("X-Client-Key", client_key)
    .send()
    .await?;

let data: serde_json::Value = response.json().await?;

Go

clientKey := "hvc_..." // your API client key

req, _ := http.NewRequest("GET",
  "http://127.0.0.1:3000/xrpc/xyz.statusphere.listStatuses?uri=at%3A%2F%2Fdid%3Aplc%3Aabc%2Fxyz.statusphere.status%2Fabc123",
  nil)
req.Header.Set("X-Client-Key", clientKey)

resp, err := http.DefaultClient.Do(req)

cURL

curl "http://127.0.0.1:3000/xrpc/xyz.statusphere.listStatuses?uri=at%3A%2F%2Fdid%3Aplc%3Aabc%2Fxyz.statusphere.status%2Fabc123" \
  -H "X-Client-Key: $CLIENT_KEY"

Response: 200 OK

{
  "record": {
    "uri": "at://did:plc:abc/xyz.statusphere.status/abc123",
    "$type": "xyz.statusphere.status",
    "status": "\ud83d\ude0a",
    "createdAt": "2025-01-01T12:00:00Z"
  }
}

Media blobs are automatically enriched with a url field pointing to the user’s PDS.

List records

GET /xrpc/{method}?limit=20&cursor=<opaque>&did=optional

Param	Type	Default	Description
limit	integer	20	Max records to return (max 100)
cursor	string	---	Opaque pagination cursor from a previous response
did	string	---	Filter records by DID

TypeScript

const params = new URLSearchParams({ limit: "10", did: "did:plc:abc" });

interface ListResponse {
  records: Array<{
    uri: string;
    status: string;
    createdAt: string;
  }>;
  cursor?: string;
}

const response = await fetch(
  `http://127.0.0.1:3000/xrpc/xyz.statusphere.listStatuses?${params}`,
  { headers: { "X-Client-Key": CLIENT_KEY } },
);

const data: ListResponse = await response.json();

JavaScript

const params = new URLSearchParams({ limit: "10", did: "did:plc:abc" });

const response = await fetch(
  `http://127.0.0.1:3000/xrpc/xyz.statusphere.listStatuses?${params}`,
  { headers: { "X-Client-Key": CLIENT_KEY } },
);

const data = await response.json();

Rust

let response = client
    .get("http://127.0.0.1:3000/xrpc/xyz.statusphere.listStatuses")
    .query(&[("limit", "10"), ("did", "did:plc:abc")])
    .header("X-Client-Key", client_key)
    .send()
    .await?;

let data: serde_json::Value = response.json().await?;

Go

req, _ := http.NewRequest("GET",
  "http://127.0.0.1:3000/xrpc/xyz.statusphere.listStatuses?limit=10&did=did:plc:abc",
  nil)
req.Header.Set("X-Client-Key", clientKey)

resp, err := http.DefaultClient.Do(req)

cURL

curl "http://127.0.0.1:3000/xrpc/xyz.statusphere.listStatuses?limit=10&did=did:plc:abc" \
  -H "X-Client-Key: $CLIENT_KEY"

Response: 200 OK

{
  "records": [
    {
      "uri": "at://did:plc:abc/xyz.statusphere.status/abc123",
      "status": "\ud83d\ude0a",
      "createdAt": "2025-01-01T12:00:00Z"
    }
  ],
  "cursor": "MjAyNS0wMS0wMVQxMjowMDowMFp8YXQ6Ly9kaWQ6..."
}

The cursor field is an opaque string present only when more records exist. Pass it back as-is to fetch the next page.

Dynamic procedure endpoints

Procedure endpoints are generated from lexicons with type: "procedure". Without a script, HappyView auto-detects create vs update based on whether the request body contains a uri field.

Create a record

POST /xrpc/{method}

When the body does not contain a uri field, a new record is created.

TypeScript

const CLIENT_KEY = "hvc_..."; // your API client key
const ACCESS_TOKEN = "..."; // DPoP access token
const DPOP_PROOF = "..."; // DPoP proof JWT

const response = await fetch(
  "http://127.0.0.1:3000/xrpc/xyz.statusphere.setStatus",
  {
    method: "POST",
    headers: {
      "X-Client-Key": CLIENT_KEY,
      Authorization: `DPoP ${ACCESS_TOKEN}`,
      DPoP: DPOP_PROOF,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({
      status: "\ud83d\ude0a",
      createdAt: "2025-01-01T12:00:00Z",
    }),
  },
);

JavaScript

const CLIENT_KEY = "hvc_..."; // your API client key
const ACCESS_TOKEN = "..."; // DPoP access token
const DPOP_PROOF = "..."; // DPoP proof JWT

const response = await fetch(
  "http://127.0.0.1:3000/xrpc/xyz.statusphere.setStatus",
  {
    method: "POST",
    headers: {
      "X-Client-Key": CLIENT_KEY,
      Authorization: `DPoP ${ACCESS_TOKEN}`,
      DPoP: DPOP_PROOF,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({
      status: "\ud83d\ude0a",
      createdAt: "2025-01-01T12:00:00Z",
    }),
  },
);

Rust

let client_key = "hvc_..."; // your API client key
let access_token = "..."; // DPoP access token
let dpop_proof = "..."; // DPoP proof JWT

let response = client
    .post("http://127.0.0.1:3000/xrpc/xyz.statusphere.setStatus")
    .header("X-Client-Key", client_key)
    .header("Authorization", format!("DPoP {}", access_token))
    .header("DPoP", dpop_proof)
    .json(&serde_json::json!({
        "status": "\ud83d\ude0a",
        "createdAt": "2025-01-01T12:00:00Z"
    }))
    .send()
    .await?;

Go

clientKey := "hvc_..."  // your API client key
accessToken := "..."    // DPoP access token
dpopProof := "..."      // DPoP proof JWT

body := bytes.NewBufferString(`{"status": "\ud83d\ude0a", "createdAt": "2025-01-01T12:00:00Z"}`)

req, _ := http.NewRequest("POST",
  "http://127.0.0.1:3000/xrpc/xyz.statusphere.setStatus", body)
req.Header.Set("X-Client-Key", clientKey)
req.Header.Set("Authorization", "DPoP "+accessToken)
req.Header.Set("DPoP", dpopProof)
req.Header.Set("Content-Type", "application/json")

resp, err := http.DefaultClient.Do(req)

cURL

curl -X POST http://127.0.0.1:3000/xrpc/xyz.statusphere.setStatus \
  -H "X-Client-Key: $CLIENT_KEY" \
  -H "Authorization: DPoP $ACCESS_TOKEN" \
  -H "DPoP: $DPOP_PROOF" \
  -H "Content-Type: application/json" \
  -d '{ "status": "\ud83d\ude0a", "createdAt": "2025-01-01T12:00:00Z" }'

HappyView proxies this to the user’s PDS as com.atproto.repo.createRecord, then indexes the created record locally.

Update a record

When the body contains a uri field, the existing record is updated.

TypeScript

const response = await fetch(
  "http://127.0.0.1:3000/xrpc/xyz.statusphere.setStatus",
  {
    method: "POST",
    headers: {
      "X-Client-Key": CLIENT_KEY,
      Authorization: `DPoP ${ACCESS_TOKEN}`,
      DPoP: DPOP_PROOF,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({
      uri: "at://did:plc:abc/xyz.statusphere.status/abc123",
      status: "\ud83c\udf1f",
      createdAt: "2025-01-01T13:00:00Z",
    }),
  },
);

JavaScript

const response = await fetch(
  "http://127.0.0.1:3000/xrpc/xyz.statusphere.setStatus",
  {
    method: "POST",
    headers: {
      "X-Client-Key": CLIENT_KEY,
      Authorization: `DPoP ${ACCESS_TOKEN}`,
      DPoP: DPOP_PROOF,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({
      uri: "at://did:plc:abc/xyz.statusphere.status/abc123",
      status: "\ud83c\udf1f",
      createdAt: "2025-01-01T13:00:00Z",
    }),
  },
);

Rust

let response = client
    .post("http://127.0.0.1:3000/xrpc/xyz.statusphere.setStatus")
    .header("X-Client-Key", client_key)
    .header("Authorization", format!("DPoP {}", access_token))
    .header("DPoP", dpop_proof)
    .json(&serde_json::json!({
        "uri": "at://did:plc:abc/xyz.statusphere.status/abc123",
        "status": "\ud83c\udf1f",
        "createdAt": "2025-01-01T13:00:00Z"
    }))
    .send()
    .await?;

Go

body := bytes.NewBufferString(`{
  "uri": "at://did:plc:abc/xyz.statusphere.status/abc123",
  "status": "\ud83c\udf1f",
  "createdAt": "2025-01-01T13:00:00Z"
}`)

req, _ := http.NewRequest("POST",
  "http://127.0.0.1:3000/xrpc/xyz.statusphere.setStatus", body)
req.Header.Set("X-Client-Key", clientKey)
req.Header.Set("Authorization", "DPoP "+accessToken)
req.Header.Set("DPoP", dpopProof)
req.Header.Set("Content-Type", "application/json")

resp, err := http.DefaultClient.Do(req)

cURL

curl -X POST http://127.0.0.1:3000/xrpc/xyz.statusphere.setStatus \
  -H "X-Client-Key: $CLIENT_KEY" \
  -H "Authorization: DPoP $ACCESS_TOKEN" \
  -H "DPoP: $DPOP_PROOF" \
  -H "Content-Type: application/json" \
  -d '{
    "uri": "at://did:plc:abc/xyz.statusphere.status/abc123",
    "status": "\ud83c\udf1f",
    "createdAt": "2025-01-01T13:00:00Z"
  }'

HappyView proxies this to the user’s PDS as com.atproto.repo.putRecord, then upserts the record locally.

Response for both: proxied from the user’s PDS.

XRPC proxy

When a request targets an NSID that has no locally registered lexicon, HappyView resolves the NSID’s authority via DNS and forwards the request. Admins can restrict which NSIDs are proxied — see XRPC Proxy settings.

Errors

All error responses return JSON with an error field:

{
  "error": "description of what went wrong"
}

Status	Meaning	Common causes
400 Bad Request	Invalid input	Missing required fields, malformed JSON, invalid AT URI
401 Unauthorized	Authentication failed	Missing or invalid client identification or DPoP authentication
404 Not Found	Method or record not found	XRPC method has no matching lexicon, or the requested record doesn’t exist
500 Internal Server Error	Server-side failure	Lua script error, database error, or upstream PDS failure

Lua script errors

When a Lua script fails, the response is a script_error body:

{ "error": "script_error", "errorType": "runtime", "message": "attempt to index a nil value (local 't')", "method": "xyz.statusphere.getStatus", "line": 3, "file": "src/lib/format.lua" }

errorType is syntax, runtime or missing_handle with status 500, or timeout with status 408 when the script hit the instruction limit or the wall clock, both set in System > General. line is the script line that raised, or null. file is the project file line is in, relative to the project root: the handler itself, or a local module it imported. It is null for a script saved through the dashboard, which has no file.

The same error is logged server-side with the script source and the caller’s input. See Errors for how to diagnose script issues.

PDS errors

When a procedure proxies a write to the user’s PDS and the PDS returns an error, HappyView forwards the PDS response status code and body directly to the client.

Next steps

• Scripts: Override the default query and procedure behavior with custom logic
• Lexicons: Understand how lexicons generate these endpoints
• Admin API: Manage lexicons and monitor your instance