Marketing Skills Directory Bluesky AT Protocol API
No fee listed
Rate limited. The docs list no charge.
Rate limited (see docs)
Other
Session with handle and app password, or OAuth. Public reads can work without login on the public AppView.
Profiles and follows
Posts and threads
Feeds and lists
Post search
Post, like and repost writes
Pricing checked on 23 Oct 2026 · Pricing page · Docs · Sign up
Description
Bluesky runs on the AT Protocol, an open protocol. Its HTTP API (XRPC) lets an app read profiles, feeds and posts, search, and create posts, likes and follows on behalf of an account.
For marketing and agent workflows it suits brand monitoring on Bluesky, scheduled posting, and community analysis. There is no paid tier to manage.
It is a good fit for developers who want open access without approval. Reach is limited to Bluesky’s audience, and no published AppView numbers means you should build in retries.
Key endpoints
POST /xrpc/com.atproto.server.createSession: log in and get tokensGET /xrpc/app.bsky.actor.getProfile: profile by handleGET /xrpc/app.bsky.feed.getAuthorFeed: posts by an accountGET /xrpc/app.bsky.feed.searchPosts: search postsPOST /xrpc/com.atproto.repo.createRecord: create a post
Example request
curl "https://public.api.bsky.app/xrpc/app.bsky.actor.getProfile?actor=bsky.app"
Tech details
- API style
- REST
- Base URL
- https://public.api.bsky.app
- Rate limits
- PDS: 3,000 requests per 5 min per IP. Writes: 5,000 points/hour and 35,000/day per account. AppView: no numbers published.
- Official SDKs
- TypeScript
Use Cases
Profiles and follows
Posts and threads
Feeds and lists
Post search
Post, like and repost writes
Editor’s note What our review found
Editorial research, reviewed 23 Oct 2026. We read Bluesky's rate limit and API hosts pages. We did not run live calls. This listing is not an endorsement.
Cost: Bluesky's documentation lists no pricing and no paid plans. You need a Bluesky account.
Credentials and data: use an app password or OAuth for the account. Keep it in an environment variable or a secret manager, never in code or plain-text files. Use a dedicated app password, not your main one. Posts and profiles you read are public but can contain personal information.
Good to know: the rate limit page gives hosted-account (PDS) limits of 3,000 requests per 5 minutes per IP, and writes of 5,000 points per hour and 35,000 per day per account (create 3 points, update 2, delete 1). No specific AppView numbers are published. Public reads can go to public.api.bsky.app without login. Writes go to the account's PDS and need authentication. The docs note that all these limits are likely to change.