space.highport.manage.enableDelegation
{
"$type": "com.atproto.lexicon.schema",
"defs": {
"main": {
"description": "Make a registered domain a delegation base, so its owner can reserve names directly under it for other identities. Returns the wildcard record that routes those names. The caller must own the base, and it must be verified or active.",
"errors": [
{
"description": "Not a syntactically valid domain.",
"name": "InvalidDomain"
},
{
"description": "No verified or active registration of that domain belongs to the caller.",
"name": "NotBaseOwner"
},
{
"description": "This domain cannot be a delegation base. It is registered to a space, is a domain this deployment provides or a name under one, was itself handed out under a base, or sits above or below a domain with delegation turned on. Bases do not nest.",
"name": "DelegationUnsupported"
},
{
"description": "maxNames is above this deployment's per-base limit.",
"name": "MaxNamesAboveLimit"
},
{
"description": "The base's CAA records do not allow this deployment's certificate issuer, account, or challenge method. The error message names the blocking record.",
"name": "CaaForbidsIssuance"
}
],
"input": {
"encoding": "application/json",
"schema": {
"properties": {
"domain": {
"description": "The base: a domain registered to the caller.",
"maxLength": 253,
"type": "string"
},
"maxNames": {
"description": "The most names the base can reserve. Defaults to the deployment's setting; a value above the deployment's ceiling is refused.",
"minimum": 1,
"type": "integer"
}
},
"required": [
"domain"
],
"type": "object"
}
},
"output": {
"encoding": "application/json",
"schema": {
"properties": {
"domain": {
"type": "string"
},
"probeHostname": {
"description": "A random name under the base, used to prove the wildcard routes. Absent while the base has no probe.",
"maxLength": 253,
"type": "string"
},
"records": {
"description": "The DNS records to publish: the wildcard traffic record.",
"items": {
"ref": "space.highport.defs#dnsInstruction",
"type": "ref"
},
"type": "array"
},
"status": {
"ref": "space.highport.defs#delegationState",
"type": "ref"
}
},
"required": [
"domain",
"records",
"status"
],
"type": "object"
}
},
"type": "procedure"
}
},
"id": "space.highport.manage.enableDelegation",
"lexicon": 1
}
Metadata
- DID
-
did:plc:ciygg5hma4q7ah2kxaszkyob - CID
-
bafyreidrmp3q5kvr33x3z7fvk44b5vvswt5j3by6fa327bbomdxs7k7p6i - Indexed At
- 2026-09-17 17:49 UTC
- AT-URI
-
at://did:plc:ciygg5hma4q7ah2kxaszkyob/com.atproto.lexicon.schema/space.highport.manage.enableDelegation
Version History (3 versions)
Referenced Schemas (2)
Similar Lexicons
Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.
-
space.highport.manage.setCertificateMode procedure
Choose how names under a proven base get certificates. wildcard lets this service get one wildcard certificate for the base over DNS-01, through the base's own challenge target, and returns the record that delegates it.…
-
space.highport.manage.reserveDomain procedure
Reserve a name directly under a delegation base for another identity. The name answers /.well-known/atproto-did with the subject right away, and the subject can then publish a site there. The caller must own the base. A…
-
space.highport.manage.register procedure
Register a domain to the caller, or to a space the caller is the authority of, and get the DNS records needed to prove ownership and route traffic.
-
space.highport.manage.disableDelegation procedure
Stop a base handing out names: remove its probe and clear its delegation state. Refused while any reservation remains; release each one with releaseReservation. A certificate grant on the base is left in place.
-
space.highport.manage.releaseDomain procedure
Release a domain: deactivate its site and stop authorizing it for TLS. Certificates already issued for it stay valid until they expire. If the domain is a base with a wildcard grant, the grant ends and the wildcard is r…