space.highport.manage.enableDelegation

lexicons.highport.space

{
  "$type": "com.atproto.lexicon.schema",
  "defs": {
    "main": {
      "description": "Declare a registered domain a delegation base, so its owner can reserve names directly under it for other identities, and obtain the wildcard traffic record that routes those names. The caller must be the base's registered identity, and the base must be verified or active.",
      "errors": [
        {
          "description": "Not a syntactically valid domain.",
          "name": "InvalidDomain"
        },
        {
          "description": "No verified or active registration of that domain belongs to the caller.",
          "name": "NotBaseOwner"
        },
        {
          "description": "The domain cannot delegate names: it is registered to a space, it is a domain this deployment provides or a name under one, it was itself handed out under a base, or it sits above or beneath a domain whose delegation is not off. Delegation bases do not nest.",
          "name": "DelegationUnsupported"
        },
        {
          "description": "maxNames is above the most names this deployment lets one base hold.",
          "name": "MaxNamesAboveLimit"
        },
        {
          "description": "The base's CAA records do not permit this deployment's certificate issuer, account, or challenge method. The message names the record in the way.",
          "name": "CaaForbidsIssuance"
        }
      ],
      "input": {
        "encoding": "application/json",
        "schema": {
          "properties": {
            "domain": {
              "description": "The base: a domain registered to the caller.",
              "maxLength": 253,
              "type": "string"
            },
            "maxNames": {
              "description": "The most names the base may hold in reservation. Omitted, the deployment's default applies; a value above the deployment's ceiling is refused.",
              "minimum": 1,
              "type": "integer"
            }
          },
          "required": [
            "domain"
          ],
          "type": "object"
        }
      },
      "output": {
        "encoding": "application/json",
        "schema": {
          "properties": {
            "domain": {
              "type": "string"
            },
            "probeHostname": {
              "description": "The random name under the base through which the wildcard is proven to route. Absent while the base has no probe.",
              "maxLength": 253,
              "type": "string"
            },
            "records": {
              "description": "The DNS records delegation asks for: the wildcard traffic record.",
              "items": {
                "ref": "space.highport.defs#dnsInstruction",
                "type": "ref"
              },
              "type": "array"
            },
            "status": {
              "ref": "space.highport.defs#delegationState",
              "type": "ref"
            }
          },
          "required": [
            "domain",
            "records",
            "status"
          ],
          "type": "object"
        }
      },
      "type": "procedure"
    }
  },
  "id": "space.highport.manage.enableDelegation",
  "lexicon": 1
}

Validate Record

Validate a record against space.highport.manage.enableDelegation

Validation Options
Automatically resolve and include external schemas for full validation
Treat any remaining unresolved references as valid

Metadata

DID
did:plc:ciygg5hma4q7ah2kxaszkyob
CID
bafyreia3e2fp7defkbwzm67biroli7mrv773t2ryc6dqvmunhpkg2qmdwm
Indexed At
2026-09-17 00:02 UTC
AT-URI
at://did:plc:ciygg5hma4q7ah2kxaszkyob/com.atproto.lexicon.schema/space.highport.manage.enableDelegation

Version History (3 versions)

Referenced Schemas (2)

Similar Lexicons

Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.

  • Choose how names under a proven base get certificates. wildcard lets this service get one wildcard certificate for the base over DNS-01, through the base's own challenge target, and returns the record that delegates it.…

  • Reserve a name directly under a delegation base for another identity. The name answers /.well-known/atproto-did with the subject right away, and the subject can then publish a site there. The caller must own the base. A…

  • Register a domain to the caller, or to a space the caller is the authority of, and get the DNS records needed to prove ownership and route traffic.

  • Stop a base handing out names: remove its probe and clear its delegation state. Refused while any reservation remains; release each one with releaseReservation. A certificate grant on the base is left in place.

  • Release a domain: deactivate its site and stop authorizing it for TLS. Certificates already issued for it stay valid until they expire. If the domain is a base with a wildcard grant, the grant ends and the wildcard is r…

Lexicon Garden

@