# town.muni.arbiter.createAppPasswordArbiter

> Published by [zicklag.dev](https://lexicon.garden/identity/did:plc:ulg2bzgrgs7ddjjlmhtegk3v)

✓ This is the authoritative definition for this NSID.

## Links

- [View on Lexicon Garden](https://lexicon.garden/lexicon/did:plc:ulg2bzgrgs7ddjjlmhtegk3v/town.muni.arbiter.createAppPasswordArbiter)
- [Documentation](https://lexicon.garden/lexicon/did:plc:ulg2bzgrgs7ddjjlmhtegk3v/town.muni.arbiter.createAppPasswordArbiter/docs)
- [Examples](https://lexicon.garden/lexicon/did:plc:ulg2bzgrgs7ddjjlmhtegk3v/town.muni.arbiter.createAppPasswordArbiter/examples)

## Definitions

### `town.muni.arbiter.createAppPasswordArbiter`

**Type**: `procedure`

Import an existing account as a stewarded arbiter.

The caller provides an app password proving control of the account.
The server stores the credentials and writes the service + recovery records
from the account's session. No policy is written: the arbiter stays offline
(fail-closed) until the recovery admin installs the first policy via
`town.muni.arbiter.resetPolicy`.

#### Input

**Encoding**: `application/json`

| Property | Type | Required | Description |
|----------|------|----------|-------------|
| `arbiterDid` | `string` (did) | Yes | The DID of the account to import. |
| `appPassword` | `string` | Yes | App password for the PDS account. |

#### Output

**Encoding**: `application/json`

| Property | Type | Required | Description |
|----------|------|----------|-------------|
| `ok` | `boolean` | Yes |  |

#### Errors

- **ErrPermissionDenied**: The requesting user is not allowed to import an arbiter.
- **ErrArbiterAlreadyExists**: An arbiter for this DID already exists on this server.
- **ErrProvisioningFailed**: Login or initial record writes failed.

## Raw Schema

```json
{
  "id": "town.muni.arbiter.createAppPasswordArbiter",
  "defs": {
    "main": {
      "type": "procedure",
      "input": {
        "schema": {
          "type": "object",
          "required": [
            "arbiterDid",
            "appPassword"
          ],
          "properties": {
            "arbiterDid": {
              "type": "string",
              "format": "did",
              "description": "The DID of the account to import."
            },
            "appPassword": {
              "type": "string",
              "description": "App password for the PDS account."
            }
          }
        },
        "encoding": "application/json"
      },
      "errors": [
        {
          "name": "ErrPermissionDenied",
          "description": "The requesting user is not allowed to import an arbiter."
        },
        {
          "name": "ErrArbiterAlreadyExists",
          "description": "An arbiter for this DID already exists on this server."
        },
        {
          "name": "ErrProvisioningFailed",
          "description": "Login or initial record writes failed."
        }
      ],
      "output": {
        "schema": {
          "type": "object",
          "required": [
            "ok"
          ],
          "properties": {
            "ok": {
              "type": "boolean"
            }
          }
        },
        "encoding": "application/json"
      },
      "description": "Import an existing account as a stewarded arbiter.\n\nThe caller provides an app password proving control of the account.\nThe server stores the credentials and writes the service + recovery records\nfrom the account's session. No policy is written: the arbiter stays offline\n(fail-closed) until the recovery admin installs the first policy via\n`town.muni.arbiter.resetPolicy`."
    }
  },
  "$type": "com.atproto.lexicon.schema",
  "lexicon": 1
}
```