Architecture
Thin coordination, host-owned account controls
This site coordinates UX, discovery, and contracts. The user’s account host remains the authority for account security, account controls, and data custody.
Universal sign-in flow
The app sends the user to the hosted picker.
Login with Atmosphere lets the user choose a remembered account.
The app receives a short-lived signed account choice.
The app starts normal AT Protocol OAuth with the selected account.
Universal sign-in
Apps send users to the hosted picker. Login with Atmosphere returns a signed selection token, then the app starts normal AT Protocol OAuth with the chosen account.
Shared app records
Apps use interoperable listing records for discovery, reviews, favorites, and community app identity. The old Atmosphere profile record is legacy compatibility.
Host account routing
PDS hosts publish a service record. This site shows where the account lives and links users to the account page the host explicitly publishes.
Developer ecosystem
Docs, examples, validator APIs, CLI checks, and future conformance badges help apps and hosts interoperate without a central token broker.
Login with Atmosphere does not broker app OAuth tokens, revoke PDS grants, manage devices, change passwords, rotate keys, perform account recovery, store backups, delete accounts, or move accounts. Those actions belong to the user’s account host.
| Surface | This site does | PDS host does |
|---|---|---|
| Sign in | Lets the user choose an account and returns a signed selection token. | Issues the app's OAuth grant after the app starts normal AT Protocol OAuth. |
| Account home | Shows the current account, remembered browser accounts, Login with Atmosphere connections, developer apps, reviews, and a link to the host. | Manages passwords, devices, OAuth grants, account deletion, recovery, backups, exports, and migration. |
| Host directory | Shows reachable, intentionally public provider profiles with signup information, location/style, and optional compatibility signals. Raw observed personal PDSes remain private. | Publishes authoritative host service/profile records and owns the account page destination. |
| App directory | Indexes shared app records, merges duplicates, and shows reviews/favorites from interoperable records. | Publishes app-owned records from the app account and remains the source of truth for app-specific OAuth grants. |
Choose the right integration
| You are building | Use | Result |
|---|---|---|
| An Atmosphere app | Login with Atmosphere and shared app records | One consistent account picker, followed by your own AT Protocol OAuth session and interoperable app discovery. |
| A PDS host | Host service record | This site can route people to the explicitly published account page without duplicating account controls. |
| A directory or compatibility badge | Conformance validator | Claims are backed by testable manifest behavior instead of manual copy. |