Checks
Readiness states
| State | Meaning | Next action |
|---|---|---|
| Local development only | Loopback or localhost URLs are present. | Replace with HTTPS production URLs before review. |
| Needs production fixes | One or more required checks failed. | Open the app detail page and run checks. |
| Ready to request trusted review | Production checks pass. | Submit review notes. |
| Trusted | This site reviewed the app identity. | Keep metadata and return URIs stable. |
| Blocked | Picker is unavailable for the app. | Contact support. |
Production launch checklist
- The public app profile name matches the product.
- Client ID is HTTPS and controlled by the app.
- The app profile homepage is HTTPS and reachable.
- The app profile logo is HTTPS, reachable, and recognizable.
- Every production return URI is listed exactly.
- No local development URLs remain in production registration.
- Domain manifest matches the live app profile identity and environment return URIs.
- Picker test URL completes successfully.
- Selection token verification happens server-side.
- AT Protocol OAuth starts after selection and is owned by the app.
Domain manifest
{
"version": "atmosphere.login.v0.1",
"apps": [
{
"client_id": "https://app.example.com/oauth/client-metadata.json",
"app_name": "Example App",
"homepage": "https://app.example.com",
"logo_uri": "https://app.example.com/icon.png",
"allowed_return_uris": [
"https://app.example.com/auth/atmosphere/selected"
]
}
]
}