Authenticated XRPC Calls in Lexicon Garden

Lexicon Garden now supports ATProtocol OAuth, so you can sign in and make authenticated XRPC calls right from the documentation.

The "Try It" panel on XRPC method pages is now available. You can fill in parameters and send requests to any service straight from your browser. This works well for public endpoints that don't need authentication. However, many XRPC methods require you to be signed in, and until now, there was no way to test those.

Now you can. Sign in with your internet handle, DID, or the URL of your PDS. Lexicon Garden guides you through the OAuth process and sets up a session. Once you're logged in, the "Try It" panel lets you make authenticated requests. Just check the box to use your credentials, and you can call endpoints that need a signed-in user.

This makes it easy to explore authenticated endpoints without writing code or setting up a development environment. Want to see what app.bsky.actor.getSuggestions returns for your account? Or check your bookmarks with app.bsky.bookmark.getBookmarks? Now you can do both directly from the docs.

Requests go straight from your browser to the service you choose. Some servers might block requests due to CORS, but the most common endpoints work without issue. This site gives you direct access to ATProtocol services, so it's best for power users and developers who are comfortable with these tools.