# Bluesky Profile API

Bluesky

Returns a public Bluesky profile from its handle, DID or link, with exact follower, following and post counts. It also has the stable DID and current handle, display name, bio, pronouns, avatar, banner, join date, the verified badge with who verified the account and when, its links with their titles, labels such as bot, its pinned post, and how many lists, custom feeds and starter packs it made.

GET `/v1/bluesky/profile`

## Example

cURL:

```shell
curl 'https://socialtap.dev/v1/bluesky/profile?handle=espn.com' \
  -H "x-api-key: $SOCIALTAP_API_KEY"
```

TypeScript SDK:

```typescript
import { SocialTap } from "socialtap";

const client = new SocialTap(); // apiKey defaults to process.env.SOCIALTAP_API_KEY

const res = await client.bluesky.profile.get({ handle: "espn.com" });
console.log(res.data);
console.log(res.credits.charged, res.meta.request_id);
```

Node.js (fetch):

```javascript
const params = new URLSearchParams({
  handle: "espn.com",
});
const res = await fetch(`https://socialtap.dev/v1/bluesky/profile?${params}`, {
  headers: { "x-api-key": process.env.SOCIALTAP_API_KEY ?? "" },
});
const body = await res.json();
if (!res.ok) throw new Error(`${body.error.code}: ${body.error.message}`);
const { data, meta } = body;
console.log(data, meta.credits_charged);
```

Python (requests):

```python
import os

import requests

res = requests.get(
    "https://socialtap.dev/v1/bluesky/profile",
    params={"handle": "espn.com"},
    headers={"x-api-key": os.environ["SOCIALTAP_API_KEY"]},
)
body = res.json()
if not res.ok:
    raise RuntimeError(f"{body['error']['code']}: {body['error']['message']}")
data, meta = body["data"], body["meta"]
print(data, meta["credits_charged"])
```

Go (net/http):

```go
package main

import (
	"encoding/json"
	"fmt"
	"log"
	"net/http"
	"net/url"
	"os"
)

func main() {
	q := url.Values{}
	q.Set("handle", "espn.com")
	req, err := http.NewRequest("GET", "https://socialtap.dev/v1/bluesky/profile?"+q.Encode(), nil)
	if err != nil {
		log.Fatal(err)
	}
	req.Header.Set("x-api-key", os.Getenv("SOCIALTAP_API_KEY"))
	res, err := http.DefaultClient.Do(req)
	if err != nil {
		log.Fatal(err)
	}
	defer res.Body.Close()
	var body struct {
		Data  json.RawMessage `json:"data"`
		Meta  map[string]any  `json:"meta"`
		Error *struct {
			Code    string `json:"code"`
			Message string `json:"message"`
		} `json:"error"`
	}
	if err := json.NewDecoder(res.Body).Decode(&body); err != nil {
		log.Fatal(err)
	}
	if body.Error != nil {
		log.Fatalf("%s: %s", body.Error.Code, body.Error.Message)
	}
	fmt.Println(string(body.Data), body.Meta["credits_charged"])
}
```

200 OK:

```json
{
  "data": {
    "approximate_fields": [],
    "avatar_url": "https://cdn.bsky.app/img/avatar/plain/did:plc:x7d6j54pm22ufehkes6jo4jf/bafkreie4oxawqqsfzvk47ysr3unsnmviedzpylxmwxnpa534to2bzas4ie",
    "banner_url": null,
    "bio": "Serving sports fans. Anytime. Anywhere.",
    "category": null,
    "country_code": null,
    "created_at": "2024-11-25T21:49:49Z",
    "display_name": "ESPN",
    "external_links": [],
    "id": "did:plc:x7d6j54pm22ufehkes6jo4jf",
    "is_private": false,
    "is_verified": true,
    "location": null,
    "metrics": {
      "follower_count": 305103,
      "following_count": 32,
      "post_count": 872,
      "total_like_count": null,
      "total_view_count": null
    },
    "platform": "bluesky",
    "platform_specific": {
      "bluesky": {
        "feed_count": 0,
        "indexed_at": "2024-12-19T20:49:48Z",
        "is_labeler": false,
        "is_trusted_verifier": false,
        "labels": [],
        "list_count": 0,
        "pinned_post_id": null,
        "pronouns": null,
        "starter_pack_count": 0,
        "verified_by": [
          {
            "created_at": "2025-04-21T10:44:20Z",
            "id": "at://did:plc:z72i7hdynmk6r22z27h6tvur/app.bsky.graph.verification/3lndppjqgb72f",
            "is_valid": true,
            "issuer": {
              "avatar_url": null,
              "display_name": "Bluesky",
              "id": "did:plc:z72i7hdynmk6r22z27h6tvur",
              "is_verified": null,
              "url": "https://bsky.app/profile/bsky.app",
              "username": "bsky.app"
            }
          }
        ]
      }
    },
    "type": "unknown",
    "unknown_fields": [],
    "url": "https://bsky.app/profile/espn.com",
    "username": "espn.com"
  },
  "meta": {
    "request_id": "req_3f9c2a7d1e8b4c6a9f0e2d4b6a8c0e1f",
    "platform": "bluesky",
    "source": "api",
    "is_cached": false,
    "credits_charged": 1,
    "latency_ms": 196,
    "fetched_at": "2026-10-25T12:00:00Z",
    "input": {
      "kind": "profile",
      "id": "did:plc:x7d6j54pm22ufehkes6jo4jf",
      "url": "https://bsky.app/profile/espn.com"
    },
    "credits_remaining": 9999,
    "client_request_id": null,
    "warnings": []
  }
}
```

> [!NOTE]
>
> **Good to know**
>
> - id is the account's DID, its one stable reference: a handle can change, and handle takes the DID back. username is null when the handle no longer proves itself (Bluesky shows handle.invalid), and url then names the DID.
> - An account that chose to be seen only by signed-in people returns private_or_unavailable, as the app answers a logged-out visitor. A suspended or deactivated account returns not_found, and the message says which.
> - type is unknown because Bluesky doesn't say whether an account is a person or an organization. is_labeler and the bot label say what they can of a service.
> - If Bluesky's API refuses, the account is read from its public page. The counts stay exact, is_verified and the Bluesky-specific fields are null, external_links holds only the links in the bio, and a partial_data warning says so.

## Authorizations

`x-api-key`stringheaderrequired

Your API key. [Authentication](https://socialtap.dev/docs/authentication/index.md)

## Query parameters

| Name | Type | Description | Example |
| --- | --- | --- | --- |
| `handle` required | `string`<br>max 2,048 chars | The Bluesky account: its handle, a domain name (espn.com, alice.bsky.social), with or without the @; its DID (did:plc:z72i7hdynmk6r22z27h6tvur or did:web:…), which is the id every answer gives and survives a change of handle; or its link (https://bsky.app/profile/bsky.app), by handle or DID, with any tab under it. A word without a dot is no handle: Bluesky's own are written in full, as alice.bsky.social. | `bsky.app` |

`handle` takes Bluesky profile links; another kind of link, or another platform's, fails free with [`invalid_input`](https://socialtap.dev/docs/errors/index.md#invalid_input). Unknown parameters are rejected with a suggestion, never ignored ([Requests](https://socialtap.dev/docs/requests/index.md)).

**Parameters every endpoint accepts**

| Name | Type | Description | Example |
| --- | --- | --- | --- |
| `max_age` optional | `integer`<br>min 0 | Accept a cached response up to this many seconds old. Cache hits cost 0 credits. Omit to always fetch fresh. The Cache-Control: max-age=N request header is equivalent; max_age wins when both are sent. | — |
| `fields` optional | `string` | Return only these fields of each item: comma-separated paths in the schema's notation (id,text,metrics.view_count,segments\[\].text; a parent path keeps the whole object). Unknown paths are rejected. Applied after the cache, so it changes neither the price nor cache hits; page and meta are always returned whole. | — |

## Response

### 200

`{data, meta}`. `data` is a [profile](https://socialtap.dev/resources/profile/index.md) object; `meta` describes the request ([meta](https://socialtap.dev/docs/reference/index.md#meta)). Fields only Bluesky has are under `platform_specific.bluesky`.

| Field | Type | Description |
| --- | --- | --- |
| `data.platform` | `string` | Platform ID (tiktok, youtube, …). |
| `data.id` | `string` | Platform-native account ID (string; YouTube UC…, Reddit t2_…). |
| `data.username` | `string` or `null` | Handle without the @; null when the account has none. |
| `data.display_name` | `string` or `null` | Display name, channel title or page name; null when empty or not exposed. |
| `data.url` | `string` (uri) | Canonical profile URL. |
| `data.type` | `string` | Coarse account kind, as the platform labels it; unknown when it does not (TikTok labels organizations only). New values may be added; treat unknown values as unknown.<br>One of `person`, `organization`, `community`, `unknown` |
| `data.bio` | `string` or `null` | Profile bio, channel description or page about text; null when empty or not exposed. |
| `data.avatar_url` | `string` (uri) or `null` | Profile picture URL (largest available). Platform CDN URLs can expire within hours. |
| `data.banner_url` | `string` (uri) or `null` | Header or cover image URL. |
| `data.is_verified` | `boolean` or `null` | Platform verification badge; null where the platform has no badge. |
| `data.is_private` | `boolean` or `null` | True when the account's posts are not public. |
| `data.category` | `string` or `null` | Platform category label (e.g. Musician, Media & Entertainment), as shown; not normalized. Often set only for business or creator accounts. |
| `data.external_links` | `object[]` | Links in the bio or channel links; \[\] if none or not exposed. |
| `data.external_links[].url` | `string` (uri) | Link target, absolute (https:// is added where the platform stores the link without a scheme). |
| `data.external_links[].title` | `string` or `null` | Link label shown by the platform. |
| `data.location` | `string` or `null` | Self-declared location text. |
| `data.country_code` | `string` or `null` | ISO 3166-1 alpha-2 country the platform states for the account. |
| `data.created_at` | `string` (date-time) or `null` | Account creation or join date, RFC 3339 UTC (some platforms give only the day: see approximate_fields). |
| `data.metrics` | `object` | Counts at fetch time; null = hidden or not exposed, 0 = zero. |
| `data.metrics.follower_count` | `integer` or `null` | Followers or subscribers. |
| `data.metrics.following_count` | `integer` or `null` | Accounts this profile follows. |
| `data.metrics.post_count` | `integer` or `null` | Posts or videos as the platform counts them on the profile (for a private account, posts the caller cannot see). |
| `data.metrics.total_like_count` | `integer` or `null` | Likes received across all of the profile's posts (not likes given). |
| `data.metrics.total_view_count` | `integer` or `null` | Lifetime views across all of the profile's posts. |
| `data.platform_specific` | `object` | Fields only this platform has, under its ID (platform_specific.\<platform>); each null when unknown. |
| `data.platform_specific.bluesky` | `object` or `null` | A Bluesky account's own fields. |
| `data.platform_specific.bluesky.indexed_at` | `string` (date-time) or `null` | When Bluesky's AppView last indexed the account's profile, RFC 3339 UTC; null when the public page answered instead of the AppView. |
| `data.platform_specific.bluesky.pronouns` | `string` or `null` | The pronouns the account wrote on its profile; null when it wrote none, or when the public page answered instead of the AppView. |
| `data.platform_specific.bluesky.is_trusted_verifier` | `boolean` or `null` | True when Bluesky trusts this account to verify others; is_verified is then true too. Null when the public page answered instead of the AppView. |
| `data.platform_specific.bluesky.verified_by` | `object[]` | Who verified this account, each with when; \[\] when nobody did (listed in unknown_fields when the source cannot see them). |
| `data.platform_specific.bluesky.verified_by[].id` | `string` or `null` | The at:// URI of the verification record. |
| `data.platform_specific.bluesky.verified_by[].issuer` | `object` | The account that verified this one. is_verified and avatar_url are null: Bluesky names the verifier without them. |
| `data.platform_specific.bluesky.verified_by[].issuer.id` | `string` or `null` | Platform-native account ID; null when only the handle is known. |
| `data.platform_specific.bluesky.verified_by[].issuer.username` | `string` or `null` | Handle without the @; null when the account has none. |
| `data.platform_specific.bluesky.verified_by[].issuer.display_name` | `string` or `null` | Display name shown on the profile. |
| `data.platform_specific.bluesky.verified_by[].issuer.url` | `string` (uri) or `null` | Canonical profile URL. |
| `data.platform_specific.bluesky.verified_by[].issuer.avatar_url` | `string` (uri) or `null` | Profile picture URL. Platform CDN URLs can expire within hours. |
| `data.platform_specific.bluesky.verified_by[].issuer.is_verified` | `boolean` or `null` | Platform verification badge; null where the platform has no badge. |
| `data.platform_specific.bluesky.verified_by[].is_valid` | `boolean` or `null` | Whether Bluesky still honors the verification. |
| `data.platform_specific.bluesky.verified_by[].created_at` | `string` (date-time) or `null` | When the verifier made it, RFC 3339 UTC. |
| `data.platform_specific.bluesky.pinned_post_id` | `string` or `null` | The at:// ID of the post the account pinned, which bluesky.post takes as url; null when it pinned none, or when the public page answered instead of the AppView. |
| `data.platform_specific.bluesky.labels` | `string[]` | Moderation and self labels on the account (bot, porn, spam, …), as Bluesky names them; \[\] when none (listed in unknown_fields when the source cannot see them). |
| `data.platform_specific.bluesky.list_count` | `integer` or `null` | How many lists the account made; null when the public page answered instead of the AppView. |
| `data.platform_specific.bluesky.feed_count` | `integer` or `null` | How many custom feeds the account made; null when the public page answered instead of the AppView. |
| `data.platform_specific.bluesky.starter_pack_count` | `integer` or `null` | How many starter packs the account made; null when the public page answered instead of the AppView. |
| `data.platform_specific.bluesky.is_labeler` | `boolean` or `null` | True when the account runs a moderation service that labels other accounts and posts. Null when the public page answered instead of the AppView. |
| `data.approximate_fields` | `string[]` | JSON paths of values rounded by the platform or parsed from display text (e.g. metrics.follower_count). A list path (external_links) means the list may be incomplete. \[\] when all exact. |
| `data.unknown_fields` | `string[]` | JSON paths of lists whose \[\] means unknown rather than none (a source that cannot see them); null already means unknown for every other field. \[\] when every list is known. |

not_found and private_or_unavailable are item-level: the request was fine, the item can't be returned.

### 400

400 Bad Request: 1 error code. Free: errors cost nothing.

| Code | HTTP | Retry | Meaning | What to do |
| --- | --- | --- | --- | --- |
| `invalid_input` | 400 | No | A parameter is missing or malformed, or the link is not one this endpoint takes. | Fix the parameter named in param as the message says. For a link of the wrong kind, call an endpoint listed in details.endpoints, when there is one. |

### 401

401 Unauthorized: 1 error code. Free: errors cost nothing.

| Code | HTTP | Retry | Meaning | What to do |
| --- | --- | --- | --- | --- |
| `unauthorized` | 401 | No | The x-api-key header is missing, or its key is unknown or revoked. On the dashboard's routes: the session cookie is missing or expired. | Send a valid API key in the x-api-key header. No key yet? A person gets one at details.signup_url; an AI agent follows details.agent_auth_url. |

### 402

402 Payment Required: 2 error codes. Free: errors cost nothing.

| Code | HTTP | Retry | Meaning | What to do |
| --- | --- | --- | --- | --- |
| `insufficient_credits` | 402 | No | The account does not have enough credits for this request. | Have a person buy credits at details.purchase_url (or make them a checkout link with details.checkout), then repeat the request. Do not retry automatically. |
| `spend_limit_reached` | 402 | No | The API key reached its spend limit for this period. The account may still have credits. | Wait until details.resets_at, or raise the key's spend limit (PATCH /v1/api_keys/{id}). Do not retry automatically. |

### 403

403 Forbidden: 2 error codes. Free: errors cost nothing.

| Code | HTTP | Retry | Meaning | What to do |
| --- | --- | --- | --- | --- |
| `forbidden` | 403 | No | The API key is valid but may not make this request, and details.reason says why: the account is suspended, the key lacks the route's scope, waits for its owner to confirm it by email, has expired, or was used from an IP outside its allowlist, or a rotated key's previous secret was used for a call that needs the admin scope. A running job stops with it too when its account is suspended or the key that created it is revoked or expires. It is about the key, never the item: a private item is private_or_unavailable, also 403, so branch on the code. | Act on details.reason. suspended: contact [support](mailto:support@socialtap.dev). scope: use a key with details.required_scope. previous_secret: use the new secret. key_pending: have the owner open the emailed link. key_expired or key_revoked: create a new key. ip_not_allowed: call from an allowed IP. |
| `private_or_unavailable` | 403 | No | The item exists but is not public: it is private, age- or region-restricted, or needs a login to view. It shares 403 with forbidden (which is about the key), so branch on the code. | Only public items can be fetched. Do not retry. |

### 404

404 Not Found: 1 error code. Free: errors cost nothing.

| Code | HTTP | Retry | Meaning | What to do |
| --- | --- | --- | --- | --- |
| `not_found` | 404 | No | The item does not exist or was deleted. On GET /v1/requests/{id}/response: the response was not kept (details.reason says why). | Check the link or ID. Do not retry. |

### 429

429 Too Many Requests: 1 error code. Free: errors cost nothing.

| Code | HTTP | Retry | Meaning | What to do |
| --- | --- | --- | --- | --- |
| `rate_limited` | 429 | Yes, later | The account passed its runaway-protection ceiling: a high per-account limit that stops a broken client loop (plans have no rate limit). Requests without an API key (signup, the MCP server's tool listing and find_endpoint) are limited per IP address instead. It also stops an account whose failed requests in the last hour cost far more than its successful ones paid for: failures are free within a limit (the message says so), and successes raise it. | Wait the seconds in the retry-after header, then retry. If your steady traffic needs more, ask [support](mailto:support@socialtap.dev) to raise the ceiling; without an API key, send one. |

### 500

500 Internal Error: 1 error code. Free: errors cost nothing.

| Code | HTTP | Retry | Meaning | What to do |
| --- | --- | --- | --- | --- |
| `internal` | 500 | Yes, later | An unexpected error on SocialTap's side. | Retry with backoff. If it keeps happening, contact [support](mailto:support@socialtap.dev) with the request_id. |

### 502

502 Bad Gateway: 1 error code. Free: errors cost nothing.

| Code | HTTP | Retry | Meaning | What to do |
| --- | --- | --- | --- | --- |
| `upstream_error` | 502 | Yes, later | The platform failed, or answered with something we could not read. | Retry with backoff. Failed requests are free. |

### 503

503 Unavailable: 2 error codes. Free: errors cost nothing.

| Code | HTTP | Retry | Meaning | What to do |
| --- | --- | --- | --- | --- |
| `upstream_blocked` | 503 | Yes, later | The platform refused every attempt, our own retries included. | Retry later with backoff. Failed requests are free. |
| `overloaded` | 503 | Yes, later | SocialTap was at capacity, or paused by its operators, and did not start the request. Nothing was fetched or charged. | Retry after the seconds in the retry-after header. Failed requests are free. |

## Pricing

From **1 credit** per request. Charged only for successful requests. Errors are free. The price depends on the source that produced the result, reported as `meta.source`; sources are tried cheapest first: Platform API → Public page.

| Source | Price per successful request | Per 1,000 requests |
| --- | --- | --- |
| Platform API `api` | 1 credit | $0.75–$1.97 |
| Public page `page` | 1 credit | $0.75–$1.97 |

**Balance, sources and what you were charged**

Your balance must be at least **1 credit** to start a request; with less, it is refused with [`insufficient_credits`](https://socialtap.dev/docs/errors/index.md#insufficient_credits) (HTTP 402) and costs nothing. Only that minimum is set aside when the request starts.

| meta.source | Source | What it means |
| --- | --- | --- |
| `api` | Platform API | The platform's public, logged-out API. |
| `page` | Public page | Data embedded in the platform's public web page. |

`meta.credits_charged` and the `x-credits-charged` header show what you paid. [How credits work](https://socialtap.dev/docs/credits/index.md) · [Packs](https://socialtap.dev/pricing/index.md)

Endpoint ID `bluesky.profile` · operationId `bluesky.profile.get` · [Product overview](https://socialtap.dev/apis/bluesky/profile/index.md)

---

[HTML version](https://socialtap.dev/docs/reference/bluesky/profile/) · [Docs index for AI agents](https://socialtap.dev/llms.txt) · [All docs in one file](https://socialtap.dev/llms-full.txt)