Reference

Tickets reference.

Generated XRPC reference, field-level schemas, payload schemas, lexicons, errors, security, public review, and glossary.

Read as Markdown · Agent build guide

Developer beta SDK beta 0.0.0-beta.5 30 ticket lexicons Multi-app shared config roadmap

Quickstart Read ATM docs

Overview Build Callbacks Reference Operations

Lexicons

The 30 copied schemas come from ATM's canonical generated output. Public records describe safe catalog metadata; private service contracts describe authorized operations. This is separate from authoritative namespace publication and deployed release readiness.

ticketType	Public event/type metadata and optional Product/default Price refs. Paid service configuration requires a matching active organizer-owned ticket Product; free/RSVP types may omit it.
ticketedEvent	Public event anchor and optional display-ordered ticketTypes refs. Live availability, codes and eligibility stay private.
checkInList	Public label only; scanner permissions, logs and pass secrets stay private.
Capacity	Private type pools plus optional shared event cap through `setEventCapacity`; no public capacity-pool record.
Public discovery	Unauthenticated `listPublicConfig` on ATM AppView requires `organizer` and optional same-organizer `eventUri`. It is not live inventory.

Generated XRPC reference

This table is generated from lexicons/tickets/atmosphere so it stays aligned with the contract set used by the ATM runtime. The JSON lexicons remain the source of truth; this reference is the human-readable index.

Method or record	Kind	Auth	Purpose	Links
tickets.atmosphere.acceptCollaboration	procedure	app service-auth + required co-organizer assertion	Accept a pending co-organizer invitation (dual-consent: app service-auth plus the co-organizer's own assertion).	Raw Fields Examples Errors
tickets.atmosphere.archiveTicketType	procedure	app service-auth + primary-organizer authority	Archive an organizer-owned ATM ticket type.	Raw Fields Examples Errors
tickets.atmosphere.cancelTicketEvent	procedure	app service-auth + primary-organizer authority	Irreversibly cancel an ATM ticketed event.	Raw Fields Examples Errors
tickets.atmosphere.checkInList	record	organizer repo write	Public check-in list label for an event.	Raw Fields Examples Errors
tickets.atmosphere.checkInTicket	procedure	app service-auth	Verify and check in a private ATM Tickets scan token.	Raw Fields Examples Errors
tickets.atmosphere.claimFreeTicket	procedure	app service-auth + required buyer assertion	Atomically claim zero-price scarce tickets for a verified buyer without checkout redirect.	Raw Fields Examples Errors
tickets.atmosphere.claimWaitlistOffer	procedure	app service-auth + buyer assertion when buyerDid is supplied	Claim a ticket waitlist OFFER by starting checkout against its already-reserved offer hold.	Raw Fields Examples Errors
tickets.atmosphere.createTicketEvent	procedure	app service-auth + organizer assertion unless app is organizer	Create or upsert an organizer-owned ATM ticketed-event config shell for a public event.	Raw Fields Examples Errors
tickets.atmosphere.createTicketHold	procedure	app service-auth + buyer assertion when buyerDid is supplied	Atomically reserve ticket capacity and return an ATM checkout URL.	Raw Fields Examples Errors
tickets.atmosphere.createTicketType	procedure	app service-auth + organizer assertion unless app is organizer	Create an organizer-owned ATM ticket type and optional public ticket-type record refs for an event.	Raw Fields Examples Errors
tickets.atmosphere.defs	defs	shared definitions	No description in lexicon yet.	Raw Fields Examples Errors
tickets.atmosphere.getTicketAvailability	query	app service-auth	Read app-scoped ticket availability derived from private ATM holds and issued tickets.	Raw Fields Examples Errors
tickets.atmosphere.inviteOrganizerCollaboration	procedure	app service-auth + primary-organizer authority	Invite a co-organizer to operationally co-run a ticketed event (Part A: operational delegation only).	Raw Fields Examples Errors
tickets.atmosphere.joinWaitlist	procedure	app service-auth + buyer assertion when buyerDid is supplied	Join the FIFO waitlist for a sold-out ticket type.	Raw Fields Examples Errors
tickets.atmosphere.listBuyerTickets	query	app service-auth	List app-scoped issued tickets for a buyer or payment.	Raw Fields Examples Errors
tickets.atmosphere.listCollaborations	procedure	app service-auth + event control or co-organizer assertion	List organizer collaborations for an event (authorized via event control) or the calling co-organizer's own collaboration rows.	Raw Fields Examples Errors
tickets.atmosphere.listEventWaitlist	procedure	app service-auth + current event-control authority	List an organizer's event waitlist: a per-ticket-type rollup plus the paginated FIFO queue, each entry with its position and current offer status.	Raw Fields Examples Errors
tickets.atmosphere.listOrganizerTickets	query	app service-auth	List app-scoped issued tickets for an organizer or event.	Raw Fields Examples Errors
tickets.atmosphere.listPublicConfig	query	public AppView read	List indexed public tickets.atmosphere ticket config records.	Raw Fields Examples Errors
tickets.atmosphere.listTicketFormResponses	procedure	app service-auth + current event-control authority	List the full private attendee form responses for an organizer's own event.	Raw Fields Examples Errors
tickets.atmosphere.releaseFreeTicket	procedure	app service-auth + required buyer assertion	Release a buyer's free-claim tickets back to capacity — the inverse of claimFreeTicket for un-RSVP flows.	Raw Fields Examples Errors
tickets.atmosphere.releaseTicketHold	procedure	app service-auth	Release an active ticket hold before checkout completes.	Raw Fields Examples Errors
tickets.atmosphere.revokeCollaboration	procedure	app service-auth + primary-organizer authority (co-organizer may self-revoke)	Revoke a co-organizer collaboration.	Raw Fields Examples Errors
tickets.atmosphere.setEventCapacity	procedure	app service-auth + primary-organizer authority	Set, change, or clear the shared EVENT capacity — one pool every ticket type of the event draws from, in addition to any per-type caps.	Raw Fields Examples Errors
tickets.atmosphere.setTicketTypeForm	procedure	app service-auth + current event-control authority	Set (or clear) the private per-ticket-type attendee form for a ticketed event.	Raw Fields Examples Errors
tickets.atmosphere.ticketedEvent	record	organizer repo write	Organizer-published ticketing anchor for an event: marks the event as ticketed and optionally discloses its ticket types in display order.	Raw Fields Examples Errors
tickets.atmosphere.ticketType	record	organizer repo write	Organizer-owned portable ticket type metadata for an AT Protocol event.	Raw Fields Examples Errors
tickets.atmosphere.updateTicketEvent	procedure	app service-auth + current event-control authority	Update an app-scoped ATM ticketed-event config shell for a public event.	Raw Fields Examples Errors
tickets.atmosphere.updateTicketType	procedure	app service-auth + current event-control authority	Update organizer-owned ATM ticket type metadata.	Raw Fields Examples Errors
tickets.atmosphere.verifyTicket	procedure	app service-auth	Verify a private ATM Tickets scan token without mutating check-in state.	Raw Fields Examples Errors

Generated field reference

This section is regenerated from lexicons/tickets/atmosphere. It expands the contract index into field-level schema tables with location, type, required/nullable status, limits, and descriptions.

tickets.atmosphere.acceptCollaboration5 fields

Location	Field	Type	Required	Nullable	Limits	Description
input	environment	string<test \| live>	no	no	maxLength:16	No description in lexicon yet.
input	collaborationId	string	yes	no	minLength:1, maxLength:300	No description in lexicon yet.
input	coOrganizerDid	string	yes	no	format:did	The accepting co-organizer. Must match the invitation's named coOrganizerDid.
input	coOrganizerAssertionJwt	string	yes	no	maxLength:8192	REQUIRED short-lived user service-auth JWT issued BY coOrganizerDid to ATM, scoped to tickets.atmosphere.acceptCollaboration. This is the co-organizer's consent: ATM verifies iss === coOrganizerDid and the route-scoped lxm before flipping the row to accepted.
output	collaboration	ref:tickets.atmosphere.defs#organizerCollaboration	yes	no	none	No description in lexicon yet.

Declared errors: AppNotRegistered — Caller DID is not registered as an ATM app.; TicketsModuleDisabled — This app has not enabled ATM Tickets.; CollaborationNotFound — Collaboration invitation not found.; CollaborationConsentRequired — A valid co-organizer assertion (coOrganizerAssertionJwt) issued by coOrganizerDid is required to accept this invitation.; CollaborationNotAcceptable — This collaboration is not in a pending state, or coOrganizerDid does not match the named invitee.; UserDidMismatch — coOrganizerAssertionJwt issuer does not match coOrganizerDid.

tickets.atmosphere.archiveTicketType7 fields

Location	Field	Type	Required	Nullable	Limits	Description
input	environment	string<test \| live>	no	no	maxLength:16	No description in lexicon yet.
input	ticketTypeId	string	yes	no	minLength:1, maxLength:300	No description in lexicon yet.
input	organizerDid	string	no	no	format:did	The current primary organizer authorizing this mutation. Omit only when the calling app is itself the event's primary organizer.
input	organizerAssertionJwt	string	no	no	maxLength:8192	Optional only for an app archiving its own event's ticket type. Otherwise, a short-lived user service-auth JWT from organizerDid to ATM scoped to tickets.atmosphere.archiveTicketType.
output	ticketType	ref:#ticketType	yes	no	none	No description in lexicon yet.
def:ticketType	id	string	yes	no	maxLength:300	No description in lexicon yet.
def:ticketType	status	string<archived>	yes	no	maxLength:32	No description in lexicon yet.

Declared errors: AppNotRegistered — Caller DID is not registered as an ATM app.; TicketsModuleDisabled — This app has not enabled ATM Tickets.; TicketTypeNotFound — Ticket type not found.; EventControlRequired — A verified current event-controller authorization is required for this event.; PrimaryOrganizerRequired — Only the current primary organizer can archive a ticket type.; UserDidMismatch — organizerAssertionJwt issuer does not match organizerDid.

tickets.atmosphere.cancelTicketEvent13 fields

Location	Field	Type	Required	Nullable	Limits	Description
input	environment	string<test \| live>	no	no	maxLength:16	No description in lexicon yet.
input	eventId	string	yes	no	minLength:1, maxLength:300	No description in lexicon yet.
input	organizerDid	string	no	no	format:did	The current primary organizer authorizing cancellation. Omit only when the calling app is itself the event's primary organizer.
input	organizerAssertionJwt	string	no	no	maxLength:8192	Optional only for an app canceling its own event. Otherwise, a short-lived user service-auth JWT from organizerDid to ATM scoped to tickets.atmosphere.cancelTicketEvent.
input	reason	string	yes	no	minLength:3, maxLength:10000, maxGraphemes:1000	No description in lexicon yet.
output	cancellation	ref:#cancellation	yes	no	none	No description in lexicon yet.
def:cancellation	id	string	yes	no	maxLength:300	No description in lexicon yet.
def:cancellation	eventId	string	yes	no	maxLength:300	No description in lexicon yet.
def:cancellation	status	string<requested \| already-canceled>	yes	no	maxLength:32	No description in lexicon yet.
def:cancellation	ticketCount	integer	yes	no	minimum:0	No description in lexicon yet.
def:cancellation	paidTicketCount	integer	yes	no	minimum:0	No description in lexicon yet.
def:cancellation	freeTicketCount	integer	yes	no	minimum:0	No description in lexicon yet.
def:cancellation	releasedHoldCount	integer	yes	no	minimum:0	No description in lexicon yet.

Declared errors: AppNotRegistered — Caller DID is not registered as an ATM app.; TicketsModuleDisabled — This app has not enabled ATM Tickets.; TicketEventNotFound — Ticketed event config not found.; EventControlRequired — A verified current primary-organizer authorization is required for this event.; UserDidMismatch — organizerAssertionJwt issuer does not match organizerDid.; InvalidCancellationReason — Cancellation reason must be between 3 and 1000 characters.

tickets.atmosphere.checkInList5 fields

Location	Field	Type	Required	Nullable	Limits	Description
record	event	ref:com.atproto.repo.strongRef	yes	no	none	CID-pinned strongRef to the canonical public community.lexicon.calendar.event record.
record	name	string	yes	no	minLength:1, maxLength:1000, maxGraphemes:100	No description in lexicon yet.
record	archived	boolean	no	no	none	True when this check-in list is archived. Omitted or false means it is not archived.
record	createdAt	string	yes	no	format:datetime	No description in lexicon yet.
record	updatedAt	string	no	no	format:datetime	No description in lexicon yet.

tickets.atmosphere.checkInTicket8 fields

Location	Field	Type	Required	Nullable	Limits	Description
input	environment	string<test \| live>	no	no	maxLength:16	No description in lexicon yet.
input	ticketToken	string	yes	no	minLength:1, maxLength:4000	No description in lexicon yet.
input	checkInListId	string	no	no	minLength:1, maxLength:300	No description in lexicon yet.
input	scannerDid	string	no	no	format:did	App-asserted staff DID recorded in the private check-in audit log. ATM does not independently verify this DID; the calling app is responsible for its scanner authentication.
input	metadata	unknown	no	no	none	No description in lexicon yet.
output	status	string<checked-in \| already-checked-in \| not-valid>	yes	no	maxLength:32	No description in lexicon yet.
output	checkedInAt	string	no	no	format:datetime	No description in lexicon yet.
output	ticket	ref:tickets.atmosphere.defs#issuedTicket	no	no	none	No description in lexicon yet.

Declared errors: AppNotRegistered — Caller DID is not registered as an ATM app.; TicketsModuleDisabled — This app has not enabled ATM Tickets.; TicketNotFound — Ticket not found or verification failed.; CheckInListNotFound — checkInListId does not exist for this event.; CheckInListMismatch — The ticket belongs to a different check-in list.; InvalidCheckInList — checkInListId is not usable for this ticket's event.

tickets.atmosphere.claimFreeTicket18 fields

Location	Field	Type	Required	Nullable	Limits	Description
input	environment	string<test \| live>	no	no	maxLength:16	No description in lexicon yet.
input	eventId	string	no	no	minLength:1, maxLength:300	No description in lexicon yet.
input	eventUri	string	no	no	format:at-uri	No description in lexicon yet.
input	buyerDid	string	yes	no	format:did	No description in lexicon yet.
input	buyerAssertionJwt	string	yes	no	maxLength:8192	Required short-lived user service-auth JWT from buyerDid to ATM, scoped to tickets.atmosphere.claimFreeTicket.
input	customerEmail	string	no	no	maxLength:320	Required delivery address for every new free-ticket claim. It remains wire-optional only so an exact idempotent replay of a legacy completed claim that had no email can still return that immutable result; omitting it for any fresh claim fails with CustomerEmailRequired. ATM normalizes and stores it privately and never writes it to protocol records.
input	customerName	string	no	no	minLength:1, maxLength:300	Private attendee display name supplied by the buyer/app. Stored on the claim and issued tickets; never written to protocol records.
input	eventCode	string	no	no	minLength:3, maxLength:64	Preferred buyer-entered event code. ATM applies its hidden-ticket unlock effect when required by the claim.
input	items	array<ref:tickets.atmosphere.defs#ticketHoldItemRequest>	yes	no	minLength:1, maxLength:20	No description in lexicon yet.
input	accessCode	string	no	no	minLength:3, maxLength:64	Legacy visibility-only input. New storefronts should use eventCode. Required when a requested hidden type is not unlocked by eventCode.
input	idempotencyKey	string	no	no	minLength:1, maxLength:200	No description in lexicon yet.
input	metadata	unknown	no	no	none	No description in lexicon yet.
output	claimId	string	yes	no	maxLength:300	No description in lexicon yet.
output	holdId	string	yes	no	maxLength:300	No description in lexicon yet.
output	environment	string<test \| live>	yes	no	maxLength:16	No description in lexicon yet.
output	items	array<ref:tickets.atmosphere.defs#ticketHoldItem>	yes	no	minLength:1, maxLength:20	No description in lexicon yet.
output	tickets	array<ref:tickets.atmosphere.defs#issuedTicketWithContext>	yes	no	minLength:1, maxLength:1000	No description in lexicon yet.
output	reused	boolean	no	no	none	No description in lexicon yet.

Declared errors: AppNotRegistered — Caller DID is not registered as an ATM app.; TicketsModuleDisabled — This app has not enabled ATM Tickets.; UnsupportedHistoricalCurrency — Stored ticket data uses a historical currency that the current ISO 4217 wire contract cannot represent.; UserAssertionRequired — A verified buyer assertion (buyerAssertionJwt) is required to claim free tickets.; AuthVerificationFailed — The service-auth token could not be verified.; UserDidMismatch — buyerAssertionJwt issuer does not match buyerDid.; InvalidItems — At least one ticket type is required.; InvalidQuantity — Ticket quantity must be at least 1.; InvalidCustomerEmail — customerEmail is present but is not a valid delivery address.; CustomerEmailRequired — Every fresh free-ticket claim requires a delivery email; omission is accepted only for an exact replay of a legacy completed no-email claim.; IdempotencyConflict — This idempotency key was already used for a different buyer.; FreeClaimBindingMismatch — This idempotency key is already bound to a claim with different ticket types, quantities, attendee name, or delivery email.; IdempotencyKeyInFlight — A claim for this idempotency key is already being processed; retry to resume it.; TicketTypeNotFound — One or more ticket types were not found.; MixedEvents — A ticket claim can only contain ticket types from one event.; MixedCurrency — A ticket claim can only use one currency.; TicketsUnavailable — The ticket type is not currently available.; PaidTicketRequiresCheckout — Paid ticket types must use tickets.atmosphere.createTicketHold.; QuantityTooHigh — Requested quantity exceeds the per-claim maximum.; InsufficientTicketCapacity — Not enough capacity remains for the claim.; TicketClaimMissing — Claimed tickets could not be loaded after issuance.; ClaimLimitReached — This buyer already claimed the per-buyer maximum for a ticket type.; InvalidEventCode — The event code is invalid, unavailable, expired, or exhausted.; EventCodeConflict — eventCode was combined with a different legacy accessCode.; AccessCodeRequired — One or more requested ticket types are hidden and require an access code.; InvalidAccessCode — The access code is invalid, paused, expired, exhausted, or does not unlock every hidden ticket type in the request.; TicketsBusy — The inventory row is contended; retry shortly.

tickets.atmosphere.claimWaitlistOffer17 fields

Location	Field	Type	Required	Nullable	Limits	Description
input	environment	string<test \| live>	no	no	maxLength:16	No description in lexicon yet.
input	waitlistId	string	yes	no	minLength:1, maxLength:300	No description in lexicon yet.
input	buyerDid	string	no	no	format:did	No description in lexicon yet.
input	buyerAssertionJwt	string	no	no	maxLength:8192	Required whenever buyerDid is supplied: a short-lived user service-auth JWT from buyerDid to ATM, scoped to tickets.atmosphere.claimWaitlistOffer. Omit both buyer fields for a guest email claim.
input	customerEmail	string	no	no	maxLength:320	Private delivery/receipt hint. Stored privately by ATM; never written to protocol records.
input	customerName	string	no	no	minLength:1, maxLength:300	Private attendee name for the issued ticket. Stored privately by ATM; never written to protocol records.
input	returnUrl	string	no	no	format:uri	No description in lexicon yet.
input	cancelUrl	string	no	no	format:uri	No description in lexicon yet.
output	waitlistId	string	yes	no	maxLength:300	No description in lexicon yet.
output	holdId	string	yes	no	maxLength:300	No description in lexicon yet.
output	statusToken	string	yes	no	maxLength:500	Stable app-only capability for polling payment status. Persist it before redirecting; never place it in a browser URL.
output	token	string	yes	no	maxLength:500	Rotatable browser checkout bearer. Prefer url for navigation; never persist this as the payment-status capability.
output	url	string	yes	no	format:uri	ATM browser checkout URL. Its embedded bearer may be retired when the payer changes accounts.
output	environment	string<test \| live>	no	no	maxLength:16	No description in lexicon yet.
output	expiresAt	string	yes	no	format:datetime	No description in lexicon yet.
output	amount	integer	yes	no	minimum:0	No description in lexicon yet.
output	currency	string	yes	no	minLength:3, maxLength:3	Lowercase ISO 4217 alphabetic code matching money.atmosphere.price. Chargeability is enforced separately by the configured processor allowlist. Asset-denominated value uses the money.atmosphere.payment.defs value union, never this field.

Declared errors: AppNotRegistered — Caller DID is not registered as an ATM app.; TicketsModuleDisabled — This app has not enabled ATM Tickets.; UserAssertionRequired — A verified buyer assertion is required whenever buyerDid is supplied.; AuthVerificationFailed — The buyer assertion could not be verified.; InvalidRequest — buyerDid and buyerAssertionJwt must be supplied together, or both omitted for a guest.; UnsupportedHistoricalCurrency — Stored ticket data uses a historical currency that the current ISO 4217 wire contract cannot represent.; WaitlistEntryNotFound — Waitlist entry not found.; WaitlistOfferNotClaimable — This waitlist entry has no active offer to claim.; WaitlistOfferExpired — This waitlist offer has expired.; WaitlistOfferAlreadyClaimed — This waitlist offer was already claimed.; WaitlistClaimIdentityMismatch — The claiming identity does not match the waitlist entry's buyer.; LiveModeNotEnabled — This app may not start live-environment checkouts yet.; TicketCurrencyUnsupportedForFee — This paid ticket currency is incompatible with the app's fixed ticket-fee denomination.; UserDidMismatch — buyerAssertionJwt issuer does not match buyerDid.

tickets.atmosphere.createTicketEvent8 fields

Location	Field	Type	Required	Nullable	Limits	Description
input	environment	string<test \| live>	no	no	maxLength:16	No description in lexicon yet.
input	organizerDid	string	yes	no	format:did	No description in lexicon yet.
input	organizerAssertionJwt	string	no	no	maxLength:8192	Optional short-lived user service-auth JWT from organizerDid to ATM, scoped to tickets.atmosphere.createTicketEvent. Proves the app is configuring ticketing with organizer consent.
input	event	ref:tickets.atmosphere.defs#eventInput	yes	no	none	No description in lexicon yet.
input	status	string<active \| paused \| archived>	no	no	maxLength:32	ATM ticket-sales lifecycle state. It does not control visibility of the public event record.
input	eventCapacity	integer	no	no	minimum:1, maximum:250000	Optional creation-time convenience for tickets.atmosphere.setEventCapacity: the shared capacity every ticket type of this event draws from. Omit for unlimited (the default).
input	metadata	unknown	no	no	none	No description in lexicon yet.
output	event	ref:tickets.atmosphere.defs#eventSummary	yes	no	none	No description in lexicon yet.

tickets.atmosphere.createTicketHold26 fields

Location	Field	Type	Required	Nullable	Limits	Description
input	environment	string<test \| live>	no	no	maxLength:16	No description in lexicon yet.
input	eventId	string	no	no	minLength:1, maxLength:300	No description in lexicon yet.
input	eventUri	string	no	no	format:at-uri	No description in lexicon yet.
input	buyerDid	string	no	no	format:did	Signed-in buyer DID. Must be accompanied by buyerAssertionJwt; omit both fields for guest checkout. ATM-hosted Tickets OAuth identity is resolved only from ATM's private server session and is never accepted through this field.
input	buyerAssertionJwt	string	no	no	maxLength:8192	Short-lived user service-auth JWT from buyerDid to ATM, scoped to lxm money.atmosphere.payment.assertPayer. Must be accompanied by buyerDid; omit both fields for guest checkout. ATM verifies it inside the private checkout envelope.
input	payerBinding	string<switchable \| fixed>	no	no	maxLength:32	Defaults to fixed when buyerDid and a matching verified buyerAssertionJwt are supplied; otherwise defaults to switchable. Explicit switchable permits changing accounts inside checkout and requires the app to reconcile CheckoutPayerChanged. Frozen with the hold; reusing an idempotency key cannot change it.
input	customerEmail	string	no	no	maxLength:320	Private delivery/receipt hint for ticket emails. Stored privately by ATM; never written to protocol records.
input	customerName	string	no	no	minLength:1, maxLength:300	Private attendee display name supplied by the buyer/app. Stored on the hold and issued tickets; never written to protocol records.
input	eventCode	string	no	no	minLength:3, maxLength:64	Preferred buyer-entered event code. ATM resolves and enforces any discount, hidden-ticket unlock, or combined effects while creating the hold.
input	offerCode	string	no	no	minLength:3, maxLength:64	Legacy discount-only input. New storefronts should use eventCode. ATM enforces eligibility, schedule, and usage limits while reserving the hold.
input	accessCode	string	no	no	minLength:3, maxLength:64	Legacy visibility-only input. New storefronts should use eventCode. Required when a requested hidden type is not unlocked by eventCode.
input	items	array<ref:tickets.atmosphere.defs#ticketHoldItemRequest>	yes	no	minLength:1, maxLength:20	No description in lexicon yet.
input	returnUrl	string	no	no	format:uri	No description in lexicon yet.
input	cancelUrl	string	no	no	format:uri	No description in lexicon yet.
input	idempotencyKey	string	no	no	minLength:1, maxLength:200	No description in lexicon yet.
input	metadata	unknown	no	no	none	No description in lexicon yet.
output	holdId	string	yes	no	maxLength:300	No description in lexicon yet.
output	statusToken	string	yes	no	maxLength:500	Stable app-only capability for polling payment status. Persist it before redirecting; never place it in a browser URL.
output	token	string	yes	no	maxLength:500	Rotatable browser checkout bearer. Prefer url for navigation; never persist this as the payment-status capability.
output	url	string	yes	no	format:uri	ATM browser checkout URL. Its embedded bearer may be retired when the payer changes accounts.
output	environment	string<test \| live>	no	no	maxLength:16	No description in lexicon yet.
output	expiresAt	string	yes	no	format:datetime	No description in lexicon yet.
output	amount	integer	yes	no	minimum:0	Final buyer checkout amount in minor units after any order-level offer and passed-through ATM ticket fee. This may differ from the sum of item price snapshots.
output	currency	string	yes	no	minLength:3, maxLength:3	Lowercase ISO 4217 alphabetic code matching money.atmosphere.price. Chargeability is enforced separately by the configured processor allowlist. Asset-denominated value uses the money.atmosphere.payment.defs value union, never this field.
output	items	array<ref:tickets.atmosphere.defs#ticketHoldItem>	yes	no	minLength:1, maxLength:20	No description in lexicon yet.
output	reused	boolean	no	no	none	No description in lexicon yet.

Declared errors: UnsupportedHistoricalCurrency — Stored ticket data uses a historical currency that the current ISO 4217 wire contract cannot represent.; InvalidBuyerIdentity — buyerDid and buyerAssertionJwt were not supplied together, fixed binding lacked authenticated buyer identity, or trusted and app-supplied buyer identity were combined.; InvalidPayerBinding — The reservation's frozen payer-binding policy is missing or inconsistent.; InvalidCustomerEmail — customerEmail is not a valid delivery email address.; AppNotRegistered — Caller DID is not registered as an ATM app.; TicketsModuleDisabled — This app has not enabled ATM Tickets.; OrganizerNotRegistered — Organizer has not signed in to ATM yet.; PaymentSetupIncomplete — Organizer has not finished ATM payment setup.; OrganizerConsentRequired — A verified organizer authorization (organizerAssertionJwt) is required to configure ticketing for this organizer.; OrganizerReassignmentNotAllowed — This event already belongs to a different organizer; a fresh organizer authorization is required to reassign it.; RecipientAppApprovalRequired — The organizer has not approved this app to originate ticket payments.; RecipientAppReapprovalRequired — The app's ticket checkout terms changed and require renewed organizer approval.; RecipientAppApprovalBlocked — The organizer has blocked or revoked this app's ticket-payment approval.; TicketProtocolRefsRequired — Every paid ticket type requires a portable ticket or catalog reference.; InvalidItems — At least one ticket type is required.; InvalidQuantity — Ticket quantity must be at least 1.; TicketTypeNotFound — One or more ticket types were not found.; MixedEvents — A ticket hold can only contain ticket types from one event.; MixedCurrency — A ticket hold can only use one currency.; TicketCurrencyUnsupportedForFee — This paid ticket currency is incompatible with the app's fixed ticket-fee denomination.; TicketsUnavailable — The ticket type is not currently on sale.; FreeTicketRequiresClaim — Free ticket types must use tickets.atmosphere.claimFreeTicket.; QuantityTooHigh — Requested quantity exceeds the per-order maximum.; InsufficientTicketCapacity — Not enough capacity remains for the request.; InvalidEventCode — The event code is invalid, unavailable, expired, or exhausted.; EventCodeConflict — eventCode was combined with a different legacy offerCode or accessCode.; OfferCodeInvalid — The offer code is invalid, unavailable, expired, or does not apply to the requested ticket type.; OfferRequiresSingleTicketType — An offer code may currently be applied to only one ticket type per checkout.; OfferNotAvailableForPayWhatYouWant — Offer codes cannot be combined with pay-what-you-want ticket pricing.; OfferCodeBusy — The offer reservation is contended; retry shortly.; AccessCodeRequired — One or more requested ticket types are hidden and require an access code.; InvalidAccessCode — The access code is invalid, paused, expired, exhausted, or does not unlock every hidden ticket type in the request.; IdempotencyKeyConflict — The idempotency key was already used for a different ticket purchase.; IdempotencyKeyInFlight — A hold for this idempotency key is already being created; retry to resume it.; CheckoutPayerChanged — The payer changed accounts in ATM checkout; the initiating app must keep polling with the statusToken from the original result and cannot recover the rotated buyer bearer.; LiveModeNotEnabled — This app may not create live-environment holds yet.; TicketsBusy — The inventory row is contended; retry shortly.

tickets.atmosphere.createTicketType19 fields

Location	Field	Type	Required	Nullable	Limits	Description
input	environment	string<test \| live>	no	no	maxLength:16	No description in lexicon yet.
input	organizerDid	string	yes	no	format:did	No description in lexicon yet.
input	organizerAssertionJwt	string	no	no	maxLength:8192	Optional short-lived user service-auth JWT from organizerDid to ATM, scoped to tickets.atmosphere.createTicketType. Proves the app is configuring ticketing with organizer consent.
input	event	ref:tickets.atmosphere.defs#eventInput	yes	no	none	No description in lexicon yet.
input	title	string	yes	no	minLength:1, maxLength:1000, maxGraphemes:100	No description in lexicon yet.
input	description	string	no	no	maxLength:10000, maxGraphemes:1000	No description in lexicon yet.
input	currency	string	yes	no	minLength:3, maxLength:3	Lowercase ISO 4217 alphabetic code matching money.atmosphere.price. Chargeability is enforced separately by the configured processor allowlist. Asset-denominated value uses the money.atmosphere.payment.defs value union, never this field.
input	unitAmount	integer	yes	no	minimum:0, maximum:2000000	Amount in the smallest unit of currency. 0 creates a free ticket type (claimed via tickets.atmosphere.claimFreeTicket). A resulting paid ticket type must have an exact organizer-owned kind=ticket Product; paid amounts must also meet the processor minimum charge.
input	maxPerOrder	integer	no	no	minimum:1, maximum:50	No description in lexicon yet.
input	saleStartsAt	string	no	no	format:datetime	No description in lexicon yet.
input	saleEndsAt	string	no	no	format:datetime	No description in lexicon yet.
input	ticketTypeRef	ref:com.atproto.repo.strongRef	no	no	none	No description in lexicon yet.
input	product	ref:com.atproto.repo.strongRef	no	no	none	Exact current organizer-owned money.atmosphere.product with kind=ticket. createTicketType requires it whenever unitAmount is greater than 0; a free type may omit it. updateTicketType requires the resulting paid type to retain or receive one, may attach or repoint it, and cannot clear it. The Product must be active and its exact default Price must be one-time, per-unit, and match the ticket amount and currency.
input	defaultPrice	ref:com.atproto.repo.strongRef	no	no	none	Legacy direct-Price compatibility only. New callers using product MUST omit defaultPrice; ATM derives and verifies Product.defaultPrice and rejects both fields together. Readers still accept this field on Product-less historical ticket types.
input	metadata	unknown	no	no	none	No description in lexicon yet.
input	visibility	string<public \| hidden>	no	no	maxLength:16	Private buyer-facing visibility (default public). Hidden types are excluded from availability and buyer surfaces until unlocked by a ticket access code; organizer surfaces always see them.
input	quantityTotal	integer	no	no	minimum:1, maximum:250000	Optional per-type cap. Omit for an unlimited type (the default). An event capacity set via tickets.atmosphere.setEventCapacity additionally bounds every type.
output	event	ref:tickets.atmosphere.defs#eventSummary	yes	no	none	No description in lexicon yet.
output	ticketType	ref:tickets.atmosphere.defs#ticketTypeSummary	yes	no	none	No description in lexicon yet.

Declared errors: AppNotRegistered — Caller DID is not registered as an ATM app.; TicketsModuleDisabled — This app has not enabled ATM Tickets.; OrganizerNotRegistered — Organizer has not signed in to ATM yet.; PaymentSetupIncomplete — Organizer has not finished ATM payment setup.; OrganizerConsentRequired — A verified organizer authorization (organizerAssertionJwt) is required to configure ticketing for this organizer.; OrganizerReassignmentNotAllowed — This event already belongs to a different organizer; a fresh organizer authorization is required to reassign it.; RecipientNotPayable — The organizer has not completed payment setup for this environment.; RecipientCurrencyUnavailable — ATM could not verify the organizer's primary settlement currency.; RecipientCurrencyUnsupported — The organizer's primary settlement currency is not supported by ATM's current payment processor.; RecipientCurrencyNotEnabled — The organizer's primary settlement currency is not enabled in this ATM environment.; RecipientCurrencyMismatch — The paid ticket currency does not match the organizer's primary settlement currency.; InvalidAmount — Ticket price is invalid: negative, above the maximum, or a paid amount below the processor minimum charge (use 0 for free ticket types).; TicketCurrencyUnsupportedForFee — This paid ticket currency is incompatible with the app's fixed ticket-fee denomination.; InvalidCapacity — Ticket quantity must be at least 1.; UserDidMismatch — organizerAssertionJwt issuer does not match organizerDid.

tickets.atmosphere.defs109 fields

Location	Field	Type	Required	Nullable	Limits	Description
def:eventInput	uri	string	yes	no	format:at-uri	AT URI of the canonical public community.lexicon.calendar.event record.
def:eventInput	cid	string	no	no	format:cid	CID of the exact public event record revision represented by this snapshot.
def:eventInput	title	string	yes	no	minLength:1, maxLength:3000, maxGraphemes:300	No description in lexicon yet.
def:eventInput	startsAt	string	no	no	format:datetime	No description in lexicon yet.
def:eventInput	imageUrl	string	no	no	format:uri	No description in lexicon yet.
def:ticketHoldItemRequest	ticketTypeId	string	yes	no	minLength:1, maxLength:300	No description in lexicon yet.
def:ticketHoldItemRequest	quantity	integer	yes	no	minimum:1, maximum:50	No description in lexicon yet.
def:ticketHoldItem	ticketTypeId	string	yes	no	maxLength:300	No description in lexicon yet.
def:ticketHoldItem	title	string	yes	no	maxLength:1000, maxGraphemes:100	No description in lexicon yet.
def:ticketHoldItem	quantity	integer	yes	no	minimum:1, maximum:50	No description in lexicon yet.
def:ticketHoldItem	unitAmount	integer	yes	no	minimum:0	No description in lexicon yet.
def:ticketHoldItem	currency	string	yes	no	minLength:3, maxLength:3	Lowercase ISO 4217 alphabetic code matching money.atmosphere.price. Chargeability is enforced separately by the configured processor allowlist. Asset-denominated value uses the money.atmosphere.payment.defs value union, never this field.
def:ticketHoldItem	ticketTypeRef	ref:com.atproto.repo.strongRef	no	no	none	No description in lexicon yet.
def:ticketHoldItem	defaultPrice	ref:com.atproto.repo.strongRef	no	no	none	No description in lexicon yet.
def:ticketTypeSummary	id	string	yes	no	maxLength:300	No description in lexicon yet.
def:ticketTypeSummary	eventId	string	yes	no	maxLength:300	No description in lexicon yet.
def:ticketTypeSummary	title	string	yes	no	maxLength:1000, maxGraphemes:100	No description in lexicon yet.
def:ticketTypeSummary	quantityTotal	integer	no	no	minimum:1, maximum:250000	The type's own configured cap. Omitted when the type is uncapped.
def:ticketTypeSummary	currency	string	yes	no	minLength:3, maxLength:3	Lowercase ISO 4217 alphabetic code matching money.atmosphere.price. Chargeability is enforced separately by the configured processor allowlist. Asset-denominated value uses the money.atmosphere.payment.defs value union, never this field.
def:ticketTypeSummary	unitAmount	integer	yes	no	minimum:0	No description in lexicon yet.
def:ticketTypeSummary	status	string<active \| paused \| archived>	yes	no	maxLength:32	No description in lexicon yet.
def:ticketTypeSummary	ticketTypeRef	ref:com.atproto.repo.strongRef	no	no	none	No description in lexicon yet.
def:ticketTypeSummary	product	ref:com.atproto.repo.strongRef	no	no	none	The canonical kind=ticket money.atmosphere.product this ticket type points at, when one is attached. Echoed so a writer can confirm the exact Product/CID ATM recorded rather than having to re-read the ticketType record.
def:ticketTypeSummary	defaultPrice	ref:com.atproto.repo.strongRef	no	no	none	No description in lexicon yet.
def:eventSummary	id	string	yes	no	maxLength:300	ATM's private identifier for this ticketed-event config.
def:eventSummary	uri	string	yes	no	format:at-uri	AT URI of the canonical public event record.
def:eventSummary	cid	string	no	no	format:cid	CID of the exact public event record revision, when known.
def:eventSummary	eventRef	ref:com.atproto.repo.strongRef	no	no	none	No description in lexicon yet.
def:eventSummary	title	string	no	no	maxLength:3000, maxGraphemes:300	No description in lexicon yet.
def:eventSummary	startsAt	string	no	no	format:datetime	No description in lexicon yet.
def:eventSummary	manageUrl	string	no	no	format:uri	Current ATM organizer-console locator for this canonical event. Refresh this value from ATM rather than constructing or indefinitely caching the route. The signed-in organizer's authority is revalidated by ATM; possession of this URL grants no access.
def:eventSummary	scannerUrl	string	no	no	format:uri	Stable first-party ATM scanner locator for this canonical event. The signed-in staff member still needs an active scanner grant; possession of this URL grants no access.
def:organizerCollaboration	id	string	yes	no	maxLength:300	No description in lexicon yet.
def:organizerCollaboration	eventId	string	yes	no	maxLength:300	No description in lexicon yet.
def:organizerCollaboration	primaryOrganizerDid	string	yes	no	format:did	No description in lexicon yet.
def:organizerCollaboration	coOrganizerDid	string	yes	no	format:did	No description in lexicon yet.
def:organizerCollaboration	role	string<co-organizer>	yes	no	maxLength:32	No description in lexicon yet.
def:organizerCollaboration	status	string<pending \| accepted \| revoked>	yes	no	maxLength:16	No description in lexicon yet.
def:organizerCollaboration	revenueShareBps	integer	no	no	minimum:0, maximum:10000	Recorded revenue-share INTENT in basis points, for MANUAL RECONCILIATION ONLY. NOT an automatic split: ATM never transfers ticket revenue based on this value.
def:organizerCollaboration	invitedAt	string	yes	no	format:datetime	No description in lexicon yet.
def:organizerCollaboration	acceptedAt	string	no	no	format:datetime	No description in lexicon yet.
def:organizerCollaboration	revokedAt	string	no	no	format:datetime	No description in lexicon yet.
def:ticketAvailability	ticketTypeId	string	yes	no	maxLength:300	No description in lexicon yet.
def:ticketAvailability	eventId	string	no	no	maxLength:300	No description in lexicon yet.
def:ticketAvailability	title	string	yes	no	maxLength:1000, maxGraphemes:100	No description in lexicon yet.
def:ticketAvailability	description	string	no	no	maxLength:10000, maxGraphemes:1000	No description in lexicon yet.
def:ticketAvailability	currency	string	no	no	minLength:3, maxLength:3	Lowercase ISO 4217 alphabetic code matching money.atmosphere.price. Chargeability is enforced separately by the configured processor allowlist. Asset-denominated value uses the money.atmosphere.payment.defs value union, never this field.
def:ticketAvailability	unitAmount	integer	no	no	minimum:0	No description in lexicon yet.
def:ticketAvailability	status	string<available \| sold-out \| not-on-sale \| hidden \| unavailable>	yes	no	maxLength:32	No description in lexicon yet.
def:ticketAvailability	visibility	string<hidden>	no	no	maxLength:16	Present only for hidden ticket types revealed by the caller's access code, so an app can tell which entries the code unlocked. Public types omit the field.
def:ticketAvailability	availableQuantity	integer	no	no	minimum:0	Effective availability (min across the type's capacity pools). Omitted when the type is unlimited.
def:ticketAvailability	quantityTotal	integer	no	no	minimum:1, maximum:250000	The type's OWN configured cap, for 'X of Y left' display. Omitted when the type itself is uncapped (an event capacity may still bound availableQuantity).
def:ticketAvailability	heldQuantity	integer	no	no	minimum:0	Quantity currently reserved by active holds. Returned only to authorized apps.
def:ticketAvailability	soldQuantity	integer	no	no	minimum:0	Quantity already issued/sold. Returned only to authorized apps.
def:ticketAvailability	maxPerOrder	integer	yes	no	minimum:1, maximum:50	No description in lexicon yet.
def:ticketAvailability	saleStartsAt	string	no	no	format:datetime	No description in lexicon yet.
def:ticketAvailability	saleEndsAt	string	no	no	format:datetime	No description in lexicon yet.
def:ticketPresentation	iconUrl	string	no	no	format:uri	Pass icon URL. Currently always returned (ATM falls back to a default icon); optional so a future presentation without an icon stays valid.
def:ticketPresentation	qr	ref:#ticketPresentationQr	yes	no	none	No description in lexicon yet.
def:ticketPresentation	app	ref:tickets.atmosphere.defs#brand	yes	no	none	No description in lexicon yet.
def:ticketPresentation	organizer	ref:tickets.atmosphere.defs#brand	yes	no	none	No description in lexicon yet.
def:ticketPresentation	event	ref:#ticketPresentationEvent	yes	no	none	No description in lexicon yet.
def:ticketPresentation	ticketType	ref:#ticketPresentationTicketType	yes	no	none	No description in lexicon yet.
def:brand	did	string	yes	no	format:did	No description in lexicon yet.
def:brand	handle	string	no	no	format:handle	No description in lexicon yet.
def:brand	name	string	yes	no	maxLength:300	No description in lexicon yet.
def:brand	avatarUrl	string	no	no	format:uri	No description in lexicon yet.
def:issuedTicket	id	string	yes	no	maxLength:300	No description in lexicon yet.
def:issuedTicket	eventId	string	yes	no	maxLength:300	No description in lexicon yet.
def:issuedTicket	ticketTypeId	string	yes	no	maxLength:300	No description in lexicon yet.
def:issuedTicket	paymentId	string	no	no	maxLength:300	No description in lexicon yet.
def:issuedTicket	claimId	string	no	no	maxLength:300	No description in lexicon yet.
def:issuedTicket	environment	string<test \| live>	yes	no	maxLength:16	No description in lexicon yet.
def:issuedTicket	ownerDid	string	no	no	format:did	No description in lexicon yet.
def:issuedTicket	status	string<active \| voided \| refunded>	yes	no	maxLength:32	No description in lexicon yet.
def:issuedTicket	ticketNumber	string	yes	no	maxLength:300	No description in lexicon yet.
def:issuedTicket	eventRef	ref:com.atproto.repo.strongRef	no	no	none	No description in lexicon yet.
def:issuedTicket	ticketTypeRef	ref:com.atproto.repo.strongRef	no	no	none	No description in lexicon yet.
def:issuedTicket	defaultPrice	ref:com.atproto.repo.strongRef	no	no	none	No description in lexicon yet.
def:issuedTicket	scanToken	string	no	no	maxLength:4000	Private scan token returned only to authorized clients.
def:issuedTicket	scanUrl	string	no	no	format:uri	No description in lexicon yet.
def:issuedTicket	createdAt	string	yes	no	format:datetime	No description in lexicon yet.
def:issuedTicket	updatedAt	string	yes	no	format:datetime	No description in lexicon yet.
def:issuedTicketWithContext	id	string	yes	no	maxLength:300	No description in lexicon yet.
def:issuedTicketWithContext	eventId	string	yes	no	maxLength:300	No description in lexicon yet.
def:issuedTicketWithContext	ticketTypeId	string	yes	no	maxLength:300	No description in lexicon yet.
def:issuedTicketWithContext	paymentId	string	no	no	maxLength:300	No description in lexicon yet.
def:issuedTicketWithContext	claimId	string	no	no	maxLength:300	No description in lexicon yet.
def:issuedTicketWithContext	environment	string<test \| live>	yes	no	maxLength:16	No description in lexicon yet.
def:issuedTicketWithContext	ownerDid	string	no	no	format:did	No description in lexicon yet.
def:issuedTicketWithContext	status	string<active \| voided \| refunded>	yes	no	maxLength:32	No description in lexicon yet.
def:issuedTicketWithContext	ticketNumber	string	yes	no	maxLength:300	No description in lexicon yet.
def:issuedTicketWithContext	eventRef	ref:com.atproto.repo.strongRef	no	no	none	No description in lexicon yet.
def:issuedTicketWithContext	ticketTypeRef	ref:com.atproto.repo.strongRef	no	no	none	No description in lexicon yet.
def:issuedTicketWithContext	defaultPrice	ref:com.atproto.repo.strongRef	no	no	none	No description in lexicon yet.
def:issuedTicketWithContext	scanToken	string	no	no	maxLength:4000	No description in lexicon yet.
def:issuedTicketWithContext	scanUrl	string	no	no	format:uri	No description in lexicon yet.
def:issuedTicketWithContext	createdAt	string	yes	no	format:datetime	No description in lexicon yet.
def:issuedTicketWithContext	updatedAt	string	yes	no	format:datetime	No description in lexicon yet.
def:issuedTicketWithContext	presentation	ref:tickets.atmosphere.defs#ticketPresentation	no	no	none	No description in lexicon yet.
def:issuedTicketWithContext	event	ref:tickets.atmosphere.defs#eventSummary	no	no	none	No description in lexicon yet.
def:issuedTicketWithContext	ticketType	ref:tickets.atmosphere.defs#ticketTypeSummary	no	no	none	No description in lexicon yet.
def:ticketPresentationQr	enabled	boolean	yes	no	none	No description in lexicon yet.
def:ticketPresentationQr	label	string	yes	no	maxLength:100	No description in lexicon yet.
def:ticketPresentationEvent	uri	string	yes	no	format:at-uri	AT URI of the canonical public event record.
def:ticketPresentationEvent	title	string	yes	no	maxLength:3000, maxGraphemes:300	No description in lexicon yet.
def:ticketPresentationEvent	startsAt	string	no	no	format:datetime	No description in lexicon yet.
def:ticketPresentationEvent	imageUrl	string	no	no	format:uri	No description in lexicon yet.
def:ticketPresentationTicketType	title	string	yes	no	maxLength:1000, maxGraphemes:100	No description in lexicon yet.

tickets.atmosphere.getTicketAvailability7 fields

Location	Field	Type	Required	Nullable	Limits	Description
params	environment	string<test \| live>	no	no	maxLength:16	No description in lexicon yet.
params	eventId	string	no	no	minLength:1, maxLength:300	No description in lexicon yet.
params	eventUri	string	no	no	format:at-uri	No description in lexicon yet.
params	eventCode	string	no	no	minLength:3, maxLength:64	Preferred buyer-entered event code. ATM resolves discount, hidden-ticket unlock, or combined effects in the exact event namespace; reading availability never consumes a code.
params	accessCode	string	no	no	minLength:3, maxLength:64	Legacy visibility-only input. New storefronts should use eventCode; hidden ticket types are omitted unless the supplied code unlocks them.
output	event	ref:tickets.atmosphere.defs#eventSummary	no	no	none	No description in lexicon yet.
output	ticketTypes	array<ref:tickets.atmosphere.defs#ticketAvailability>	yes	no	maxLength:250	No description in lexicon yet.

Declared errors: AppNotRegistered — Caller DID is not registered as an ATM app.; TicketsModuleDisabled — This app has not enabled ATM Tickets.; EventNotFound — Ticketed event not found.; UnsupportedHistoricalCurrency — Stored ticket data uses a historical currency that the current ISO 4217 wire contract cannot represent.; InvalidEventCode — The event code is invalid, unavailable, expired, or exhausted.; EventCodeConflict — The event code conflicts with a different legacy code field.

tickets.atmosphere.inviteOrganizerCollaboration8 fields

Location	Field	Type	Required	Nullable	Limits	Description
input	environment	string<test \| live>	no	no	maxLength:16	No description in lexicon yet.
input	eventId	string	no	no	minLength:1, maxLength:300	No description in lexicon yet.
input	eventUri	string	no	no	format:at-uri	No description in lexicon yet.
input	organizerDid	string	yes	no	format:did	The inviting PRIMARY organizer (or an already-accepted co-organizer) authorizing this invite.
input	organizerAssertionJwt	string	no	no	maxLength:8192	Optional short-lived user service-auth JWT from organizerDid to ATM, scoped to tickets.atmosphere.inviteOrganizerCollaboration. Proves the inviting organizer authorized the app to manage collaborations for this event.
input	coOrganizerDid	string	yes	no	format:did	The DID being invited to co-organize the event.
input	revenueShareBps	integer	no	no	minimum:0, maximum:10000	OPTIONAL recorded revenue-share INTENT in basis points (0..10000), for MANUAL RECONCILIATION ONLY between the primary organizer and the co-organizer. This is NOT an automatic split: ATM never transfers or auto-pays any portion of ticket gross revenue based on this value. Ticket revenue settles entirely to the single primary organizer's connected account.
output	collaboration	ref:tickets.atmosphere.defs#organizerCollaboration	yes	no	none	No description in lexicon yet.

Declared errors: AppNotRegistered — Caller DID is not registered as an ATM app.; TicketsModuleDisabled — This app has not enabled ATM Tickets.; EventNotFound — Ticketed event not found.; EventControlRequired — A verified primary-organizer or accepted co-organizer authorization is required for this event.; InvalidCollaboration — Invalid collaboration request (e.g. inviting the primary organizer as their own co-organizer, or an invalid revenueShareBps).; CollaborationAlreadyAccepted — An accepted collaboration already exists for this co-organizer.; UserDidMismatch — organizerAssertionJwt issuer does not match organizerDid.

tickets.atmosphere.joinWaitlist15 fields

Location	Field	Type	Required	Nullable	Limits	Description
input	environment	string<test \| live>	no	no	maxLength:16	No description in lexicon yet.
input	eventId	string	no	no	minLength:1, maxLength:300	No description in lexicon yet.
input	eventUri	string	no	no	format:at-uri	No description in lexicon yet.
input	ticketTypeId	string	yes	no	minLength:1, maxLength:300	No description in lexicon yet.
input	buyerDid	string	no	no	format:did	No description in lexicon yet.
input	buyerAssertionJwt	string	no	no	maxLength:8192	Required whenever buyerDid is supplied: a short-lived user service-auth JWT from buyerDid to ATM, scoped to tickets.atmosphere.joinWaitlist. Omit both buyer fields for a guest email waitlist entry.
input	customerEmail	string	no	no	maxLength:320	Private delivery hint for the offer email. ATM stores only a MASKED hint; the raw email is never written to protocol records.
input	quantity	integer	no	no	minimum:1, maximum:50	No description in lexicon yet.
output	waitlistId	string	yes	no	maxLength:300	No description in lexicon yet.
output	status	string<waiting \| offered \| claimed \| expired \| released>	yes	no	maxLength:16	No description in lexicon yet.
output	position	integer	yes	no	minimum:0	No description in lexicon yet.
output	quantity	integer	yes	no	minimum:1	No description in lexicon yet.
output	eventId	string	yes	no	maxLength:300	No description in lexicon yet.
output	ticketTypeId	string	yes	no	maxLength:300	No description in lexicon yet.
output	reused	boolean	no	no	none	No description in lexicon yet.

tickets.atmosphere.listBuyerTickets7 fields

Location	Field	Type	Required	Nullable	Limits	Description
params	environment	string<test \| live>	no	no	maxLength:16	No description in lexicon yet.
params	buyer	string	no	no	format:at-identifier	DID or handle of the ticket owner.
params	paymentId	string	no	no	minLength:1, maxLength:300	No description in lexicon yet.
params	limit	integer	no	no	minimum:1, maximum:100	No description in lexicon yet.
params	cursor	string	no	no	maxLength:1024	No description in lexicon yet.
output	tickets	array<ref:tickets.atmosphere.defs#issuedTicketWithContext>	yes	no	maxLength:100	No description in lexicon yet.
output	cursor	string	no	no	maxLength:1024	No description in lexicon yet.

Declared errors: AppNotRegistered — Caller DID is not registered as an ATM app.; TicketsModuleDisabled — This app has not enabled ATM Tickets.; InvalidCursor — Ticket cursor is invalid.; UnsupportedHistoricalCurrency — Stored ticket data uses a historical currency that the current ISO 4217 wire contract cannot represent.

tickets.atmosphere.listCollaborations10 fields

Location	Field	Type	Required	Nullable	Limits	Description
input	environment	string<test \| live>	no	no	maxLength:16	No description in lexicon yet.
input	eventId	string	no	no	minLength:1, maxLength:300	No description in lexicon yet.
input	organizerDid	string	no	no	format:did	When listing an event's collaborations, the requesting organizer (verified via event control).
input	organizerAssertionJwt	string	no	no	maxLength:8192	No description in lexicon yet.
input	coOrganizerDid	string	no	no	format:did	When listing a co-organizer's OWN collaborations, their DID (verified via coOrganizerAssertionJwt).
input	coOrganizerAssertionJwt	string	no	no	maxLength:8192	No description in lexicon yet.
input	limit	integer	no	no	minimum:1, maximum:250	No description in lexicon yet.
input	cursor	string	no	no	maxLength:1024	No description in lexicon yet.
output	collaborations	array<ref:tickets.atmosphere.defs#organizerCollaboration>	yes	no	maxLength:250	No description in lexicon yet.
output	cursor	string	no	no	maxLength:1024	No description in lexicon yet.

Declared errors: AppNotRegistered — Caller DID is not registered as an ATM app.; TicketsModuleDisabled — This app has not enabled ATM Tickets.; EventNotFound — Ticketed event not found.; EventControlRequired — A verified primary-organizer or accepted co-organizer authorization is required for this event.; InvalidCollaborationQuery — Provide eventId + organizerDid (event listing) or coOrganizerDid (own-rows listing).; InvalidCursor — Collaboration cursor is invalid.; UserDidMismatch — An assertion issuer does not match the expected DID.

tickets.atmosphere.listEventWaitlist30 fields

Location	Field	Type	Required	Nullable	Limits	Description
input	environment	string<test \| live>	no	no	maxLength:16	No description in lexicon yet.
input	eventId	string	yes	no	minLength:1, maxLength:300	No description in lexicon yet.
input	organizerDid	string	yes	no	format:did	No description in lexicon yet.
input	organizerAssertionJwt	string	no	no	maxLength:8192	No description in lexicon yet.
input	ticketTypeId	string	no	no	minLength:1, maxLength:300	Filter the queue to one ticket type.
input	includeTerminal	boolean	no	no	none	Include terminal (claimed/expired/released) rows in the queue page. Absent/false returns only active (waiting/offered) entries. The cursor paginates the entries queue only; summaries are always returned in full.
input	limit	integer	no	no	minimum:1, maximum:250	No description in lexicon yet.
input	cursor	string	no	no	maxLength:1024	No description in lexicon yet.
output	summaries	array<ref:#waitlistSummary>	yes	no	maxLength:1000	No description in lexicon yet.
output	entries	array<ref:#waitlistEntry>	yes	no	maxLength:250	No description in lexicon yet.
output	cursor	string	no	no	maxLength:1024	No description in lexicon yet.
def:waitlistSummary	eventId	string	yes	no	maxLength:300	No description in lexicon yet.
def:waitlistSummary	ticketTypeId	string	yes	no	maxLength:300	No description in lexicon yet.
def:waitlistSummary	ticketTypeTitle	string	yes	no	maxLength:200	No description in lexicon yet.
def:waitlistSummary	activeCount	integer	yes	no	minimum:0	No description in lexicon yet.
def:waitlistSummary	waitingCount	integer	yes	no	minimum:0	No description in lexicon yet.
def:waitlistSummary	offeredCount	integer	yes	no	minimum:0	No description in lexicon yet.
def:waitlistSummary	activeQuantity	integer	yes	no	minimum:0	No description in lexicon yet.
def:waitlistEntry	waitlistId	string	yes	no	maxLength:300	No description in lexicon yet.
def:waitlistEntry	eventId	string	yes	no	maxLength:300	No description in lexicon yet.
def:waitlistEntry	ticketTypeId	string	yes	no	maxLength:300	No description in lexicon yet.
def:waitlistEntry	position	integer	yes	no	minimum:0	No description in lexicon yet.
def:waitlistEntry	quantity	integer	yes	no	minimum:1	No description in lexicon yet.
def:waitlistEntry	status	string<waiting \| offered \| claimed \| expired \| released>	yes	no	maxLength:16	No description in lexicon yet.
def:waitlistEntry	buyerDid	string	no	no	format:did	No description in lexicon yet.
def:waitlistEntry	customerEmailHint	string	no	no	maxLength:200	No description in lexicon yet.
def:waitlistEntry	offerHoldId	string	no	no	maxLength:300	No description in lexicon yet.
def:waitlistEntry	offeredAt	string	no	no	format:datetime	No description in lexicon yet.
def:waitlistEntry	offerExpiresAt	string	no	no	format:datetime	No description in lexicon yet.
def:waitlistEntry	createdAt	string	yes	no	format:datetime	No description in lexicon yet.

tickets.atmosphere.listOrganizerTickets7 fields

Location	Field	Type	Required	Nullable	Limits	Description
params	environment	string<test \| live>	no	no	maxLength:16	No description in lexicon yet.
params	organizer	string	no	no	format:at-identifier	DID or handle of the ticket organizer.
params	eventId	string	no	no	minLength:1, maxLength:300	No description in lexicon yet.
params	limit	integer	no	no	minimum:1, maximum:250	No description in lexicon yet.
params	cursor	string	no	no	maxLength:1024	No description in lexicon yet.
output	tickets	array<ref:tickets.atmosphere.defs#issuedTicketWithContext>	yes	no	maxLength:250	No description in lexicon yet.
output	cursor	string	no	no	maxLength:1024	No description in lexicon yet.

tickets.atmosphere.listPublicConfig30 fields

Location	Field	Type	Required	Nullable	Limits	Description
params	organizer	string	yes	no	format:at-identifier	DID or handle of the organizer. Handles are resolved to a DID before the indexed read.
params	eventUri	string	no	no	format:at-uri	No description in lexicon yet.
params	collections	array<string<tickets.atmosphere.ticketType \| tickets.atmosphere.ticketedEvent>>	no	no	maxLength:3	No description in lexicon yet.
params	includeArchived	boolean	no	no	none	No description in lexicon yet.
params	limit	integer	no	no	minimum:1, maximum:100	No description in lexicon yet.
params	cursor	string	no	no	maxLength:1024	No description in lexicon yet.
output	records	array<ref:#publicConfigRecord>	yes	no	none	No description in lexicon yet.
output	cursor	string	no	no	maxLength:1024	No description in lexicon yet.
def:publicConfigRecord	uri	string	yes	no	format:at-uri	AT URI of the indexed ticket config record.
def:publicConfigRecord	cid	string	yes	no	format:cid	CID of the exact indexed ticket config record revision.
def:publicConfigRecord	organizer	string	yes	no	format:did	DID of the organizer repository containing the record.
def:publicConfigRecord	collection	string<tickets.atmosphere.ticketType \| tickets.atmosphere.ticketedEvent>	yes	no	format:nsid	NSID of the indexed ticket config record collection.
def:publicConfigRecord	rkey	string	yes	no	format:record-key	Repository record key of the indexed ticket config record.
def:publicConfigRecord	event	ref:com.atproto.repo.strongRef	yes	no	none	CID-pinned strongRef to the public event this ticket config describes.
def:publicConfigRecord	title	string	no	no	maxLength:1000, maxGraphemes:100	No description in lexicon yet.
def:publicConfigRecord	description	string	no	no	maxLength:10000, maxGraphemes:1000	No description in lexicon yet.
def:publicConfigRecord	currency	string	no	no	minLength:3, maxLength:3	Lowercase ISO 4217 alphabetic code matching money.atmosphere.price. Chargeability is enforced separately by the configured processor allowlist. Asset-denominated value uses the money.atmosphere.payment.defs value union, never this field.
def:publicConfigRecord	unitAmount	integer	no	no	minimum:0	No description in lexicon yet.
def:publicConfigRecord	quantityTotal	integer	no	no	minimum:1, maximum:250000	Display hint from the ticketType record. Omitted when uncapped or undisclosed.
def:publicConfigRecord	maxPerOrder	integer	no	no	minimum:1, maximum:50	No description in lexicon yet.
def:publicConfigRecord	defaultPrice	ref:com.atproto.repo.strongRef	no	no	none	CID-pinned strongRef to the ticket type's current money.atmosphere.price, when published.
def:publicConfigRecord	saleStartsAt	string	no	no	format:datetime	No description in lexicon yet.
def:publicConfigRecord	saleEndsAt	string	no	no	format:datetime	No description in lexicon yet.
def:publicConfigRecord	ticketTypes	array<ref:com.atproto.repo.strongRef>	no	no	maxLength:250	Display-ordered CID-pinned strongRefs advertised by a ticketed-event record.
def:publicConfigRecord	startsAt	string	no	no	format:datetime	No description in lexicon yet.
def:publicConfigRecord	endsAt	string	no	no	format:datetime	No description in lexicon yet.
def:publicConfigRecord	archived	boolean	yes	no	none	No description in lexicon yet.
def:publicConfigRecord	createdAt	string	no	no	format:datetime	No description in lexicon yet.
def:publicConfigRecord	updatedAt	string	no	no	format:datetime	No description in lexicon yet.
def:publicConfigRecord	indexedAt	string	yes	no	format:datetime	When the AppView indexed this public ticket config record.

Declared errors: InvalidRequest — The query must include organizer, eventUri (if provided) must belong to that organizer, and only supported ticket config collections may be requested.

tickets.atmosphere.listTicketFormResponses16 fields

Location	Field	Type	Required	Nullable	Limits	Description
input	environment	string<test \| live>	no	no	maxLength:16	No description in lexicon yet.
input	eventId	string	yes	no	minLength:1, maxLength:300	No description in lexicon yet.
input	organizerDid	string	yes	no	format:did	No description in lexicon yet.
input	organizerAssertionJwt	string	no	no	maxLength:8192	No description in lexicon yet.
input	ticketTypeId	string	no	no	minLength:1, maxLength:300	No description in lexicon yet.
input	ticketId	string	no	no	minLength:1, maxLength:300	No description in lexicon yet.
input	limit	integer	no	no	minimum:1, maximum:250	No description in lexicon yet.
input	cursor	string	no	no	maxLength:1024	No description in lexicon yet.
output	responses	array<ref:#formResponse>	yes	no	maxLength:250	No description in lexicon yet.
output	cursor	string	no	no	maxLength:1024	No description in lexicon yet.
def:formResponse	ticketId	string	yes	no	maxLength:300	No description in lexicon yet.
def:formResponse	ticketTypeId	string	yes	no	maxLength:300	No description in lexicon yet.
def:formResponse	fieldKey	string	yes	no	maxLength:64	No description in lexicon yet.
def:formResponse	value	string	yes	no	maxLength:2000	No description in lexicon yet.
def:formResponse	showAtCheckIn	boolean	yes	no	none	No description in lexicon yet.
def:formResponse	createdAt	string	yes	no	format:datetime	No description in lexicon yet.

tickets.atmosphere.releaseFreeTicket10 fields

Location	Field	Type	Required	Nullable	Limits	Description
input	environment	string<test \| live>	no	no	maxLength:16	No description in lexicon yet.
input	eventId	string	no	no	minLength:1, maxLength:300	No description in lexicon yet.
input	eventUri	string	no	no	format:at-uri	No description in lexicon yet.
input	buyerDid	string	yes	no	format:did	No description in lexicon yet.
input	buyerAssertionJwt	string	yes	no	maxLength:8192	Required short-lived user service-auth JWT from buyerDid to ATM, scoped to tickets.atmosphere.releaseFreeTicket.
input	idempotencyKey	string	yes	no	minLength:1, maxLength:200	Caller-stable identity for this release gesture. Reuse the same key after an ambiguous or lost response; ATM replays the original completed result and never releases tickets claimed later. A key cannot be reused for another buyer, event, or ticketIds selector in the same app environment.
input	ticketIds	array<string>	no	no	maxLength:50	Optional narrowing to specific tickets — OMIT the field to release EVERY active free-claim ticket the buyer holds for this event, or pass an EMPTY array (or one with no valid ids) to release NOTHING and get releasedCount 0. The two are deliberately different so an empty client selection cannot un-RSVP a buyer from everything.
output	environment	string<test \| live>	yes	no	maxLength:16	No description in lexicon yet.
output	releasedCount	integer	yes	no	minimum:0	Authoritative number of tickets released — may exceed releasedTicketIds.length, which is capped at 1000, so treat a shorter list as partial and re-query rather than as the complete set.
output	releasedTicketIds	array<string>	yes	no	maxLength:1000	Ids of the released tickets, truncated to the first 1000 — compare against releasedCount to detect truncation.

Declared errors: AppNotRegistered — Caller DID is not registered as an ATM app.; TicketsModuleDisabled — This app has not enabled ATM Tickets.; UserAssertionRequired — A verified buyer assertion (buyerAssertionJwt) is required to release free-claim tickets.; AuthVerificationFailed — The service-auth token could not be verified.; UserDidMismatch — buyerAssertionJwt issuer does not match buyerDid.; InvalidRequest — Provide eventId or eventUri.; EventNotFound — The event does not exist for this app and environment.; IdempotencyConflict — The idempotencyKey was already used for a different buyer, event, or ticketIds selector.; TicketsBusy — The inventory row is contended; retry shortly.

tickets.atmosphere.releaseTicketHold6 fields

Location	Field	Type	Required	Nullable	Limits	Description
input	environment	string<test \| live>	no	no	maxLength:16	No description in lexicon yet.
input	holdId	string	yes	no	minLength:1, maxLength:300	No description in lexicon yet.
input	reason	string	no	no	maxLength:200	No description in lexicon yet.
output	hold	ref:#hold	yes	no	none	No description in lexicon yet.
def:hold	id	string	yes	no	maxLength:300	No description in lexicon yet.
def:hold	status	string<released \| expired \| failed \| completed>	yes	no	maxLength:32	No description in lexicon yet.

Declared errors: AppNotRegistered — Caller DID is not registered as an ATM app.; TicketsModuleDisabled — This app has not enabled ATM Tickets.; TicketHoldNotFound — Ticket hold not found.

tickets.atmosphere.revokeCollaboration5 fields

Location	Field	Type	Required	Nullable	Limits	Description
input	environment	string<test \| live>	no	no	maxLength:16	No description in lexicon yet.
input	collaborationId	string	yes	no	minLength:1, maxLength:300	No description in lexicon yet.
input	organizerDid	string	yes	no	format:did	The revoking PRIMARY organizer (or accepted co-organizer) authorizing this revocation via event control.
input	organizerAssertionJwt	string	no	no	maxLength:8192	Optional short-lived user service-auth JWT from organizerDid to ATM, scoped to tickets.atmosphere.revokeCollaboration.
output	collaboration	ref:tickets.atmosphere.defs#organizerCollaboration	yes	no	none	No description in lexicon yet.

Declared errors: AppNotRegistered — Caller DID is not registered as an ATM app.; TicketsModuleDisabled — This app has not enabled ATM Tickets.; CollaborationNotFound — Collaboration invitation not found.; EventNotFound — Ticketed event not found.; EventControlRequired — A verified primary-organizer or accepted co-organizer authorization is required for this event.; UserDidMismatch — organizerAssertionJwt issuer does not match organizerDid.

tickets.atmosphere.setEventCapacity11 fields

Location	Field	Type	Required	Nullable	Limits	Description
input	environment	string<test \| live>	no	no	maxLength:16	No description in lexicon yet.
input	eventId	string	no	no	minLength:1, maxLength:300	No description in lexicon yet.
input	eventUri	string	no	no	format:at-uri	No description in lexicon yet.
input	organizerDid	string	no	no	format:did	The current primary organizer authorizing this mutation. Omit only when the calling app is itself that primary organizer.
input	organizerAssertionJwt	string	no	no	maxLength:8192	Optional only for an app updating its own event. Otherwise, a short-lived user service-auth JWT from organizerDid to ATM scoped to tickets.atmosphere.setEventCapacity.
input	capacity	integer	no	no	minimum:1, maximum:250000	Total tickets across ALL ticket types of the event.
input	unlimited	boolean	no	no	none	true clears the event capacity (unlimited — the default posture for new events).
output	eventId	string	yes	no	maxLength:300	No description in lexicon yet.
output	capacity	integer	no	no	minimum:1, maximum:250000	The event capacity now in effect. Omitted when unlimited.
output	soldQuantity	integer	yes	no	minimum:0	No description in lexicon yet.
output	heldQuantity	integer	yes	no	minimum:0	No description in lexicon yet.

Declared errors: AppNotRegistered — Caller DID is not registered as an ATM app.; TicketsModuleDisabled — This app has not enabled ATM Tickets.; EventNotFound — Ticketed event not found.; EventControlRequired — A verified current primary-organizer authorization is required for this event.; UserDidMismatch — organizerAssertionJwt issuer does not match organizerDid.; InvalidCapacity — Capacity is invalid, or lower than tickets already sold or held for the event.; InvalidCapacityConfig — Provide exactly one of capacity or unlimited:true.

tickets.atmosphere.setTicketTypeForm16 fields

Location	Field	Type	Required	Nullable	Limits	Description
input	environment	string<test \| live>	no	no	maxLength:16	No description in lexicon yet.
input	ticketTypeId	string	yes	no	minLength:1, maxLength:300	No description in lexicon yet.
input	organizerDid	string	yes	no	format:did	No description in lexicon yet.
input	organizerAssertionJwt	string	no	no	maxLength:8192	Optional short-lived user service-auth JWT from organizerDid to ATM, scoped to tickets.atmosphere.setTicketTypeForm. Proves the app is configuring ticketing with organizer consent.
input	form	ref:#form	no	yes	none	No description in lexicon yet.
output	ticketTypeId	string	yes	no	maxLength:300	No description in lexicon yet.
output	fieldCount	integer	yes	no	minimum:0	No description in lexicon yet.
def:form	version	integer	yes	no	minimum:1	Form schema version. Currently 1.
def:form	fields	array<ref:#formField>	yes	no	maxLength:30	No description in lexicon yet.
def:formField	key	string	yes	no	minLength:1, maxLength:64	No description in lexicon yet.
def:formField	label	string	yes	no	minLength:1, maxLength:200	No description in lexicon yet.
def:formField	description	string	no	no	maxLength:1000	Optional buyer-facing help text shown below the question.
def:formField	type	string<text \| textarea \| email \| select \| checkbox \| boolean \| number>	yes	no	maxLength:16	No description in lexicon yet.
def:formField	required	boolean	no	no	none	No description in lexicon yet.
def:formField	showAtCheckIn	boolean	no	no	none	Show this answer at check-in. Allowed ONLY on select/checkbox/boolean/number fields; rejected on text/textarea/email so no free-text/email answer can reach the door scanner.
def:formField	options	array<string>	no	no	maxLength:50	Choice values for select fields; each string is both the stored value and the display label. Deliberately atomic: richer per-option shapes (value/label pairs) would ship as a NEW optional field rather than mutating these items.

Declared errors: AppNotRegistered — Caller DID is not registered as an ATM app.; TicketsModuleDisabled — This app has not enabled ATM Tickets.; TicketTypeNotFound — Ticket type not found.; EventNotFound — Ticketed event not found.; EventControlRequired — A verified primary-organizer or accepted co-organizer authorization is required for this event.; InvalidTicketForm — The form schema is invalid (e.g. showAtCheckIn set on a free-text or email field).; UserDidMismatch — organizerAssertionJwt issuer does not match organizerDid.

tickets.atmosphere.ticketedEvent7 fields

Location	Field	Type	Required	Nullable	Limits	Description
record	event	ref:com.atproto.repo.strongRef	yes	no	none	CID-pinned strongRef to the canonical public community.lexicon.calendar.event record.
record	ticketTypes	array<ref:com.atproto.repo.strongRef>	no	no	maxLength:250	Display-ordered CID-pinned strongRefs to the ticket types this record publicly advertises.
record	title	string	no	no	maxLength:1000, maxGraphemes:100	No description in lexicon yet.
record	description	string	no	no	maxLength:10000, maxGraphemes:1000	No description in lexicon yet.
record	archived	boolean	no	no	none	True when this ticketed-event anchor is archived. Omitted or false means it is active.
record	createdAt	string	yes	no	format:datetime	No description in lexicon yet.
record	updatedAt	string	no	no	format:datetime	No description in lexicon yet.

tickets.atmosphere.ticketType15 fields

Location	Field	Type	Required	Nullable	Limits	Description
record	event	ref:com.atproto.repo.strongRef	yes	no	none	CID-pinned strongRef to the canonical public community.lexicon.calendar.event record.
record	title	string	yes	no	minLength:1, maxLength:1000, maxGraphemes:100	No description in lexicon yet.
record	description	string	no	no	maxLength:10000, maxGraphemes:1000	No description in lexicon yet.
record	currency	string	no	no	minLength:3, maxLength:3	Deprecated display copy retained for readers of early records; canonical pricing belongs on the money.atmosphere.price referenced by defaultPrice. Lowercase currency code.
record	unitAmount	integer	no	no	minimum:0	Deprecated display copy retained for readers of early records; canonical pricing belongs on the money.atmosphere.price referenced by defaultPrice. 0 continues to mark a free ticket type (claimed via tickets.atmosphere.claimFreeTicket, not checkout).
record	quantityTotal	integer	no	no	minimum:1, maximum:250000	Display hint: the type's configured cap. Omitted when uncapped or undisclosed. Authoritative availability always comes from the availability query; capacity is enforced only in private ATM service state.
record	maxPerOrder	integer	no	no	minimum:1, maximum:50	Organizer-configured per-order limit for this ticket type. Apps must still check live ATM availability before checkout.
record	product	ref:com.atproto.repo.strongRef	no	no	none	Optional CID-pinned strongRef to the canonical money.atmosphere.product with kind=ticket for this ticket type in the organizer repo. Optional in the record so free/RSVP ticket types stay a single record, but tickets.atmosphere.createTicketType requires it for a PAID type. When present the Product owns catalog presentation and points at the current immutable money.atmosphere.price; checkout still lists on this ticketType record URI, never on the Product or the price.
record	defaultPrice	ref:com.atproto.repo.strongRef	no	no	none	Optional CID-pinned strongRef to the current money.atmosphere.price for this ticket type in the organizer repo. Legacy direct pricing retained for readers of records written before ticket types could carry a Product: when product is present, economics resolve through that Product's current defaultPrice and this field is not additionally authoritative. Absent means the type is published without catalog pricing; ATM private configuration remains settlement truth. Checkout always lists on this ticketType record URI, never on the price.
record	saleStartsAt	string	no	no	format:datetime	No description in lexicon yet.
record	saleEndsAt	string	no	no	format:datetime	No description in lexicon yet.
record	archived	boolean	no	no	none	True when this ticket type is archived. Omitted or false means it is not archived.
record	archivedAt	string	no	no	format:datetime	No description in lexicon yet.
record	createdAt	string	yes	no	format:datetime	No description in lexicon yet.
record	updatedAt	string	no	no	format:datetime	No description in lexicon yet.

tickets.atmosphere.updateTicketEvent11 fields

Location	Field	Type	Required	Nullable	Limits	Description
input	environment	string<test \| live>	no	no	maxLength:16	No description in lexicon yet.
input	eventId	string	yes	no	minLength:1, maxLength:300	No description in lexicon yet.
input	organizerDid	string	no	no	format:did	The primary organizer or accepted co-organizer authorizing this mutation. Omit only when the calling app is itself the event's primary organizer.
input	organizerAssertionJwt	string	no	no	maxLength:8192	Optional only for an app updating its own event. Otherwise, a short-lived user service-auth JWT from organizerDid to ATM scoped to tickets.atmosphere.updateTicketEvent.
input	title	string	no	no	minLength:1, maxLength:3000, maxGraphemes:300	No description in lexicon yet.
input	startsAt	string	no	yes	format:datetime	No description in lexicon yet.
input	eventCid	string	no	yes	format:cid	No description in lexicon yet.
input	imageUrl	string	no	yes	format:uri	No description in lexicon yet.
input	status	string<active \| paused \| archived>	no	no	maxLength:32	ATM ticket-sales lifecycle state. It does not control visibility of the public event record.
input	metadata	unknown	no	no	none	No description in lexicon yet.
output	event	ref:tickets.atmosphere.defs#eventSummary	yes	no	none	No description in lexicon yet.

Declared errors: AppNotRegistered — Caller DID is not registered as an ATM app.; TicketsModuleDisabled — This app has not enabled ATM Tickets.; TicketEventNotFound — Ticketed event config not found.; EventControlRequired — A verified primary-organizer or accepted co-organizer authorization is required for this event.; PrimaryOrganizerRequired — Only the current primary organizer can archive the event.; UserDidMismatch — organizerAssertionJwt issuer does not match organizerDid.

tickets.atmosphere.updateTicketType20 fields

Location	Field	Type	Required	Nullable	Limits	Description
input	environment	string<test \| live>	no	no	maxLength:16	No description in lexicon yet.
input	ticketTypeId	string	yes	no	minLength:1, maxLength:300	No description in lexicon yet.
input	organizerDid	string	no	no	format:did	The primary organizer or accepted co-organizer authorizing this mutation. Omit only when the calling app is itself the event's primary organizer.
input	organizerAssertionJwt	string	no	no	maxLength:8192	Optional only for an app updating its own event. Otherwise, a short-lived user service-auth JWT from organizerDid to ATM scoped to tickets.atmosphere.updateTicketType.
input	title	string	no	no	minLength:1, maxLength:1000, maxGraphemes:100	No description in lexicon yet.
input	description	string	no	yes	maxLength:10000, maxGraphemes:1000	No description in lexicon yet.
input	currency	string	no	no	minLength:3, maxLength:3	Lowercase ISO 4217 alphabetic code matching money.atmosphere.price. Chargeability is enforced separately by the configured processor allowlist. Asset-denominated value uses the money.atmosphere.payment.defs value union, never this field.
input	unitAmount	integer	no	no	minimum:0, maximum:2000000	Amount in the smallest unit of currency. 0 creates a free ticket type (claimed via tickets.atmosphere.claimFreeTicket). A resulting paid ticket type must have an exact organizer-owned kind=ticket Product; paid amounts must also meet the processor minimum charge.
input	maxPerOrder	integer	no	no	minimum:1, maximum:50	No description in lexicon yet.
input	saleStartsAt	string	no	yes	format:datetime	No description in lexicon yet.
input	saleEndsAt	string	no	yes	format:datetime	No description in lexicon yet.
input	ticketTypeRef	ref:com.atproto.repo.strongRef	no	yes	none	No description in lexicon yet.
input	product	ref:com.atproto.repo.strongRef	no	no	none	Exact current organizer-owned money.atmosphere.product with kind=ticket. createTicketType requires it whenever unitAmount is greater than 0; a free type may omit it. updateTicketType requires the resulting paid type to retain or receive one, may attach or repoint it, and cannot clear it. The Product must be active and its exact default Price must be one-time, per-unit, and match the ticket amount and currency.
input	defaultPrice	ref:com.atproto.repo.strongRef	no	yes	none	Legacy direct-Price compatibility only. New callers using product MUST omit defaultPrice; ATM derives and verifies Product.defaultPrice and rejects both fields together. Readers still accept this field on Product-less historical ticket types.
input	metadata	unknown	no	no	none	No description in lexicon yet.
input	visibility	string<public \| hidden>	no	no	maxLength:16	Private buyer-facing visibility (default public). Hidden types are excluded from availability and buyer surfaces until unlocked by a ticket access code; organizer surfaces always see them.
input	quantityTotal	integer	no	no	minimum:1, maximum:250000	Set the per-type cap.
input	unlimited	boolean	no	no	none	true clears the per-type cap (unlimited).
input	status	string<active \| paused \| archived>	no	no	maxLength:32	No description in lexicon yet.
output	ticketType	ref:tickets.atmosphere.defs#ticketTypeSummary	yes	no	none	No description in lexicon yet.

Declared errors: AppNotRegistered — Caller DID is not registered as an ATM app.; TicketsModuleDisabled — This app has not enabled ATM Tickets.; RecipientNotPayable — The organizer has not completed payment setup for this environment.; RecipientCurrencyUnavailable — ATM could not verify the organizer's primary settlement currency.; RecipientCurrencyUnsupported — The organizer's primary settlement currency is not supported by ATM's current payment processor.; RecipientCurrencyNotEnabled — The organizer's primary settlement currency is not enabled in this ATM environment.; RecipientCurrencyMismatch — The paid ticket currency does not match the organizer's primary settlement currency.; UnsupportedHistoricalCurrency — Stored ticket data uses a historical currency that the current ISO 4217 wire contract cannot represent.; TicketTypeNotFound — Ticket type not found.; EventControlRequired — A verified primary-organizer or accepted co-organizer authorization is required for this event.; PrimaryOrganizerRequired — Only the current primary organizer can change ticket pricing, capacity, or raw metadata, or archive the ticket type.; UserDidMismatch — organizerAssertionJwt issuer does not match organizerDid.; InvalidAmount — Ticket price is invalid: negative, above the maximum, or a paid amount below the processor minimum charge (use 0 for free ticket types).; TicketCurrencyUnsupportedForFee — This paid ticket currency is incompatible with the app's fixed ticket-fee denomination.; InvalidCapacity — Capacity is invalid, or lower than tickets already sold or held for this type.; InvalidCapacityConfig — Provide at most one of quantityTotal or unlimited:true.

tickets.atmosphere.verifyTicket8 fields

Location	Field	Type	Required	Nullable	Limits	Description
input	environment	string<test \| live>	no	no	maxLength:16	No description in lexicon yet.
input	ticketToken	string	yes	no	minLength:1, maxLength:4000	No description in lexicon yet.
output	valid	boolean	yes	no	none	No description in lexicon yet.
output	reason	string	no	no	maxLength:100	No description in lexicon yet.
output	ticket	ref:tickets.atmosphere.defs#issuedTicket	no	no	none	No description in lexicon yet.
output	presentation	ref:tickets.atmosphere.defs#ticketPresentation	no	no	none	No description in lexicon yet.
output	event	ref:tickets.atmosphere.defs#eventSummary	no	no	none	No description in lexicon yet.
output	ticketType	ref:tickets.atmosphere.defs#ticketTypeSummary	no	no	none	No description in lexicon yet.

Declared errors: AppNotRegistered — Caller DID is not registered as an ATM app.; TicketsModuleDisabled — This app has not enabled ATM Tickets.; TicketNotFound — Ticket not found or verification failed.; UnsupportedHistoricalCurrency — Stored ticket data uses a historical currency that the current ISO 4217 wire contract cannot represent.

Contract tests

Tickets docs are checked against lexicons/tickets/atmosphere. Regenerate the reference after lexicon edits and run the contract check before sharing docs with app developers.

node scripts/generate-docs-reference.mjs
node scripts/check-docs-contracts.mjs
node scripts/check-examples.mjs

Every tickets.atmosphere NSID appears in docs.html and docs/generated-reference.json.
Real docs pages are generated for overview, build, callbacks, reference, and operations.
API examples document auth mode, request shape, and common failure behavior.
Example server files include typecheck and smoke scripts for copied starter-kit code.

API reference examples

Use current request examples for paid holds, fresh free claims and app-authorized check-in. Exact fields and errors are generated above from ATM. Query ticket lists use buyer/organizer; private assertion-bearing list procedures use POST bodies.

XRPC methods

Use service calls for private inventory and ticket operations. ATM remains responsible for checkout initiation, settlement, receipts, app fees, and payment proofs.

POST tickets.atmosphere.createTicketEvent
POST tickets.atmosphere.updateTicketEvent
POST tickets.atmosphere.cancelTicketEvent
POST tickets.atmosphere.createTicketType
POST tickets.atmosphere.updateTicketType
POST tickets.atmosphere.archiveTicketType
POST tickets.atmosphere.setEventCapacity
POST tickets.atmosphere.setTicketTypeForm
GET  tickets.atmosphere.getTicketAvailability
POST tickets.atmosphere.createTicketHold
POST tickets.atmosphere.releaseTicketHold
POST tickets.atmosphere.claimFreeTicket
POST tickets.atmosphere.releaseFreeTicket
POST tickets.atmosphere.joinWaitlist
POST tickets.atmosphere.claimWaitlistOffer
POST tickets.atmosphere.listEventWaitlist
POST tickets.atmosphere.listTicketFormResponses
POST tickets.atmosphere.inviteOrganizerCollaboration
POST tickets.atmosphere.acceptCollaboration
POST tickets.atmosphere.listCollaborations
POST tickets.atmosphere.revokeCollaboration
GET  tickets.atmosphere.listBuyerTickets
GET  tickets.atmosphere.listOrganizerTickets
POST tickets.atmosphere.verifyTicket
POST tickets.atmosphere.checkInTicket
GET  tickets.atmosphere.listPublicConfig (public AppView)

Error codes

The per-method generated field panels include declared errors from the copied schemas. Handle actual structured errors and check-in statuses instead of inventing exception names from UI messages.

InsufficientTicketCapacity / TicketsUnavailable	Refresh availability and selection; do not start checkout without a successful hold.
FreeTicketRequiresClaim / PaidTicketRequiresCheckout	Choose the zero-price claim path or paid checkout path as required by the configured type.
InvalidBuyerIdentity / UserAssertionRequired / AuthVerificationFailed	Supply the correct paired buyer fields and a fresh method-scoped assertion.
CustomerEmailRequired / InvalidCustomerEmail	Collect valid private delivery email before a fresh free claim.
EventControlRequired / PrimaryOrganizerRequired	Revalidate current organizer authority; app provenance is insufficient.
IdempotencyKeyInFlight / IdempotencyKeyConflict / IdempotencyConflict	Wait/retry the original exact operation when in flight; resolve conflicting bodies before another request.
CheckoutPayerChanged	Reconcile the final buyer and original private status capability; do not blindly create another sale.
TicketNotFound / CheckInListMismatch	Reject invalid or out-of-scope admission. Repeat scans are a normal `already-checked-in` result.
TicketsBusy	Retry with bounded backoff using the same operation key.

Error recovery

Capacity conflict: refresh authoritative availability and quantity.
Invalid assertion: mint a fresh assertion for the required method. Do not silently drop an asserted buyer into a new guest purchase.
Uncertain hold/payment: retain the original operation key and status capability until reconciled.
Failed callback: repair verification/processing, then redrive the durable delivery.
Repeat scan: show the original already-checked-in timestamp.

Security model

Public	Community event/RSVP records, ticketType/ticketedEvent/checkInList catalog, and policy-gated payment proofs.
Private	Capacity enforcement, holds, issued tickets, attendee/contact data, codes/counters, staff grants, pass secrets, check-ins and lifecycle audit.
App scope	Calling app, environment, module policy and current organizer selling/control authority determine access.
User assertions	Prove private action identity/intent; grant no public repo write.
Presentation and admission	Current moderation can suppress displayed content while the issued entitlement and authorized admission remain valid.

Threat model

Threat	Risk	Primary control
Oversell	Concurrent buyers exceed capacity.	Private transactional holds and issued-ticket rows.
Buyer spoofing	App lies about buyer DID.	Short-lived buyer assertion with aud/lxm/jti checks.
Replay	Duplicate webhook or claim mutates twice.	Delivery ids and idempotency keys before side effects.
QR leakage	Ticket or buyer data leaks from passes.	Opaque scan tokens only; hash secrets privately.
Visibility creep	Apps see unrelated payment or attendee data.	App-scoped events, dashboards, and module permissions.

Security diagrams

App service-auth

App DID mints a short-lived token for an exact Tickets method; ATM verifies issuer, audience, lxm, expiry, signature, and jti.

Organizer assertion

Organizer authorizes the event app to configure ticket types and capacity for a specific event context.

Buyer assertion

Buyer DID assertion binds a signed-in event-app buyer to a hold or free claim without forcing checkout re-auth.

QR verification

Opaque token is checked against private issued-ticket state; check-in mutates once and repeat scans return existing state.

Private/public boundary

Public event and type refs are display/catalog only; holds, issued tickets, scan tokens, attendee answers, and check-ins stay private.

Compliance boundaries

ATM owns payment processing and processor coordination. Event apps own event UX and app-specific fulfillment. Tickets owns scarce ticket truth. Keep those boundaries visible in support, dashboards, and app developer docs.

Actor	Can see	Must not see
Event app	Payments it originated, app fee data, ticket/order status needed for fulfillment.	Organizer KYC, bank details, connected-account ids, or other-app payments.
Organizer	Ticket sales, payouts, disputes, taxes, attendee data needed for the event.	App secrets, app webhook signatures, unrelated app fee routing.
Scanner	Opaque token status, event/type display, check-in result.	Buyer email, payment id, processor id, raw QR secrets.
Public protocol	Safe event, type, ticketed-event and payment proof refs.	Attendee answers, exact counters, check-in logs, customer PII, fraud/risk state.

Data ownership

Events	Community event records and app UX; current event presentation can change without rewriting purchase history.
Catalog	Public ticketType/ticketedEvent/checkInList records plus exact attached Product/default Price refs.
Inventory	Private transactional type/event pools and hold/issued counters.
Buyer data	Private ticket answers, delivery email, assertions and attendee identity.
Payments	ATM ledger plus policy-gated public proofs. Free claims have no payment row; paid-with-Free-coupon orders have $0 rows and no public proof.
Admission	Private revocable pass tokens, ticket status, scanner grants and check-in audit.

Feature map

Atmosphere Tickets can support Hi.Events-style capabilities, but the ownership split should stay sharp: centralized only where ticketing correctness requires it, public/on-protocol where portability helps, and app-owned where UX differs.

Capability	Owner	Notes
Ticket types and capacity	Tickets	Scarce inventory must be transactional and enforced by ATM for authorized seller channels.
Promo codes and private codes	Tickets + ATM	Private code configuration can be portable; redemption counters stay private.
Event SEO and discovery	Event apps	Apps own social discovery, event pages, and product-specific presentation.
Organizer dashboard	Event apps + ATM	Event-specific tools in apps, money/payment controls in ATM.
Order management	Tickets + apps	Ticket status in Tickets; attendee messaging and presentation in apps.
Analytics	ATM + apps	Money ledger in ATM, traffic/social/product analytics in the app.
Affiliate/campaign UX	Apps	Supported catalog refs can connect back to Tickets/ATM for redemption truth.

Lexicon review

Review current record portability and service boundaries: optional catalog refs for free types, exact Product/default Price economics for paid types, private type/event capacity, organizer control independent of app provenance, and assertions kept in POST bodies. Compare the exact copied ATM revision before proposing schema edits.

Use the raw JSON and generated error/field tables. A docs bundle is not proof that namespace publication, runtime deployment or release approval has occurred.

Public review bundle

Share the raw lexicons, generated reference, threat model, integration flow, and open questions when asking the AT Protocol community to review Tickets contracts.

Raw contracts

lexicons/tickets/atmosphere

Record and XRPC schemas for event/type catalog, event capacity, holds, claims, free release, availability and check-in.

Generated reference

docs/generated-reference.json

Machine-readable index for docs and review tools.

Review questions

Privacy and interoperability

Check public/private boundaries, app/user auth, and whether another event app can integrate without private assumptions.

After review

Regenerate docs

Update ATM canonical source, copy generated schemas, regenerate reference, run checks, and record feedback-driven changes.

Glossary

Event app	The app that owns public event pages, discovery, organizer UX, buyer UX, and scanner screens.
Organizer	The user or project receiving ticket revenue and configuring ticketing for an event.
Repo	A user's public AT Protocol repository of signed records, such as event or ticket metadata records.
PDS	Personal Data Server: the service that hosts a user's account and repo.
Service-auth	AT Protocol Inter-Service Authentication: a short-lived JWT scoped to one XRPC method.
Ticket type	A sellable or claimable ticket type for an event.
Capacity pool	A private inventory bucket that one or more ticket types can share.
Hold	A short-lived transactional reservation before checkout or free claim completion.
Issued ticket	The private ticket truth created after payment confirmation or free claim success.
Buyer assertion	A short-lived user service-auth JWT proving the app saw this buyer for this action.
Organizer assertion	A short-lived user service-auth JWT proving the organizer authorized ticket configuration.
Scan token	An opaque private token embedded in a QR code, wallet pass, or scan URL.
Check-in list	The scanner context for verifying and recording entry.