Use case

Proxies for Bluesky: rate limits, Jetstream and the rules on accounts

Bluesky limits part of its API per IP, points bulk data to Jetstream, and bars bypassing rate limits and bans. What its docs and guidelines say.

HProxy Team··Updated September 28, 2026·4 min read
HProxy.Use case

Skip the dead lists.

Our free proxy list re-checks every exit every few minutes across 100+ countries, with a live last-checked time, so you copy IPs that worked moments ago, not a stale text dump.

Open the free proxy list→

Google autocomplete around Bluesky asks about the API and its rate limits, scrapers, multiple accounts, VPNs, and the age checks in Mississippi, Texas and the UK. This page answers from the Bluesky rate limit and developer docs, robots.txt, the Community Guidelines, the terms, the privacy policy and the Bluesky blog. We read them on 28 September 2026. The short answer: Bluesky limits part of its API by IP and points bulk readers to Jetstream. Its guidelines bar attempts to bypass rate limits, new accounts made to evade bans, and lying about your age to get past age checks.

The API limits

Bluesky says rate limits keep the network secure, and that they help "limit spammy behavior". Its docs list the limits for accounts it hosts:

  • All API requests: 3,000 per 5 minutes, "Rate limited by IP".
  • Creating an account: 100 per 5 minutes, measured per IP.
  • Signing in: 30 per 5 minutes and 300 per day, measured per account.
  • Writing records: 5,000 points per hour and 35,000 per day per account. So "an account may create at most 1,666 records per hour and 11,666 records per day".

"Requests that cross a limit usually receive an HTTP 429". The docs add that the limits "are likely to evolve over time". For public web reads, Bluesky asks developers to use its cached endpoint, public.api.bsky.app, which has "generous rate-limits".

Why more addresses are not the answer

The guidelines have a rule on site security. It says: "Do not attempt to compromise, exploit, bypass, abuse, or disrupt" the "systems, security features, APIs, rate limits, or infrastructure" of Bluesky.

The developer guidelines define spam too. It includes "Generating automated or bulk interactions" and "Any method to automate generating followers or interactions, including account generation tools".

For data, Bluesky offers its own route. The robots.txt for bsky.app points anyone "considering bulk or automated crawling" to the protocol, "including a firehose of updates". It adds that "Up to a handful concurrent requests" should be fine. The docs say "Jetstream is the easiest way to get data off the AT Protocol network at scale".

Accounts and bans

The terms say: "Do not share your Account with others". The guidelines add rules on accounts:

  • No "Selling, transferring, or sharing accounts".
  • No identity churning, which means changing your account identity to keep followers.
  • "Do not create new accounts or use alternative methods to evade bans, suspensions, or other enforcement actions, or help others do so."

The same rules "do not prevent you from using alternative identities without misleading other users", such as clearly labeled parody or fan accounts.

An appeal against a suspension must be filed within two weeks. Spam alone drew 2.49M reports in 2025, says the Bluesky report for that year.

What Bluesky sees, and the age checks

The privacy policy says Bluesky collects your IP address, "which can be used to derive your general location". On 22 August 2025, Bluesky blocked the app for anyone who accessed it "from a Mississippi IP address", over the state age assurance law. Since its December 2025 update, users there who are 18 or over can use Bluesky by completing age assurance.

The age assurance post lists the other places with checks, from the UK and Australia to Brazil and several US states, with Texas added in July 2026. The Community Guidelines bar "Attempting to bypass age requirements and age assurance processes" by lying about your age or helping others do so. The terms, the guidelines and the privacy policy never mention VPNs or proxies.

What proxy means in the Bluesky docs

In the Bluesky docs, a proxy is part of how the API works. Signed-in requests go to your own server, the PDS. "The PDS validates the session and, if needed, proxies the request to the correct backend." "Proxied requests should include an atproto-proxy header". Search results for "bluesky proxy" also show guides to running that server behind a reverse proxy.

If you use proxies for other work

Nothing on this page routes Bluesky traffic through a proxy. For the basics, see what a residential proxy is, whether free proxies are safe and how to check if a proxy is working. Our free proxy list and proxy checker cost nothing. Our residential, ISP and mobile proxies are on the pricing page, and residential traffic starts at $0.44/GB.

The limits of this page

We did not run a Bluesky account, a bot or a proxy against Bluesky. The docs moved from docs.bsky.app to bsky.network, and we quote the new pages. We did not read the age assurance workaround guides that rank for these searches. Other services on the AT Protocol set their own limits. This page is due for a check by 28 December 2026.

Sources

We read every source below on 28 September 2026.

Frequently asked questions

Does Bluesky rate-limit by IP address?
For part of the API, yes. The rate limit docs cap overall API requests at 3,000 per 5 minutes per IP, and account creation at 100 per 5 minutes per IP. Sign-ins and writes are limited per account. Requests over a limit usually get HTTP 429.
Why does Bluesky say rate limit exceeded when I log in?
Sign-ins count against a limit per account. The docs cap session creation at 30 per 5 minutes and 300 per day for each account, and password resets at 50 per 5 minutes per IP.
Is scraping Bluesky allowed?
Bluesky points bulk readers to its protocol. Its robots.txt suggests the API and the firehose for bulk or automated crawling, and says a handful of concurrent requests should be ok. The docs call Jetstream the easiest way to get data off the network at scale. The Community Guidelines bar attempts to bypass rate limits.
Can I have more than one Bluesky account?
The texts we read set no number. The guidelines allow alternative identities that do not mislead other users, such as clearly labeled parody or fan accounts. They bar selling, transferring or sharing accounts, and new accounts made to evade bans. The developer guidelines count account generation tools as spam.
Why is Bluesky blocked in Mississippi?
From 22 August 2025, Bluesky blocked access from Mississippi IP addresses because of the state age assurance law. Since an update in December 2025, users in Mississippi who are 18 or over can use it by completing age assurance.

Get proxies that are alive right now

Our free proxy list re-checks every exit every few minutes across 100+ countries, with a live last-checked time, so you copy IPs that worked moments ago, not a stale text dump. When the location has to survive a real check, the paid network holds up.

129M+ proxy checks run · 100+ countries · HTTP / HTTPS / SOCKS · re-checked every few minutes · no signup

HProxy.

Honest guides and comparisons on proxies, scraping and staying unblocked, from the team that runs the network.

RSS feed