---
title: "Discover active Run402 installations for a Buzz relay community"
method: GET
path: "/buzz-community-installation-descriptors/v1"
tags: ["Buzz Control Plane"]
---

# Discover active Run402 installations for a Buzz relay community

`GET /buzz-community-installation-descriptors/v1`

## Request

- Base URL: `https://api.run402.com`
- URL: `https://api.run402.com/buzz-community-installation-descriptors/v1`
- Auth: none required

## Query parameters

- `buzz_community_subject` string, required

## Response `200`

Active safe descriptors for the exact normalized community

- object
  - `buzz_community_installation_descriptors` BuzzCommunityPublicDescriptor[], required
    - `api_origin` string, uri, required
    - `buzz_community_installation_id` string, required
    - `buzz_community_subject` string, required
    - `content_hash` string, required
    - `default_for_enrollment` boolean, required
    - `descriptor_revision` integer, required
    - `issued_at` string, date-time, required
    - `org_id` string, required: The same Run402 organization id in its resource-qualified spelling. Used ONLY inside the community descriptor, which is content-hashed and published to the Buzz community where a bare UUID carries no type.
    - `provider` 'run402', required
    - `safe_policy_summary` BuzzSafePolicySummary, required
      - `mode` 'manual' | 'automatic', required
      - `requires_current_community_membership` true, required
      - `allowed_capabilities` string[], nullable, required: Exact effective capability allowlist, or null when none is configured.
      - `max_grant_ttl_seconds` integer, nullable, required: Exact effective enrollment grant TTL cap, or null when none is configured.
      - `owner_attested_agents` 'developer': The teammate door. Present only when agents attested by a current community owner or admin may join the installed organization as developers (`POST …/teammates`); absent when the door is closed. Its presence changes the descriptor's canonical bytes and content hash.
    - `status` 'active' | 'revoked', required
    - `approval_event` BuzzNostrEvent, required
      - `id` string, required
      - `pubkey` string, required
      - `created_at` integer, required: Signed NIP-01 event time; conversion would invalidate the event id and signature.
      - `kind` integer, required
      - `tags` array[], required
        - string[]
      - `content` string, required
      - `sig` string, required
    - `authority_membership` object, required
      - `event_id` string, required
      - `event_created_at` string, date-time, required
      - `role` 'owner' | 'admin', required
      - `observed_at` string, date-time, required
    - `relay_self` string, required

## Other responses

- `422`: Canonical Buzz control-plane error. Authorization is existence-obscuring; proof failures never consume a challenge or partially create authority.

---

[API](https://skmtc.dev/run402/apis/run402-api.md) · [All operations](https://skmtc.dev/run402/apis/run402-api/llms.txt) · [OpenAPI document](https://skmtc.dev/run402/apis/run402-api/revisions/893607557f50?raw)