---
title: "Begin a public human Buzz/Nostr identity link"
method: POST
path: "/human-identity-link-challenges/v1"
tags: ["Identity Links"]
---

# Begin a public human Buzz/Nostr identity link

`POST /human-identity-link-challenges/v1`

## Request

- Base URL: `https://api.run402.com`
- URL: `https://api.run402.com/human-identity-link-challenges/v1`
- Auth: HTTP bearer

Requires a direct Run402 human control-plane session and a fresh passkey. Explicitly discloses that completion publicly and durably correlates the human principal with the selected Buzz/Nostr identity. Creates only a five-minute challenge: no authenticator, membership, adoption, or organization authority.

## Headers

- `Idempotency-Key` string, required

## Request body

- HumanIdentityLinkChallengeRequest
  - `nostr_pubkey` string, required: Lowercase 64-character Nostr public key or canonical lowercase npub for the human's selected public Buzz identity.
  - `visibility` 'public', required
  - `disclosure_accepted` true, required: Explicit acceptance that the Run402 human principal and Buzz/Nostr identity will be publicly and durably correlated.

## Response `200`

Exact idempotent challenge retry

- HumanIdentityLinkChallenge
  - `human_identity_link_challenge_id` string, required
  - `proof_protocol` 'run402.identity-link.nostr.human.v1', required
  - `visibility` 'public', required
  - `nostr_pubkey` string, required
  - `npub` string, required
  - `nonce` string, required
  - `verification_code` string, required
  - `origin` string, uri, required
  - `issued_at` string, date-time, required
  - `challenge_expires_at` string, date-time, required
  - `callback_url` string, uri, required
  - `deep_link` string, required
  - `disclosure` object, required
    - `public_correlation` true, required
    - `permanence` 'public_and_durable', required
    - `warning` string, required
  - `next_actions` object[], required

## Other responses

- `201`: Five-minute public-correlation challenge created
- `400`: Invalid key, disclosure, visibility, or Idempotency-Key
- `403`: Direct human session or fresh passkey required (IDENTITY_LINK_REQUIRES_HUMAN_SESSION)
- `409`: Idempotency or active Nostr-subject conflict (the conflicting principal is not disclosed)

---

[API](https://skmtc.dev/run402/apis/run402-api.md) · [All operations](https://skmtc.dev/run402/apis/run402-api/llms.txt) · [OpenAPI document](https://skmtc.dev/run402/apis/run402-api/revisions/893607557f50?raw)