Docker meets the decentralized web
ATCR is an OCI-compliant container registry built on the AT Protocol. Push and pull Docker images using your Bluesky identity.
How It Works
The Simple Version
Push and pull container images just like any registry. The difference? Your image metadata lives in your AT Protocol account, not a corporate database. Your Bluesky handle becomes your namespace.
Manifests (small JSON metadata describing your images) are stored as AT Protocol records in your Personal Data Server (PDS). This means you own them.
Blobs (the actual image layers) are stored in S3-compatible object storage. You can use our default storage or bring your own.
The AppView (atcr.io) resolves your identity, routes requests, and speaks the OCI Distribution API that Docker understands.
Why Decentralized?
Own Your Data
Your image manifests are stored in your PDS, not our database. You control your data. You can export or migrate it anytime.
Portable Identity
Your Bluesky handle is your namespace. No separate registry account needed. Your identity follows you across the AT Protocol ecosystem.
Bring Your Own Storage
Use our default storage or deploy your own hold service. Connect your own S3, Storj, Minio, or other compatible storage.
Open & Auditable
Built on open protocols. Fully OCI-compliant. The source is public. Inspect everything.
Architecture Overview
Docker Client
Push & Pull
AppView
atcr.io
Your PDS
Manifests
Hold Service
Blobs
The AppView speaks OCI to Docker and ATProto to your PDS. Manifests go to your account. Blobs go to storage.
Ready to Get Started?
Install the credential helper and start pushing images in minutes. All you need is a Bluesky account.