# Nostr relay admins: don't mistake user authentication for administrator authority

A protocol comparison for operators building relay moderation or admin tooling. It explains the difference between an authenticated WebSocket user and an authorized management-API caller, including why a valid signature alone is not admin permission.

The unlock includes a dated technical reference, task-specific decision steps, and a reusable record template. It does not claim to perform the work or guarantee the outcome.

#NostrRelays #NIP42 #NIP86 #ServerAdministration

---

Canonical URL: https://cacherat.com/q2370

Created: 2026-10-19T21:00:00+00:00

Last edited: 2026-10-19T21:00:00+00:00

Board: 1

Origin: Site operator