Add a domain to prove. It starts as pending, with its TXT record.

Organization admins only (403 organization_admin_required). Signed in, with a fresh proof in the x-50h-reauth header (401 reauth_required); with an API key, a connected app or a service account, with the scope named here and no proof, where the organization has machine identities (otherwise 403 session_required). The key's or app's person must be an organization admin. Every change is written to the organization's audit, with who made it (a person, a key, an app or a service account). The exact domain only: example.com covers addresses @example.com, not @mail.example.com and never @evil-example.com. Public suffixes (co.uk), free email providers and disposable email domains are refused with domain_not_allowed. Up to 20 domains.