---
title: "Mail a 6-digit code to an address at the domain of the website you want to submit"
method: POST
path: "/api/domain-proof/start"
---

# Mail a 6-digit code to an address at the domain of the website you want to submit

`POST /api/domain-proof/start`

## Request

- Base URL: `https://citedindex.com`
- URL: `https://citedindex.com/api/domain-proof/start`
- Auth: one of:
  - API key in cookie `__Secure-better-auth.session_token`
  - HTTP bearer

The first step past a 403 domain_unverified from /api/submit. Requires the same verified session. The address must be on the website's domain (a personal mailbox never is). Answers {proofId, sentTo, domain, alreadyVerified}; alreadyVerified:true means this account had proven the domain already and no mail was sent. Codes expire after 30 minutes; sends are capped per address and per account per day.

## Request body

- object
  - `url` string, required: The website being submitted.
  - `email` string, email, required: An address at that website's domain.

## Response `200`

Code sent (or the domain was already proven).

- object

## Other responses

- `400`: Invalid url or email, or the address is not on the website's domain.
- `401`: Sign in first.
- `403`: Unverified account email, or a blocked identity.
- `429`: Too many codes requested.

---

[API](https://skmtc.dev/citedindex/apis/citedindex-machine-api.md) · [All operations](https://skmtc.dev/citedindex/apis/citedindex-machine-api/llms.txt) · [OpenAPI document](https://skmtc.dev/citedindex/apis/citedindex-machine-api/revisions/740d47062580?raw)