Verify Service

Add DNS records to verify domain ownership for a third-party service

Adds the correct DNS records (TXT, CNAME) to prove domain ownership to a third-party service. Supports Stripe, Google Search Console, AWS SES, Postmark, Resend, Facebook, HubSpot, and Microsoft 365. Unknown service names fall back to a generic TXT record.

Records are merged with existing DNS - existing records are preserved.

Mail routing: a change to where the domain's mail is delivered (its MX or NS records, the address records an MX host inside the zone resolves through, or those of a host that receives Domani mail and publishes no MX) needs the email:auth_secrets scope, since whoever receives the mail receives its sign-in codes. Without it the request answers 403 INSUFFICIENT_SCOPE before anything changes, and a token confined to mailboxes answers 403 MAILBOX_CONFINED even with it. Other records need only domains:write. Every routing change is recorded in the audit log.

post/api/domains/{domain}/verify-service

Request

  • Base URL: https://domani.run
  • URL: https://domani.run/api/domains/{domain}/verify-service
  • Auth: HTTP bearer

Path parameters

domainstring required
Example:mysite.com

Domain name you own

Request body

servicestring required

Service name (e.g. stripe, google-search-console, aws-ses, postmark, resend, facebook, hubspot, microsoft-365)

tokenstring required

Verification token provided by the service

Example request

{
  "service": "stripe",
  "token": "abc123def456"
}

Response

Verification records added

domainstring
servicestring
service_display_namestring
known_serviceboolean
total_recordsinteger
docsstring uri nullable
hintstring

Example response

{
  "records_added": [
    {
      "name": "@",
      "value": "76.76.21.21",
      "ttl": 3600
    }
  ]
}

Changes

No recorded changes to this operation across all 2 revisions of this API.