---
title: "Platform operators: domain orders (\"open\": what may need you; \"manual\": paid orders to register by hand)"
method: GET
path: "/operator/domain-orders"
tags: ["Operator"]
---

# Platform operators: domain orders ("open": what may need you; "manual": paid orders to register by hand)

`GET /operator/domain-orders`

## Request

- Base URL: `https://hostingsurge.com/api/v1`
- URL: `https://hostingsurge.com/api/v1/operator/domain-orders`
- Auth: one of:
  - HTTP bearer
  - API key in cookie `__Host-hs_session`

## Query parameters

- `status` 'open' | 'manual' | 'awaiting_payment' | 'paid' | 'registering' | 'registered' | 'failed' | 'refunded' | 'cancelled' | 'all'
- `limit` integer
- `offset` integer, nullable

## Response `200`

Orders

- object
  - `items` object[], required
    - `id` string, uuid, required
    - `domain` string, required
    - `tld` string, required
    - `kind` 'register' | 'renew' | 'transfer', required
    - `years` integer, required
    - `status` 'awaiting_payment' | 'paid' | 'registering' | 'registered' | 'failed' | 'refunded' | 'cancelled', required
    - `fulfillment` 'dynadot' | 'manual', required
    - `amount` integer, required: integer minor units of `currency` (cents, öre)
    - `renewAmount` integer, required: integer minor units of `currency` (cents, öre)
    - `currency` string, required: lowercase ISO 4217 code, e.g. usd or sek
    - `whoisPrivacy` boolean, required
    - `autoRenew` boolean, required
    - `projectId` string, uuid, nullable, required
    - `paymentUrl` string, nullable, required: where to pay while it awaits payment (a Stripe-hosted invoice), when there is one
    - `waitingFor` 'payment' | 'registrar' | 'operator' | 'dns' | 'nothing', required: payment: pay it (without a payment link our team contacts you with the payment details); registrar: being registered now; operator: being registered by our team, usually within 24 h; dns: registered, its DNS and HTTPS are being connected; nothing: done or ended
    - `statusDetail` string, nullable, required
    - `paidAt` string, nullable, required: ISO-8601 timestamp
    - `registeredAt` string, nullable, required: ISO-8601 timestamp
    - `expiresAt` string, nullable, required: ISO-8601 timestamp
    - `connectedAt` string, nullable, required: ISO-8601 timestamp
    - `createdAt` string, required: ISO-8601 timestamp
    - `organizationId` string, uuid, required
    - `organizationName` string, nullable, required
    - `createdByEmail` string, nullable, required
    - `contact` object, nullable, required
      - `name` string, required: the person who owns the name (or the contact person of the organization)
      - `organization` string, nullable
      - `email` string, email, required
      - `phone` string, required
      - `address1` string, required
      - `address2` string, nullable
      - `city` string, required
      - `state` string, nullable
      - `zip` string, required
      - `country` string, required
      - `idNumber` string, nullable: Swedish personal identity number or organization number: the .se registry requires it (other TLDs ignore it)
    - `hasAuthCode` boolean, required
    - `payment` 'stripe' | 'operator' | 'null', nullable, required
    - `attempts` integer, required
    - `refundedAt` string, nullable, required: ISO-8601 timestamp
    - `dnsRecords` object[], required: the records the name needs at its registrar to serve here (set automatically at Dynadot)
      - `type` string, required
      - `name` string, required
      - `value` string, required
  - `total` integer, required
  - `limit` integer, required
  - `offset` integer, required
  - `counts` object, required

## Other responses

- `400`: Invalid request (code invalid_request); details.reason says what to fix
- `401`: Missing or invalid session/token (code unauthorized)
- `403`: Authenticated but not permitted (code forbidden); operator writes may need a fresh session (details.reauthenticate)
- `404`: Not found or not visible to the caller (code not_found)
- `409`: Conflicting state (code conflict): details.reason taken, premium, owned, pending_order, price_changed, dns_changed (reload the records), dns_busy, dns_not_here, conflicting_records (details.records), …
- `429`: Too many searches or DNS requests (code rate_limited); see Retry-After
- `501`: Not set up on this server (code not_configured), e.g. no registrar key yet
- `503`: The registrar did not answer (code provider_unavailable)

---

[API](https://skmtc.dev/hostingsurge/apis/hostingsurge-platform-api.md) · [All operations](https://skmtc.dev/hostingsurge/apis/hostingsurge-platform-api/llms.txt) · [OpenAPI document](https://skmtc.dev/hostingsurge/apis/hostingsurge-platform-api/revisions/4d08337cdff1?raw)