---
title: "Request domain verification token"
method: POST
path: "/v1/merchants/{id}/domain-verification"
tags: ["Merchant Setup"]
---

# Request domain verification token

`POST /v1/merchants/{id}/domain-verification`

## Request

- Base URL: `https://api.insumermodel.com`
- URL: `https://api.insumermodel.com/v1/merchants/{id}/domain-verification`
- Auth: API key in header `X-API-Key`

Generates a verification token for proving domain ownership. The token can be placed via DNS TXT record, HTML meta tag, or a verification file. Each POST regenerates the token, invalidating any previous one. Only the API key that created the merchant can call this.

## Path parameters

- `id` string, required

## Request body

- object
  - `domain` string, required: Domain to verify (e.g. example.com). No protocol prefix.

## Response `200`

Verification token generated

- object
  - `ok` true
  - `data` object
    - `domain` string
    - `token` string: Verification token (insumer-XXXXXXXXXXXXXXXX)
    - `methods` object
      - `dns` object
        - `type` string
        - `host` string
        - `value` string
        - `instructions` string
      - `meta` object
        - `tag` string
        - `instructions` string
      - `file` object
        - `path` string
        - `content` string
        - `instructions` string
  - `meta` Meta
    - `version` string
    - `timestamp` string, date-time

## Other responses

- `400`: Invalid domain format or missing domain
- `401`: Invalid or missing API key
- `403`: API key does not own this merchant
- `404`: Merchant not found
- `429`: Rate limit exceeded. API-key requests count against the key's daily limit; every authenticated response carries X-RateLimit-Limit and X-RateLimit-Remaining headers, and a 429 additionally carries Retry-After (seconds until the window resets).
- `500`: Unexpected server error. Safe to retry; no credits are charged on a 500. Router endpoints return the standard error envelope; standalone endpoints (the ones whose 200 is a flat object) return a flat {"error": "..."} object.

---

[API](https://skmtc.dev/insumermodel/apis/insumerapi.md) · [All operations](https://skmtc.dev/insumermodel/apis/insumerapi/llms.txt) · [OpenAPI document](https://skmtc.dev/insumermodel/apis/insumerapi/revisions/91f56fe9e3d8?raw)