---
title: "Whitelabel Domain Check"
method: GET
path: "/whitelabel/domain-check"
tags: ["White-Label"]
---

# Whitelabel Domain Check

`GET /whitelabel/domain-check`

## Request

- Base URL: `https://api.muapi.ai`
- URL: `https://api.muapi.ai/whitelabel/domain-check`
- Auth: one of:
  - API key in header `x-api-key`
  - OAuth 2 (client credentials, token URL `https://api.muapi.ai/oauth/token`)

Cert-issuance gate for Caddy's on-demand TLS `ask` callback.

Caddy calls this before requesting a Let's Encrypt cert for a hostname it has never
seen before; a non-200 response means "don't issue a cert for this domain." Only a
domain that's passed our own DNS TXT verification (see whitelabel_owner_router's
check_custom_domain_txt_record) is eligible, so a stranger pointing an unrelated
domain at our IP can't get us to burn Let's Encrypt's per-domain rate limit on their behalf.

## Query parameters

- `domain` string, required

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/muapi/apis/muapi-api.md) · [All operations](https://skmtc.dev/muapi/apis/muapi-api/llms.txt) · [OpenAPI document](https://skmtc.dev/muapi/apis/muapi-api/revisions/e4b7374381e5?raw)
