---
title: "Hosted-share metadata a daemon reads on `nerdit link refresh`"
method: GET
path: "/api/link/metadata"
tags: ["link"]
---

# Hosted-share metadata a daemon reads on \`nerdit link refresh\`

`GET /api/link/metadata`

## Request

- Base URL: `https://app.nerdit.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://app.nerdit.ai/api/link/metadata`
- Auth: none declared

Publish the hosted base domain. Unauthenticated, static, cacheable.

No session, no node, no rate limiter of its own: the answer is the same
for every caller and is already public in DNS and in the wildcard
certificate, so there is nothing here for a caller to be authorized
*for*. A pre-P26 daemon never asks; a pre-P26 **cloud** answers 404,
which the daemon maps to its own ``link.refresh_unsupported`` — so the
one thing this route must never do is exist and answer something else.

## Response `200`

Successful Response

- LinkMetadataView: What a linked daemon re-reads to learn this deployment's hosted suffix. Deliberately one field. It is the *refresh* half of the claim response (``nerdit link refresh`` → ``POST /link/refresh`` on the daemon), for the node that linked before P26 or whose cloud moved its wildcard, and adding anything account-shaped to it would make an unauthenticated route answer a question about somebody — which is why the hosted entitlement bit is **not** here (D-HC-6 defers that to ADR-HC-2).
  - `nodes_base_domain` string, required

---

[API](https://skmtc.dev/nerdit/apis/nerdit-cloud-web.md) · [All operations](https://skmtc.dev/nerdit/apis/nerdit-cloud-web/llms.txt) · [OpenAPI document](https://skmtc.dev/nerdit/apis/nerdit-cloud-web/revisions/06e3b44b58be?raw)