---
title: "Retry a failed MTA-STS setup"
method: POST
path: "/domains/{domainId}/mta-sts/retry"
tags: ["MtaSts"]
---

# Retry a failed MTA-STS setup

`POST /domains/{domainId}/mta-sts/retry`

## Request

- Base URL: `https://api.palisade.email`
- URL: `https://api.palisade.email/domains/{domainId}/mta-sts/retry`
- Auth: one of:
  - HTTP bearer
  - HTTP basic

Requests a fresh certificate for mta-sts.{domain} after a failed setup. The domain must already have MTA-STS hosting enabled, must currently be in the error state, and must be publishing the mta-sts CNAME, otherwise the retry is refused with an explanation. A setup still in progress is refused rather than restarted. Returns the domain unchanged when its certificate is already active.

## Path parameters

- `domainId` string, uuid, required

## Headers

- `Palisade-Version` '2025-04-30' | 'unstable', required

## Response `200`

Success

- MtaSts
  - `is_managed` boolean, required
  - `status` 'unknown' | 'syncing' | 'ready' | 'error', nullable, required
  - `mode` 'testing' | 'enforce' | 'none', nullable, required
  - `max_age` number, nullable, required
  - `mx` string[], nullable, required
  - `policy_id` string, nullable, required
  - `custom_hostname_id` string, nullable, required
  - `cname_target` string, required
  - `txt_cname_target` string, required
  - `tls_reporting_email` string, nullable, required
  - `tls_rpt_record` string, nullable, required

---

[API](https://skmtc.dev/palisade/apis/palisade-api.md) · [All operations](https://skmtc.dev/palisade/apis/palisade-api/llms.txt) · [OpenAPI document](https://skmtc.dev/palisade/apis/palisade-api/revisions/aabc77d12934?raw)