---
title: "Create Allowed Domain"
method: POST
path: "/allowed_domains"
tags: ["Allowed Domains"]
---

# Create Allowed Domain

`POST /allowed_domains`

## Request

- Base URL: `https://api.wistia.com/modern`
- URL: `https://api.wistia.com/modern/allowed_domains`
- Auth: HTTP bearer

Creates an allowed domain for the account.

## Requires api token with one of the following permissions
```
Read, update & delete anything
```

Tokens with the "Act with a team member's permissions" permission
(`all:delegate_to_contact_permissions` scope) can also be used. Requests
made with such a token are authorized using the permissions of the
contact assigned to the token.

An [expiring access token](https://docs.wistia.com/reference/post_expiring-token)
created with the `all:delegate_to_contact_permissions` scope and an
`account` authorization granting the `manage-allowed-domains` permission can
also be used.

## Headers

- `X-Wistia-API-Version` string, required

## Request body

- object
  - `domain` string, required: The domain name to add (www will be automatically stripped)

## Response `200`

Allowed domain created successfully (or already exists)

- object: An allowed domain represents a domain where a Wistia video can be embedded. Account restrictions need to be enabled for an allowed domain to have an effect. See our [Domain Restrictions](https://support.wistia.com/en/articles/9691672-domain-restrictions) guide for more details.
  - `domain` string, required: The allowed domain name.
  - `created_at` string, date-time, required: The date that the allowed domain was originally created.
  - `cursor` string, nullable: A cursor for stable pagination based on current `sort_by` order. You can pass this to `cursor[before]` or `cursor[after]` as a parameter to fetch the records before or after this record in the same sort order. This is only populated if records were fetched with `cursor[enabled]`, or `cursor[before]` or `cursor[after]`.

## Other responses

- `400`: Bad request - missing or invalid domain
- `401`: Unauthorized, invalid or missing token
- `403`: Forbidden, token is valid but account does not have access to feature
- `500`: Internal server error

## Changes

- **2026-11-03** `b86cb2a7b420`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/wistia/apis/data-api/changes/allowed_domains/post.md)

---

[API](https://skmtc.dev/wistia/apis/data-api.md) - [All operations](https://skmtc.dev/wistia/apis/data-api/llms.txt) - [OpenAPI document](https://skmtc.dev/wistia/apis/data-api/revisions/b86cb2a7b420?raw)