Skip to content

Domain.authenticate

Writes your domain’s SPF, DKIM and DMARC records and checks them before its first send.

Action class
None
Approval
Runs on its own
Emits
Domain.authenticated
Price
Free
POST https://api.sb/{your-domain}/domains/{domain}/authenticate

Its Inputs, Outputs, Effects and guards quote the hub’s Domain.authenticate; this page adds what each Venue honors, its limits and a worked call. It is one of the Verbs of Mailboxes.

Inputs

NameTypeMeaning
domainDomainRequired. The sending Domain.
dmarcstringThe DMARC policy; it starts at none with reports and tightens to quarantine. Optional.

Outputs

FieldTypeWhat null means
domainDomainNever null: the Domain, authenticated.

Effects

Action class

None: no approval rule names it, so it runs within its seat’s Permissions and Limits

Modes
  • try: Runs every check and returns the record as it would be; nothing is stored.
  • send: Returns a pending Action at once; Domain.authenticated fires when it is done.
  • do: Waits for the Action to finish and returns the record.
Idempotency

Only with a key: the same Idempotency-Key and input return the first Action, and the same key with other input returns 409.

Saved or shared

Refuses every send from the Domain until all three records verify. Cold outbound sends only from secondary Domains, never the Domain receipts use.

Emits

Domain.authenticated with { domain }

Performed by

Security Engineer

Price

Free on your own account: the platform charges nothing for the call.

On each Venue

It acts on your own records and reaches no Venue, so every account answers the same way.

What try does

Runs every check the call meets and returns the record as it would be; nothing is stored, sent or posted.

Refuses when

The hub sets no guard of its own on this call: it refuses only on the shared checks every write meets (a missing record, a Permission the seat lacks).

When it waits

Returns in one response; nothing waits.

Example

In send mode the call returns its pending Action at once, and Domain.authenticated delivers the result.

You, to your agent
Set up SPF, DKIM and DMARC on tryleaseline.app before the first send.
Response, in send mode
{
  "mode": "send",
  "action": {
    "$id": "https://api.sb/leaseline.app/actions/action_Sd3kQ9vT2w",
    "operation": "Domain.authenticate",
    "status": "pending",
    "reason": "running"
  }
}

To retry, send the same Idempotency-Key: the retry returns the first answer for $0. A new key reads again.

Used by