Domains

You must add and verify a domain before sending email from it. Verification requires DNS records for DKIM and SPF (and optionally DMARC).

Domain object

{
  "id": "a1b2c3d4-...",
  "domain": "yourdomain.com",
  "verified": false,
  "dkimStatus": "pending",
  "spfStatus": "pending",
  "dmarcStatus": "pending",
  "createdAt": "2026-01-05T10:00:00Z"
}

Status values: pending · valid · invalid

List domains

curl -X GET 'https://api.sendbound.com/domains' \
  -H 'Authorization: Bearer <your-token>' \
  -H 'Content-Type: application/json'

Returns all sending domains for your project.

Add a domain

curl -X POST 'https://api.sendbound.com/domains' \
  -H 'Authorization: Bearer <your-token>' \
  -H 'Content-Type: application/json' \
  -d '{ "domain": "yourdomain.com" }'

The response includes the DNS records to add at your registrar. The DKIM selector (e.g. t4xzal) is generated uniquely for your domain — copy the exact value from the response, not from this guide:

{
  "id": "a1b2c3d4-...",
  "domain": "yourdomain.com",
  "verified": false,
  "dnsRecords": [
    {
      "type": "TXT",
      "host": "t4xzal._domainkey.yourdomain.com",
      "value": "v=DKIM1; t=s; h=sha256; p=MIGfMA0GCSqGS..."
    },
    {
      "type": "TXT",
      "host": "yourdomain.com",
      "value": "v=spf1 include:spf.sendbound.com ~all"
    }
  ]
}

Retrieve a domain

curl -X GET 'https://api.sendbound.com/domains/:id' \
  -H 'Authorization: Bearer <your-token>' \
  -H 'Content-Type: application/json'

Returns the domain record including current verification status.

Verify a domain

curl -X GET 'https://api.sendbound.com/domains/:id/verify' \
  -H 'Authorization: Bearer <your-token>' \
  -H 'Content-Type: application/json'

Triggers a live DNS check and updates dkimStatus, spfStatus, and dmarcStatus. Call this after adding your DNS records to confirm they have propagated.

{
  "isVerified": true,
  "dkimStatus": "valid",
  "spfStatus": "valid",
  "dmarcStatus": "valid"
}

Delete a domain

curl -X DELETE 'https://api.sendbound.com/domains/:id' \
  -H 'Authorization: Bearer <your-token>' \
  -H 'Content-Type: application/json'

Removing a domain will cause any sends using that from address to fail. Returns 204 No Content.