API ReferenceAdmin Domains
Check Domain Connectivity
POST
/v1/admin/domains/{domain_id}/connectivityProbe the domain's /healthz endpoint through the edge to confirm a
verified domain is actually serving traffic end-to-end (public DNS → CNAME →
edge → app). A point-in-time DIAGNOSTIC — it records the result but NEVER
changes the domain's status: only verified domains are routed and issued a
cert, so connectivity cannot itself be a status gate (that would be circular).
Read-only and not audited — the admin may run it repeatedly; it changes no
trust boundary.
Tenant-scoped, so a cross-tenant id resolves to 404 with no existence leak. The probe resolves-and-pins the target and rejects internal addresses, so a domain cannot be pointed at internal infrastructure to turn this into an SSRF oracle.
Authorization
HTTPBearer AuthorizationBearer <token>
In: header
Path Parameters
domain_id*Domain Id
Format
uuidResponse Body
application/json
application/json
curl -X POST "https://example.com/v1/admin/domains/497f6eca-6276-4993-bfeb-53cbbbba6f08/connectivity"{ "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08", "domain": "string", "status": "string", "txt_verified": true, "cname_verified": true, "txt_verified_at": "2019-08-24T14:15:22Z", "cname_verified_at": "2019-08-24T14:15:22Z", "connectivity_ok": true, "connectivity_checked_at": "2019-08-24T14:15:22Z", "created_at": "2019-08-24T14:15:22Z", "txt_record": { "type": "TXT", "name": "string", "value": "string" }, "cname_record": { "type": "TXT", "name": "string", "value": "string" }, "urls": { "issuer": "string", "oidc_discovery": "string", "jwks": "string", "saml_metadata": "string", "scim_base": "string" }, "reachable": true, "status_code": 0, "message": "string"}{ "detail": [ { "loc": [ "string" ], "msg": "string", "type": "string", "input": null, "ctx": {} } ]}