Menu

Expand
Rate this page:

Domain Authentication

An authenticated domain allows you to remove the “via” or “sent on behalf of” message that your recipients see when they read your emails. Authenticating a domain allows you to replace sendgrid.net with your personal sending domain. You will be required to create a subdomain so that SendGrid can generate the DNS records which you must give to your host provider. If you choose to use Automated Security, SendGrid will provide you with 3 CNAME records. If you turn Automated Security off, you will get 2 TXT records and 1 MX record.

Domain Authentication was formerly called "Domain Whitelabel".

For more information, please see How to set up domain authentication.

Each user may have a maximum of 3,000 authenticated domains and 3,000 link brandings. This limit is at the user level, meaning each Subuser belonging to a parent account may have its own 3,000 authenticated domains and 3,000 link brandings.

List all authenticated domains

GET /v3/whitelabel/domains

Base url: https://api.sendgrid.com

This endpoint allows you to retrieve a paginated list of all domains you have authenticated.

You can use the limit query parameter to set the page size. If your list contains more items than the page size permits, you can make multiple requests. Use the offset query parameter to control the position in the list from which to start retrieving additional items.

Authentication

  • API Key

Headers

Authorization
string
default: Bearer <<YOUR_API_KEY_HERE>>
required
on-behalf-of
string

The on-behalf-of header allows you to make API calls from a parent account on behalf of the parent's Subusers or customer accounts. You will use the parent account's API key when using this header. When making a call on behalf of a customer account, the property value should be "account-id" followed by the customer account's ID (e.g., on-behalf-of: account-id <account-id>). When making a call on behalf of a Subuser, the property value should be the Subuser's username (e.g., on-behalf-of: <subuser-username>). See On Behalf Of for more information.

default: None

Query String

limit
integer

limit sets the page size, i.e. maximum number of items from the list to be returned for a single API request. If omitted, the default page size is used.

default: None
offset
integer

The number of items in the list to skip over before starting to retrieve the items for the requested page. The default offset of 0 represents the beginning of the list, i.e. the start of the first page. To request the second page of the list, set the offset to the page size as determined by limit. Use multiples of the page size as your offset to request further consecutive pages. E.g. assume your page size is set to 10. An offset of 10 requests the second page, an offset of 20 requests the third page and so on, provided there are sufficiently many items in your list.

default: 0
exclude_subusers
boolean

Exclude subuser domains from the result.

default: None
username
string

The username associated with an authenticated domain.

default: None
domain
string

Search for authenticated domains.

default: None

Responses

array[object]
id
number

The ID of the authenticated domain.

required
user_id
number

The ID of the user that this domain is associated with.

required
subdomain
string

The subdomain to use for this authenticated domain.

required
domain
string

The domain to be authenticated.

required
username
string

The username that this domain will be associated with.

required
ips
array[string]

The IPs to be included in the custom SPF record for this authenticated domain.

required
custom_spf
boolean

Indicates whether this authenticated domain uses custom SPF.

required
default
boolean

Indicates if this is the default authenticated domain.

required
legacy
boolean

Indicates if this authenticated domain was created using the legacy whitelabel tool. If it is a legacy whitelabel, it will still function, but you'll need to create a new authenticated domain if you need to update it.

required
automatic_security
boolean

Indicates if this authenticated domain uses automated security.

required
valid
boolean

Indicates if this is a valid authenticated domain.

required
dns
object

The DNS records used to authenticate the sending domain.

required
mail_cname
object

The CNAME for your sending domain that points to sendgrid.net.

required
valid
boolean

Indicates if this is a valid CNAME.

required
type
string

The type of DNS record.

required
host
string

The domain that this CNAME is created for.

format: hostname
required
data
string

The CNAME record.

required
dkim1
object

A DNS record.

required
valid
boolean

Indicates if this is a valid DNS record.

required
type
string

The type of DNS record.

required
host
string

The domain that this DNS record was created for.

required
data
string

The DNS record.

required
dkim2
object

A DNS record.

required
valid
boolean

Indicates if this is a valid DNS record.

required
type
string

The type of DNS record.

required
host
string

The domain that this DNS record was created for.

required
data
string

The DNS record.

required
subusers
array[object]
user_id
integer

The ID of the subuser that this authenticated domain will be associated with.

username
string

The username of the subuser that this authenticated domain is associated with.

last_validation_attempt_at
integer

A Unix epoch timestamp representing the last time of a validation attempt.

[
  {
    "id": 1,
    "user_id": 7,
    "subdomain": "mail",
    "domain": "example.com",
    "username": "jane@example.com",
    "ips": [
      "192.168.1.1",
      "192.168.1.2"
    ],
    "custom_spf": true,
    "default": true,
    "legacy": false,
    "automatic_security": true,
    "valid": true,
    "dns": {
      "mail_cname": {
        "valid": true,
        "type": "cname",
        "host": "mail.example.com",
        "data": "u7.wl.sendgrid.net"
      },
      "dkim1": {
        "valid": true,
        "type": "cname",
        "host": "s1._domainkey.example.com",
        "data": "s1._domainkey.u7.wl.sendgrid.net"
      },
      "dkim2": {
        "valid": true,
        "type": "cname",
        "host": "s2._domainkey.example.com",
        "data": "s2._domainkey.u7.wl.sendgrid.net"
      }
    }
  },
  {
    "id": 2,
    "user_id": 8,
    "subdomain": "new",
    "domain": "example2.com",
    "username": "john@example2.com",
    "ips": [],
    "custom_spf": false,
    "default": true,
    "legacy": false,
    "automatic_security": true,
    "valid": false,
    "dns": {
      "mail_cname": {
        "valid": false,
        "type": "mx",
        "host": "news.example2.com",
        "data": "sendgrid.net"
      },
      "dkim1": {
        "valid": false,
        "type": "txt",
        "host": "example2.com",
        "data": "k=rsa; t=s; p=publicKey"
      },
      "dkim2": {
        "valid": false,
        "type": "txt",
        "host": "example2.com",
        "data": "k=rsa; t=s p=publicKey"
      }
    }
  }
]

Retrieving paginated results

To perform a request for the first page of the paginated list of all authenticated domains using the default page size, you can omit the limit and offset query parameters:

Loading Code Sample...
        
        

        Retrieve first page from list of all authenticated domains

        If you want to specify a page size of your choice, you can use the limit query parameter. Assume you want a page size of no more than 5 items per request, to retrieve the first page you can use the limit parameter without specifying an offset:

        Loading Code Sample...
              
              
              Setting page size to 5 using the limit query parameter

              Retrieve first page from list of all authenticated domains with a specified page size

              Setting page size to 5 using the limit query parameter

              If you want to retrieve items beyond the first page, you can use the offset parameter as follows. Assume you are still working with a page size of 5 as determined by your limit query parameter and you have more than 15 items. To request the fourth page of items, you can use the offset parameter to skip over the first 15 items, i.e. you start retrieving items starting after the first three pages of 5 items each:

              Loading Code Sample...
                    
                    
                    Using the offset query parameter in combination with the limit query parameter

                    Retrieve a specific page from the list of all authenticated domains

                    Using the offset query parameter in combination with the limit query parameter
                    Rate this page:

                    Need some help?

                    We all do sometimes. Get help now from the Twilio SendGrid Support Team.

                    Running into a coding hurdle? Lean on the wisdom of the crowd by browsing the SendGrid tag on Stack Overflow or visiting Twilio's Stack Overflow Collective.

                    Loading Code Sample...
                          
                          
                          

                          Thank you for your feedback!

                          Please select the reason(s) for your feedback. The additional information you provide helps us improve our documentation:

                          Sending your feedback...
                          🎉 Thank you for your feedback!
                          Something went wrong. Please try again.

                          Thanks for your feedback!

                          thanks-feedback-gif