# Verify Tracking Domain

> Re-check DNS and certificate status for a tracking domain.

Requires an API key with the `write` scope.

There is no request body. The domain becomes `active` when the hostname and its certificate are both active. Call it again after DNS has had time to propagate.

## Path Parameters

<ParamField path="domain_id" type="string" required>
  The tracking domain identifier.
</ParamField>

## Response

<ResponseField name="data" type="object">
  The tracking domain with its refreshed status.

  <Expandable title="data">
    <ResponseField name="id" type="string">Tracking domain identifier.</ResponseField>
    <ResponseField name="domain" type="string">The tracking subdomain.</ResponseField>
    <ResponseField name="status" type="string">`pending`, `verifying`, `active` or `failed`.</ResponseField>
    <ResponseField name="cnameTarget" type="string">The hostname to point your CNAME record at.</ResponseField>
    <ResponseField name="sslStatus" type="string">Certificate status, for example `pending_validation` or `active`. `null` until provisioning has run.</ResponseField>
    <ResponseField name="failureReason" type="string">Why provisioning or verification failed, or `null`.</ResponseField>
    <ResponseField name="verifiedAt" type="string">ISO 8601 timestamp, or `null`.</ResponseField>
    <ResponseField name="lastCheckedAt" type="string">ISO 8601 timestamp, or `null`.</ResponseField>
    <ResponseField name="createdAt" type="string">ISO 8601 timestamp.</ResponseField>
  </Expandable>
</ResponseField>

<RequestExample>
```bash cURL
curl -X POST "https://api.foxreach.io/api/v1/tracking-domains/trk_abc123/verify" \
  -H "X-API-Key: otr_your_key"
```

```python Python SDK (beta)
from foxreach import FoxReach

client = FoxReach(api_key="otr_your_key")
domain = client.tracking_domains.verify("trk_abc123")
```

```typescript TypeScript SDK (beta)
import { FoxReach } from "foxreach";

const client = new FoxReach({ apiKey: "otr_your_key" });
const domain = await client.trackingDomains.verify("trk_abc123");
```
</RequestExample>

<ResponseExample>
```json
{
  "data": {
    "id": "trk_abc123",
    "domain": "track.yourcompany.com",
    "status": "active",
    "cnameTarget": "cname.foxtrk.com",
    "sslStatus": "active",
    "failureReason": null,
    "verifiedAt": "2026-10-31T10:20:00",
    "lastCheckedAt": "2026-10-31T10:20:00",
    "createdAt": "2026-10-31T10:00:00"
  }
}
```
</ResponseExample>

## Errors

| Status | Description |
|--------|-------------|
| `401` | Missing, invalid, revoked or expired API key |
| `403` | API key does not have the required scope: `write` |
| `404` | `Tracking domain not found`, or it belongs to another workspace |
| `501` | `Custom tracking domains are not enabled on this environment.` |

## Rate Limit

- **100 requests per minute, per API key.** Fixed 60-second window.
- Every response includes `X-RateLimit-Limit`, `X-RateLimit-Remaining`, and `X-RateLimit-Reset` (unix epoch seconds).
- A `429` response includes a `Retry-After` header (seconds until the bucket resets).

For client-side patterns (`Retry-After`, exponential backoff, monitoring `X-RateLimit-Remaining`), see [Rate Limiting](/rate-limiting).