CUSTOM DOMAIN
Features
Everything you need to offer custom domains
Twelve features in five groups, from the first connect to fleet-scale operations. All of it fully managed for you.
01
Connect
Get theirbrand.com pointed at you, whatever provider it lives on.
Automatic DNS setup
Detects the customer's DNS provider and writes the records across 25+ providers, OAuth, a signed provider-hosted one-click setup, your own token, or guided manual. Four paths, one outcome.
How it works →Guided manual fallback
When no automatic path is available, the customer gets exact records to paste, and the propagation poller confirms them the moment they land.
How it works →Ownership verification
A domain goes live only after a value-checked DNS challenge or provider consent proves the customer actually controls it.
How it works →02
Serve & Secure
Terminate TLS and route the traffic. The API is never in the request path.
Automatic HTTPS
Certificates (Let's Encrypt) issue on demand during the first TLS handshake and renew themselves. An unapproved hostname gets no certificate, the edge fails closed.
How it works →Reverse-proxy edge
Customer traffic on the connected domain terminates at the edge and routes to your origin, a separate plane from the API, scaled independently.
How it works →03
Steward
Keep every connected domain healthy long after the first connect.
Monitor & drift detection
Hourly checks catch a domain that's drifted off its expected records or certificate before your customer notices. Drift detection is standard on every plan; fleet-scale monitoring policies and alerting come with Premium.
How it works →Multi-tenant isolation
Every tenant is isolated from day one; per-tenant API keys and customer secrets are sealed at rest.
How it works →04
Operate
Run it as a team, in a console and over an API.
Dashboard & API
A clean console for humans and a REST API for machines. Integrate once, offer domains to everyone.
How it works →Webhooks
connection.created, connection.live, record_missing, record_restored, durable, at-least-once delivery, so your app always knows the state.
How it works →Team roles & RBAC
Invite teammates with scoped roles, Admin, Billing, and read-only, instead of sharing one login.
How it works →05
Extend
Put the connect flow wherever your users are, including agents.
Embeddable connect widget
A drop-in flow with live provider detection, as the customer types their domain, it shows their DNS host and drives the best connection path automatically.
How it works →MCP for agents
An 11-tool MCP server lets AI agents search, connect, and manage domains on a user's behalf.
How it works →