Domains

Verify your sending domain. Mailgrid provisions DKIM at SES and validates DKIM/SPF/DMARC via DNS-over-HTTPS.

Verify a domain

POST /api/domains/verify

Scopes: domains:write

body

{ "domain": "yourdomain.com" }

Response

200 OK

{
  "success": true,
  "data": {
    "domain": "yourdomain.com",
    "tokens": ["abc...","def...","ghi..."],
    "verifiedForSending": false,
    "records": [
      { "type": "CNAME", "name": "abc._domainkey...", "value": "abc.dkim.amazonses.com" },
      ...
    ]
  }
}

Add the three CNAMEs at your DNS provider as DNS-only (no proxying). SES verifies within ~5 min once they resolve.

Get domain status

GET /api/domains/:domain

Returns SES verification state + DKIM/SPF/DMARC validation results from a live DNS lookup via Cloudflare 1.1.1.1.

CNAME proxy gotcha

If you put DKIM CNAMEs behind Cloudflare's orange-cloud proxy, the proxy rewrites the response and DKIM signatures break. Always set DKIM records to "DNS only" (grey cloud).