Domains API

Last updated: September 8, 2026

Every request requires an Authorization: Bearer <token> header, see Authentication. All requests are scoped to your own organization's domains.

GET/v1/domainsList the current organization's domains

POST/v1/domainsCreate a domain — body: { "url": "https://example.com" }

GET/v1/domains/:idA single domain (includes verifyToken, apiKey, bannerConfig)

POST/v1/domains/:id/verifyVerify ownership via .well-known/cookiebot.txt

PATCH/v1/domains/:id/banner-configPartially update the banner configuration

DELETE/v1/domains/:idDelete a domain

Creating a domain

curl -X POST https://api.cookiestack.dev/v1/domains \
  -H "Authorization: Bearer eyJhbGciOi..." \
  -H "Content-Type: application/json" \
  -d '{"url":"https://example.com"}'

The URL must point to a real, publicly reachable host — local and private addresses are rejected. The number of domains is limited by the organization's plan; going over the limit returns an error.

banner-config

Accepts a partial object — only send the fields you want to change. The full field list is in the banner configuration guide.