domains

POST /v1/domains/{domainId}/auth-code

Reveal a domain's EPP transfer code.

所有 domains 端点

身份验证

请将 API 密钥作为 bearer 令牌发送。该密钥必须具有 domains.dns.manage 权限;缺少该权限的密钥将被拒绝并返回 403 状态码,而非 404。

此端点不需要组织 ID。您的密钥已用于识别其所属的组织,且响应范围也仅限于该组织。

免费试用

将尖括号中的内容替换为您自己的值,并将键占位符替换为您仪表板中的一个键。

curl -X POST https://api.zinndigital.com/v1/domains/{domainId}/auth-code \
  -H "Authorization: Bearer zdk_live_…"

已登录?您仪表板中的 API 控制台会自动填入您真实的组织 ID 和您自己的密钥,并针对实时 API 运行请求,以便您查看实际的响应。 在 API 控制台中打开此端点

详细信息

Returns the domain's EPP/auth code, which **authorizes transferring the domain to another registrar**. It is fetched from the registrar on demand, returned once, and never stored or logged by us; the response is `no-store`. A `POST` deliberately, despite reading: revealing a credential must not be something a page load, a prefetch, a browser-history entry or a cache can trigger. The reveal is audit-logged (the code itself never is). Requires `domains.dns.manage`. **422 where the registrar publishes no auth-code endpoint at all** (the Cloudflare route). The refusal names the way out rather than simply declining — a customer is entitled to leave, so support fetches the code rather than the transfer being delayed.

参数

名称类型必填内容简介
domainId (path)UuidThe domain's id.

响应

名称类型必填内容简介
auth_codestringThe EPP/auth code. **A credential** — it authorizes moving the domain to another registrar. Do not store, log or display it beyond the confirmation that requested it.
expires_atstringHow long to treat the displayed code as current. A presentation bound, not a promise of invalidation — most registrars do not publish a real lifetime.

此端点可能返回的错误

401 · 403 · 404 · 422 · 429 · 503