Targets & Verification

Domain Connect Verification

Use the Domain Connect protocol to verify ownership automatically without manually editing DNS records.

What Is Domain Connect?

Domain Connect is an open protocol that lets applications configure DNS records on a user's behalf with a single click. Instead of manually logging into your DNS provider and adding a TXT record, Domain Connect handles it automatically through an OAuth-like flow.

Supported Providers

Domain Connect works with DNS providers that support the protocol, including:

  • GoDaddy
  • 1&1 IONOS
  • Automattic (WordPress.com domains)
  • Other Domain Connect-compatible registrars

If your provider does not support Domain Connect, use one of the manual verification methods instead.

How to Use Domain Connect Verification

  1. Open your target's detail page and click Verify.
  2. Select Domain Connect.
  3. APVISO checks whether your domain's DNS provider supports the protocol.
  4. If supported, click Connect. You will be redirected to your DNS provider's consent page.
  5. Approve the DNS change. The provider automatically creates the required TXT record.
  6. You are redirected back to APVISO, and verification completes automatically.

The entire process typically takes under 30 seconds.

How It Works Behind the Scenes

APVISO queries the domain's DNS for a _domainconnect TXT record to discover the Domain Connect API endpoint. It then initiates an OAuth2 flow with your DNS provider, requesting permission to add a single TXT record. Once you approve, the record is created and APVISO verifies it immediately.

Security Considerations

  • APVISO only requests permission to add a single TXT record — it cannot modify any other DNS entries.
  • The OAuth token is single-use and not stored after verification.
  • You can remove the TXT record after verification succeeds.

Limitations

  • Only works with providers that implement the Domain Connect protocol.
  • Some providers may require you to be logged in to their dashboard before the redirect.
  • If the automatic flow fails, you can always fall back to the manual DNS TXT method.