find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/domani-run:domani-run-auth-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: domani.run Auth API
  version: 1.0.0
  description: 'Domain infrastructure for AI agents. One API to search, register, and connect domain names.


    ## Authentication


    All authenticated endpoints require a Bearer token:


    ```

    Authorization: Bearer domani_sk_xxx

    ```


    Get your API key by registering:


    ```bash

    curl -X POST https://domani.run/api/auth/register \

    -H "Content-Type: application/json" \

    -d ''{"email": "you@example.com"}''

    ```


    ## Rate Limits


    Every response includes `X-RateLimit-Limit`, `X-RateLimit-Remaining`, and `X-RateLimit-Reset` headers. When rate limited (HTTP 429), check the `Retry-After` header for seconds to wait.


    ## Error Handling


    All errors return a consistent JSON envelope with `error`, `code`, `hint`, and `documentation_url` fields. Use the `code` field for programmatic handling and the `hint` field for recovery guidance.


    ## MCP Server


    A real-time MCP (Model Context Protocol) server is available at `POST /mcp` using Streamable HTTP transport. Connect any MCP-compatible agent (Claude Code, Cursor, etc.) with your Bearer token for typed tool access (search, buy, DNS, etc.).


    ## Pagination


    The `GET /api/tlds` endpoint supports `limit` and `offset` query parameters. When paginated, the response includes a `Link` header with `rel="next"` for the next page.'
  contact:
    name: domani.run
    url: https://domani.run
servers:
- url: https://domani.run
  description: Production
security:
- BearerAuth: []
tags:
- name: Auth
paths:
  /api/oauth/register:
    post:
      operationId: registerOAuthClient
      summary: Register an OAuth client (RFC 7591)
      description: 'Dynamic client registration for OAuth-capable MCP clients (Claude.ai, ChatGPT, Grok Bot connectors). Open registration: it grants nothing by itself - every authorization still passes the user consent screen. Public clients (token_endpoint_auth_method=none) must use PKCE S256. Discovery: /.well-known/oauth-authorization-server.'
      tags:
      - Auth
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
              - redirect_uris
              properties:
                redirect_uris:
                  type: array
                  maxItems: 10
                  items:
                    type: string
                  description: Exact redirect URIs (https, http on loopback, or a native custom scheme)
                client_name:
                  type: string
                  maxLength: 80
                  description: Shown on the consent screen
                token_endpoint_auth_method:
                  type: string
                  enum:
                  - none
                  - client_secret_post
                  - client_secret_basic
                  default: none
                client_uri:
                  type: string
                logo_uri:
                  type: string
      responses:
        '201':
          description: Client registered
          content:
            application/json:
              schema:
                type: object
                properties:
                  client_id:
                    type: string
                  client_name:
                    type: string
                  redirect_uris:
                    type: array
                    items:
                      type: string
                  token_endpoint_auth_method:
                    type: string
                  grant_types:
                    type: array
                    items:
                      type: string
                  response_types:
                    type: array
                    items:
                      type: string
                  client_id_issued_at:
                    type: integer
                  client_secret:
                    type: string
                    description: Only for confidential clients; returned once
        '400':
          description: Invalid client metadata (RFC 7591 error body)
  /api/oauth/token:
    post:
      operationId: exchangeOAuthToken
      summary: OAuth token endpoint
      description: Exchange an authorization code (with PKCE code_verifier) for an access token, or rotate with grant_type=refresh_token. Access tokens are ordinary domani API tokens carrying the approved scopes and mailbox confinement. Codes are single-use; refresh tokens rotate on every use.
      tags:
      - Auth
      requestBody:
        required: true
        content:
          application/x-www-form-urlencoded:
            schema:
              type: object
              required:
              - grant_type
              - client_id
              properties:
                grant_type:
                  type: string
                  enum:
                  - authorization_code
                  - refresh_token
                client_id:
                  type: string
                client_secret:
                  type: string
                  description: Confidential clients only (or use HTTP Basic)
                code:
                  type: string
                  description: Authorization code (grant_type=authorization_code)
                code_verifier:
                  type: string
                  description: PKCE verifier matching the code_challenge sent to /oauth/authorize
                redirect_uri:
                  type: string
                  description: Must match the authorization request
                refresh_token:
                  type: string
                  description: grant_type=refresh_token
      responses:
        '200':
          description: Token issued
          content:
            application/json:
              schema:
                type: object
                properties:
                  access_token:
                    type: string
                  token_type:
                    type: string
                    example: Bearer
                  expires_in:
                    type: integer
                  refresh_token:
                    type: string
                  scope:
                    type: string
        '400':
          description: invalid_grant / invalid_request (RFC 6749 error body)
        '401':
          description: invalid_client
components:
  securitySchemes:
    BearerAuth:
      type: http
      scheme: bearer
      bearerFormat: domani_sk_xxx
      description: 'API key obtained by signing in (POST /api/auth/register starts email verification; a CLI or agent gets the key itself via the device-login flow, POST /api/auth/cli then GET /api/auth/cli/poll). Include as: `Authorization: Bearer domani_sk_xxx`. Keys use the prefix `domani_sk_` followed by 32 random characters.'
externalDocs:
  description: Interactive API Reference
  url: https://domani.run/docs