HERE

HERE Trusted Domain Management API

Trusted Domain Management APIs enable authorized identities to manage URIs to register with an appliication

GitHub OpenAPI

Operations 9

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

PUT /apps/{app}/trustedDomainsEnabled Turn on Trusted Domains for an app · Enable Trusted Domains for an application #
Ask an LLM
“How do I turn on Trusted Domains for an application?”
“What's the maximum number of trusted domains allowed once I enable the feature?”
Tell an agent
Enable Trusted Domains for app {app}.
Switch on trusted-domain enforcement for application {app}.
DELETE /apps/{app}/trustedDomainsEnabled Turn off Trusted Domains for an app · Disable Trusted Domains for an application #
Ask an LLM
“How do I switch off Trusted Domains for an app?”
“Can I stop enforcing trusted domains on an application without deleting the domain list?”
Tell an agent destructive · confirm first
Disable Trusted Domains for app {app}.
Turn off trusted-domain enforcement on application {app}.
GET /apps/{app}/trustedDomainsEnabled Check if Trusted Domains is enabled for an app · Retrieve whether Trusted Domains is enabled/disabled for an application #
Ask an LLM
“Is Trusted Domains switched on for my app?”
“How can I tell whether an application restricts API key use to trusted domains?”
Tell an agent
Check whether Trusted Domains is enabled for app {app}.
Tell me if app {app} has Trusted Domains turned on.
PUT /apps/{app}/trustedDomains/{trustedDomainUri} Add a single trusted domain to an app · Add a Trusted Domain to an application #
Ask an LLM
“How do I add one website domain to my app's trusted list?”
“Can I allow a single new domain to use my app's credentials?”
Tell an agent
Add trusted domain {trustedDomainUri} to app {app}.
Trust the single domain {trustedDomainUri} for application {app}.
GET /apps/{app}/trustedDomains/{trustedDomainUri} Get one trusted domain of an app · Retrieve a Trusted Domain associated with an application #
Ask an LLM
“Is a specific domain on my app's trusted list?”
“How do I look up a single trusted domain entry?”
Tell an agent
Get trusted domain {trustedDomainUri} for app {app}.
Check whether {trustedDomainUri} is a trusted domain of app {app}.
DELETE /apps/{app}/trustedDomains/{trustedDomainUri} Remove a single trusted domain from an app · Delete a Trusted Domain associated with an application #
Ask an LLM
“How do I remove one domain from my app's trusted domains?”
“Can I revoke trust for a single website domain?”
Tell an agent destructive · confirm first
Delete trusted domain {trustedDomainUri} from app {app}.
Stop trusting the single domain {trustedDomainUri} for application {app}.
POST /apps/{app}/trustedDomains Add several trusted domains to an app at once · Add multiple Trusted Domains to an application #
Ask an LLM
“How do I add a batch of trusted domains to an application in one call?”
“What is the upper limit on trusted domains per app when adding in bulk?”
Tell an agent
Add the trusted domains {data} to app {app} in one request.
Bulk-add multiple domains {data} to application {app}'s trusted list.
GET /apps/{app}/trustedDomains List an app's trusted domains · Retrieve a list of Trusted Domains associated with an application #
Ask an LLM
“Which domains are currently trusted for my app?”
“Can I page through a long list of trusted domains?”
Tell an agent
List the trusted domains for app {app}.
Show up to {limit} trusted domains of application {app}.
DELETE /apps/{app}/trustedDomains Remove several trusted domains from an app · Delete multiple Trusted Domains associated with an application #
Ask an LLM
“How do I remove multiple trusted domains from an app in one call?”
“Can I bulk-delete a list of trusted domains?”
Tell an agent destructive · confirm first
Delete the trusted domains {list} from app {app}.
Bulk-remove domains {list} from application {app}'s trusted list.

Documentation

📖
Documentation
https://docs.here.com/identity-and-access-management/docs
📖
APIReference
https://docs.here.com/identity-and-access-management/reference
📖
Documentation
https://docs.here.com/data-api/docs
📖
APIReference
https://docs.here.com/data-api/reference
📖
Documentation
https://docs.here.com/usage/docs
📖
APIReference
https://docs.here.com/usage/reference
📖
Documentation
https://docs.here.com/destination-weather/docs
📖
APIReference
https://docs.here.com/destination-weather/reference
📖
Documentation
https://docs.here.com/ev-products/docs
📖
APIReference
https://docs.here.com/ev-products/reference
📖
Documentation
https://docs.here.com/fuel-prices/docs
📖
APIReference
https://docs.here.com/fuel-prices/reference
📖
Documentation
https://docs.here.com/geocoding-and-search/docs
📖
APIReference
https://docs.here.com/geocoding-and-search/reference
📖
Documentation
https://docs.here.com/routing/docs
📖
APIReference
https://docs.here.com/routing/reference
📖
Documentation
https://docs.here.com/positioning/docs
📖
APIReference
https://docs.here.com/positioning/reference
📖
Documentation
https://docs.here.com/indoor-map/docs
📖
APIReference
https://docs.here.com/indoor-map/reference
📖
Documentation
https://docs.here.com/transit/docs
📖
APIReference
https://docs.here.com/transit/reference
📖
Documentation
https://docs.here.com/map-attributes/docs
📖
APIReference
https://docs.here.com/map-attributes/reference
📖
Documentation
https://docs.here.com/map-rendering/docs
📖
APIReference
https://docs.here.com/map-rendering/reference
📖
Documentation
https://docs.here.com/workspace/docs
📖
APIReference
https://docs.here.com/workspace/reference
📖
Documentation
https://docs.here.com/tour-planning/docs
📖
APIReference
https://docs.here.com/tour-planning/reference
📖
Documentation
https://docs.here.com/tracking/docs
📖
APIReference
https://docs.here.com/tracking/reference
📖
Documentation
https://docs.here.com/traffic-api/docs
📖
APIReference
https://docs.here.com/traffic-api/reference
📖
Documentation
https://docs.here.com/wego-pro/docs
📖
APIReference
https://docs.here.com/wego-pro/reference

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/here/refs/heads/main/openapi/here-trusted-domain-management-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/here:here-trusted-domain-management-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

here-trusted-domain-management-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Authentication API v1.1 Trusted Domain Management API
  version: 1.1.x
  description: 'This specification describes the Authentication v1.1 APIs.

    NOTE: Swagger UI automatically URL encodes parameters when required.

    If/when the APIs are called elsewhere make sure to URL encode the parameters when required.'
servers:
- url: Use API Lookup for a base URL
tags:
- name: Trusted Domain Management
  description: Trusted Domain Management APIs enable authorized identities to manage URIs to register with an appliication
paths:
  /apps/{app}/trustedDomainsEnabled:
    parameters:
    - $ref: '#/components/parameters/App'
    - $ref: '#/components/parameters/XCorrelationId'
    - $ref: '#/components/parameters/XRequestId'
    put:
      tags:
      - Trusted Domain Management
      summary: Enable Trusted Domains for an application
      operationId: enableTrustedDomains
      description: 'Enables Trusted Domains for the application. A maximum of 3000 Trusted Domains per application are allowed.


        Access Control:

        * The calling principal must have **"manage"** or **"write"** action permission for the resource **"{app}"** in the **"account"** service.

        * The calling principal MUST NOT include a project scope.'
      security:
      - UserOrClientBearerToken: []
      responses:
        '204':
          description: No Content
          headers:
            X-Correlation-ID:
              $ref: '#/components/headers/XCorrelationId'
            X-Request-ID:
              $ref: '#/components/headers/XRequestId'
        '400':
          description: '* 400288 - Invalid app HRN.

            '
        '404':
          description: '* 404660 - No app exists with the given HRN.

            '
    delete:
      tags:
      - Trusted Domain Management
      summary: Disable Trusted Domains for an application
      operationId: disableTrustedDomains
      description: 'Disables Trusted Domains for the application.


        Access Control:

        * The calling principal must have **"manage"** or **"write"** action permission for the resource **"{app}"** in the **"account"** service.

        * The calling principal MUST NOT include a project scope.'
      security:
      - UserOrClientBearerToken: []
      responses:
        '204':
          description: No Content
          headers:
            X-Correlation-ID:
              $ref: '#/components/headers/XCorrelationId'
            X-Request-ID:
              $ref: '#/components/headers/XRequestId'
        '400':
          description: '* 400288 - Invalid app HRN.

            '
        '404':
          description: '* 404660 - No app exists with the given HRN.

            '
    get:
      tags:
      - Trusted Domain Management
      summary: Retrieve whether Trusted Domains is enabled/disabled for an application
      operationId: getTrustedDomainsEnabled
      description: 'Whether Trusted Domains is enabled, or disabled, for the application.


        Access Control:

        * The calling principal must have **"read"** action permission for the resource **"{app}"** in the **"account"** service.

        * The calling principal MUST NOT include a project scope.'
      security:
      - UserOrClientBearerToken: []
      responses:
        '200':
          description: OK
          headers:
            X-Correlation-ID:
              $ref: '#/components/headers/XCorrelationId'
            X-Request-ID:
              $ref: '#/components/headers/XRequestId'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/GetEnableTrustedDomainsResponse'
        '400':
          description: '* 400288 - Invalid app HRN.

            '
        '404':
          description: '* 404660 - No app exists with the given HRN.

            '
  /apps/{app}/trustedDomains/{trustedDomainUri}:
    parameters:
    - $ref: '#/components/parameters/App'
    - $ref: '#/components/parameters/TrustedDomainUri'
    - $ref: '#/components/parameters/XCorrelationId'
    - $ref: '#/components/parameters/XRequestId'
    put:
      tags:
      - Trusted Domain Management
      summary: Add a Trusted Domain to an application
      operationId: addTrustedDomain
      description: 'Add a Trusted Domain to an application. A maximum of 3000 Trusted Domains per application are allowed.


        Access Control:

        * The calling principal must have **"manage"** or **"write"** action permission for the resource **"{app}"** in the **"account"** service.

        * The calling principal MUST NOT include a project scope.'
      security:
      - UserOrClientBearerToken: []
      responses:
        '204':
          description: No Content
          headers:
            X-Correlation-ID:
              $ref: '#/components/headers/XCorrelationId'
            X-Request-ID:
              $ref: '#/components/headers/XRequestId'
        '400':
          description: '* 400288 - Invalid app HRN.

            * 400203 - Invalid Trusted Domain URI.

            * 400368 - Trusted Domain URI too long.

            '
        '404':
          description: '* 404660 - No app exists with the given HRN.

            '
        '422':
          description: '* 422000 - Maximum number of Trusted Domains reached

            '
        '429':
          description: '* 429003 - Request blocked because of too many Trusted Domains being added or deleted. Wait for a while before retrying the request.

            '
    get:
      tags:
      - Trusted Domain Management
      summary: Retrieve a Trusted Domain associated with an application
      operationId: getTrustedDomain
      description: 'Retrieve a Trusted Domain associated with an application.


        Access Control:

        * The calling principal must have **"read"** action permission for the resource **"{app}"** in the **"account"** service.

        * The calling principal MUST NOT include a project scope.'
      security:
      - UserOrClientBearerToken: []
      responses:
        '204':
          description: No Content
          headers:
            X-Correlation-ID:
              $ref: '#/components/headers/XCorrelationId'
            X-Request-ID:
              $ref: '#/components/headers/XRequestId'
        '400':
          description: '* 400288 - Invalid app HRN.

            * 400203 - Invalid Trusted Domain URI.

            * 400368 - Trusted Domain URI too long.

            '
        '404':
          description: '* 404660 - No app exists with the given HRN.

            * 404922 - No Trusted Domain exists with the given URI.

            '
    delete:
      tags:
      - Trusted Domain Management
      summary: Delete a Trusted Domain associated with an application
      operationId: deleteTrustedDomain
      description: 'Delete a Trusted Domain associated with an application.


        Access Control:

        * The calling principal must have **"manage"** or **"write"** action permission for the resource **"{app}"** in the **"account"** service.

        * The calling principal MUST NOT include a project scope.'
      security:
      - UserOrClientBearerToken: []
      responses:
        '204':
          description: No Content
          headers:
            X-Correlation-ID:
              $ref: '#/components/headers/XCorrelationId'
            X-Request-ID:
              $ref: '#/components/headers/XRequestId'
        '400':
          description: '* 400288 - Invalid app HRN.

            * 400203 - Invalid Trusted Domain URI.

            * 400368 - Trusted Domain URI too long.

            '
        '404':
          description: '* 404660 - No app exists with the given HRN.

            * 404922 - No Trusted Domain exists with the given URI.

            '
  /apps/{app}/trustedDomains:
    parameters:
    - $ref: '#/components/parameters/App'
    - $ref: '#/components/parameters/XCorrelationId'
    - $ref: '#/components/parameters/XRequestId'
    post:
      tags:
      - Trusted Domain Management
      summary: Add multiple Trusted Domains to an application
      operationId: addManyTrustedDomains
      description: 'Add Trusted Domains to an application. A maximum of 3000 Trusted Domains per application are allowed.


        Access Control:

        * The calling principal must have **"manage"** or **"write"** action permission for the resource **"{app}"** in the **"account"** service.

        * The calling principal MUST NOT include a project scope.'
      security:
      - UserOrClientBearerToken: []
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/TrustedDomainsRequest'
      responses:
        '204':
          description: No Content. If all Trusted Domains were added.
          headers:
            X-Correlation-ID:
              $ref: '#/components/headers/XCorrelationId'
            X-Request-ID:
              $ref: '#/components/headers/XRequestId'
        '207':
          description: Partial success. Response body contains additional information.
          headers:
            X-Correlation-ID:
              $ref: '#/components/headers/XCorrelationId'
            X-Request-ID:
              $ref: '#/components/headers/XRequestId'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TrustedDomainPartialSuccessResponse'
        '400':
          description: '* 400367 - At least one of the Trusted Domain URIs is invalid.

            * 400368 - At least one of the Trusted Domain URIs too long.

            * 400288 - Invalid app HRN.

            '
        '404':
          description: '* 404660 - No app exists with the given HRN.

            '
        '422':
          description: '* 422000 - Maximum number of Trusted Domains reached

            '
        '429':
          description: '* 429003 - Request blocked because of too many Trusted Domains being added or deleted. Wait for a while before retrying the request.

            '
    get:
      parameters:
      - $ref: '#/components/parameters/PageToken'
      - $ref: '#/components/parameters/Limit10'
      tags:
      - Trusted Domain Management
      summary: Retrieve a list of Trusted Domains associated with an application
      operationId: listTrustedDomains
      description: 'Retrieve a list of Trusted Domains associated with an application.


        Access Control:

        * The calling principal must have **"read"** action permission for the resource **"{app}"** in the **"account"** service.

        * The calling principal MUST NOT include a project scope.'
      security:
      - UserOrClientBearerToken: []
      responses:
        '200':
          description: OK
          headers:
            X-Correlation-ID:
              $ref: '#/components/headers/XCorrelationId'
            X-Request-ID:
              $ref: '#/components/headers/XRequestId'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TrustedDomainPageWToken'
        '400':
          description: '* 400288 - Invalid app HRN.

            '
        '404':
          description: '* 404660 - No app exists with the given HRN.

            '
    delete:
      tags:
      - Trusted Domain Management
      summary: Delete multiple Trusted Domains associated with an application
      operationId: deleteManyTrustedDomains
      description: 'Delete many Trusted Domains associated with an application.


        Access Control:

        * The calling principal must have **"manage"** or **"write"** action permission for the resource **"{app}"** in the **"account"** service.

        * The calling principal MUST NOT include a project scope.'
      security:
      - UserOrClientBearerToken: []
      parameters:
      - $ref: '#/components/parameters/ListParam'
      responses:
        '204':
          description: No Content. If all Trusted Domains were deleted.
          headers:
            X-Correlation-ID:
              $ref: '#/components/headers/XCorrelationId'
            X-Request-ID:
              $ref: '#/components/headers/XRequestId'
        '207':
          description: Partial success. Response body contains additional information.
          headers:
            X-Correlation-ID:
              $ref: '#/components/headers/XCorrelationId'
            X-Request-ID:
              $ref: '#/components/headers/XRequestId'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TrustedDomainPartialSuccessResponse'
        '400':
          description: '* 400367 - At least one of the Trusted Domain URI is invalid.

            * 400368 - At least one of the Trusted Domain URI too long.

            * 400288 - Invalid app HRN.

            '
        '404':
          description: '* 404660 - No app exists with the given HRN.

            '
        '429':
          description: '* 429003 - Request blocked because of too many Trusted Domains being added or deleted. Wait for a while before retrying the request.

            '
components:
  parameters:
    Limit10:
      in: query
      name: limit
      required: false
      description: Number of records to return. Default is 10 records. Maximum is 100 records.
      schema:
        type: integer
        minimum: 0
        maximum: 100
        default: 10
    XCorrelationId:
      in: header
      name: X-Correlation-ID
      schema:
        type: string
      required: false
      description: 'Correlates HTTP requests between a client and server. If not present in the incoming request, it will be generated. This header and value will be included in all loglines including access logs. It will also be propagated to downstream services and returned in the response.

        '
    ListParam:
      in: query
      name: list
      required: true
      description: Comma separated list of Trusted Domain URIs. Maximum of 10. Must be URL-encoded, if reserved characters ":/?#[]@!$&'()*+,;=" are used. see https://tools.ietf.org/html/rfc3986#section-2.2.
      example: 2MZr9AInTFk45NAU8ClIza2Yw7w_AXyUyM4ChvtO7bY
      schema:
        type: string
    XRequestId:
      in: header
      name: X-Request-ID
      schema:
        type: string
      required: false
      description: 'The unique for the request, used to track this request within the service. X-Request-ID value is NOT propagated to the downstream services.

        '
    TrustedDomainUri:
      in: path
      required: true
      name: trustedDomainUri
      schema:
        type: string
      description: "URI for a Trusted Domain. A Trusted Domain must conform to the follow validation rules:\n  * entries must include a domain name (e.g. example.com)\n  * no longer than 2048 characters\n  * use correct URI format\n  * IPv4 addresses are permitted (e.g. 192.168.1.1 or 192.168.1.1:1080)\n  * protocol is optional (e.g. https://example.com)\n  * port is optional (e.g. example.com:1080)\n"
      example: https://example.com:1080
    App:
      in: path
      required: true
      name: app
      schema:
        type: string
      description: 'HRN identifying the application. Must be URL-encoded, if reserved characters ":/?#[]@!$&''()*+,;=" are used. see https://tools.ietf.org/html/rfc3986#section-2.2.

        '
    PageToken:
      name: pageToken
      in: query
      required: false
      description: 'If there are more records than ''limit'' (between 1 and 100), and there are multiple pages of records, ''pageToken'' allows for retrieval of individual pages. In order to retrieve subsequent pages, the client should provide the pageToken returned in the result from the previous API call as input to the following API call.


        Example: If the result for a call to GET /items returns *{..., "pageToken": "abcdefg"}*, in order  to retrieve the next page of ''items'' the client should call GET /items?pageToken=abcdefg

        '
      schema:
        type: string
  headers:
    XRequestId:
      schema:
        type: string
      required: false
      description: The unique id for the request, used to track this request within the service. X-Request-ID value is NOT propagated to the downstream services.
    XCorrelationId:
      schema:
        type: string
      required: false
      description: The X-Correlation-ID for the request, used to track this request in the platform. X-Correlation-ID value is propagated throughout the platform.
  schemas:
    TrustedDomainPartialSuccessResponse:
      allOf:
      - $ref: '#/components/schemas/PageWithToken'
      - type: object
        properties:
          items:
            type: array
            items:
              $ref: '#/components/schemas/TrustedDomainError'
        example:
          total: 2
          pageToken: 7afd7f8e94eb4844ba45
          limit: 1
          items:
          - trustedDomain: https://www.example.com
            status: 204
    PageWithToken:
      type: object
      required:
      - limit
      - total
      - items
      properties:
        limit:
          type: integer
          example: 1
          description: number of entries in the response.
        pageToken:
          type: string
          example: KuMvTQrdHVVKuMDDdcIvTQrdci1FWdcIHVVci1FW
          description: The cursor for pagination. Present only if there is an additional page of data to view.
        total:
          type: integer
          example: 1
          description: The number of federations matching the search criteria.
    GetEnableTrustedDomainsResponse:
      type: object
      required:
      - trustedDomainsEnabled
      properties:
        trustedDomainsEnabled:
          type: boolean
          example: true
          description: If Trusted Domains are enabled for the App.
    TrustedDomainsRequest:
      type: object
      properties:
        data:
          type: array
          items:
            $ref: '#/components/schemas/TrustedDomainsRequestItem'
          minItems: 1
          maxItems: 10
          example:
          - https://www.example.com:1080
          - www.example.com
    TrustedDomainsRequestItem:
      type: string
      description: "URI for a Trusted Domain.\n\nA Trusted Domain must conform to the follow validation rules:\n  * entries must include a domain name (e.g. example.com)\n  * no longer than 2048 characters\n  * use correct URI format\n  * IPv4 addresses are permitted (e.g. 192.168.1.1 or 192.168.1.1:1080)\n  * protocol is optional (e.g. https://example.com)\n  * port is optional (e.g. example.com:1080)\n"
    TrustedDomainPageWToken:
      allOf:
      - $ref: '#/components/schemas/PageWithToken'
      - type: object
        properties:
          items:
            type: array
            items:
              type: string
              example: https://www.example.com
              description: A Trusted Domain URI.
        example:
          total: 5
          pageToken: 7afd7f8e94eb4844ba45
          limit: 2
          items:
          - https://www.example.com
          - 127.0.0.1
    TrustedDomainError:
      type: object
      required:
      - trustedDomain
      - status
      properties:
        trustedDomain:
          type: string
          example: https://www.example.com
          description: A Trusted Domain URI.
        status:
          type: integer
          example: 400367
          description: 204 if successfully added/deleted, else a Here Account error code.
  securitySchemes:
    UserOrClientBearerToken:
      type: http
      scheme: bearer
      description: Bearer Token issued to either User or Client.
    Bearer:
      type: http
      scheme: bearer
      bearerFormat: JWT
      description: 'A HERE access token obtained from one of the supported OAuth 2.0 authorization flows.

        For more information on how to get a bearer token, see the

        [https://www.here.com/docs/bundle/identity-and-access-management-developer-guide/page/README.html](Identity & Access Management Guide).

        '
externalDocs:
  description: The developer guide and related API references are available here.
  url: https://www.here.com/docs/category/identity-and-access-management