Developer portal

PUT /admin/tenants/{tenant_id}/authorized-domains

Replace tenant scan allowlist (authorized domains) with audit attestation.

PUT /admin/tenants/{tenant_id}/authorized-domainsAuth: admin

Summary

Replace tenant scan allowlist (authorized domains) with audit attestation.

Response

{
  "status": "success",
  "tenantId": "acme-bank",
  "domains": [
    "acmebank.com"
  ]
}

Field	Type	Required	Description
domains	string[]	Yes	Domain names permitted for scanning. e.g. ["acmebank.com", "acmebank.eu"]
attestation	string	No (Sales-led provisioning)	Ops attestation recorded in audit log.

Field

Type

Required

Description

domains

string[]

Yes

Domain names permitted for scanning.

e.g. ["acmebank.com", "acmebank.eu"]

attestation

string

No (Sales-led provisioning)

Ops attestation recorded in audit log.

Code	Meaning	Typical cause	Suggested fix
404	Not found	Scan, schedule, share link, or resource id does not exist or expired.	Verify id and tenant scope; share links expire per expiresHours.
422	Unprocessable entity	Invalid payload shape, unsupported scenario, or infeasible constraints.	Fix field errors in response detail; relax constraints and retry.
429	Too many requests	Per-key rate limit exceeded (default 300 requests per minute) or public endpoint limit.	Backoff with jitter; cache results; request higher limit for production.
500	Internal server error	Unexpected backend failure; includes requestId in response.	Retry with exponential backoff; contact support with requestId if persistent.