# Domain commands: authenticate, benchmark, claim, connect

URL: /code/cli/domain/verbs · Id: `page:code/cli/domain/verbs`

> The Domain Verbs authenticate, benchmark, claim, connect as CLI commands, with inputs, result, refusals and an example.

Reference for [Domain](/business/nouns/domain), one group of [Domain commands](/code/cli/domain).

### Domain.authenticate
Authenticate writes a Domain’s SPF, DKIM and DMARC records and verifies them before its first send. [Verb page](/business/nouns/domain/authenticate?interface=cli).

```text
npx startup-builder do Domain.authenticate --json '<input>' [--try | --send | --do]
```

Emits [`Domain.authenticated`](/business/events/Domain.authenticated).

**Inputs**

| Input | Type | Required | Description |
| --- | --- | --- | --- |
| `domain` | [Domain](/business/nouns/domain) | Yes | The sending Domain. |
| `dmarc` | `string` | No | The DMARC policy; it starts at `none` with reports and tightens to `quarantine`. |

**Returns**

| Output | Type | Required | Description |
| --- | --- | --- | --- |
| `domain` | [Domain](/business/nouns/domain) | Yes | The Domain, authenticated. |

**Refuses when**

| Check | Error | Fix | Then call |
| --- | --- | --- | --- |
| The key is valid, but its scopes do not allow this operation. | [`forbidden`](/code/api/errors/forbidden) | Use a key whose scopes cover the operation, or ask an owner of the namespace to grant them. | None. |

**Example**

```bash
npx startup-builder do Domain.authenticate --json '{"domain":"domain_VbYut4CTsH"}'
```

### Domain.benchmark
Benchmark measures a Domain’s estimated traffic, ranking Keywords, authority and referring domains beside the competitors named. [Verb page](/business/nouns/domain/benchmark?interface=cli).

```text
npx startup-builder do Domain.benchmark --json '<input>' [--try | --send | --do]
```

Emits [`Domain.benchmarked`](/business/events/Domain.benchmarked).

**Inputs**

| Input | Type | Required | Description |
| --- | --- | --- | --- |
| `hostname` | `string` | Yes | The name to measure: the Startup’s own or a competitor’s. |
| `competitors` | `string[]` | No | Names to measure beside it. |

**Returns**

| Output | Type | Required | Description |
| --- | --- | --- | --- |
| `readings` | `json` | Yes | One measure per name, each with its method and observation time. |
| `domain` | [Domain](/business/nouns/domain) | Yes | The Domain measured. |

**Refuses when**

| Check | Error | Fix | Then call |
| --- | --- | --- | --- |
| The key is valid, but its scopes do not allow this operation. | [`forbidden`](/code/api/errors/forbidden) | Use a key whose scopes cover the operation, or ask an owner of the namespace to grant them. | None. |

**Example**

```bash
npx startup-builder do Domain.benchmark --json '{"hostname":"taxcalc.tools"}'
```

### Domain.claim
Claim gives a Startup a one-label name under an issuing Domain, or assigns it a held Domain through an approved Change. [Verb page](/business/nouns/domain/claim?interface=cli).

```text
npx startup-builder do Domain.claim --json '<input>' [--try | --send | --do]
```

Emits [`Domain.claimed`](/business/events/Domain.claimed).

**Inputs**

| Input | Type | Required | Description |
| --- | --- | --- | --- |
| `hostname` | `string` | Yes | The name to claim. |
| `startup` | [Startup](/business/nouns/startup) | Yes | The Startup it serves. |

**Returns**

| Output | Type | Required | Description |
| --- | --- | --- | --- |
| `domain` | [Domain](/business/nouns/domain) | Yes | The claimed Domain. |

**Refuses when**

| Check | Error | Fix | Then call |
| --- | --- | --- | --- |
| The key is valid, but its scopes do not allow this operation. | [`forbidden`](/code/api/errors/forbidden) | Use a key whose scopes cover the operation, or ask an owner of the namespace to grant them. | None. |
| A label under an issuing Domain whose `publicSuffix` is false | [`refused`](/code/api/errors/refused) | Clear what the check names, then call it again. | None. |
| Reserved labels such as `www`, `api`, `admin`, `mail`, `mcp`, `docs` and sibling Brands | [`refused`](/code/api/errors/refused) | Clear what the check names, then call it again. | None. |

**Example**

```bash
npx startup-builder do Domain.claim --json '{"hostname":"kilnbakery.headless.ly","startup":"startup_ROlZw7tNIz"}'
```

### Domain.connect
Connect attaches a hostname a Startup already holds and verifies ownership through DNS. [Verb page](/business/nouns/domain/connect?interface=cli).

```text
npx startup-builder do Domain.connect --json '<input>' [--try | --send | --do]
```

Emits [`Domain.connected`](/business/events/Domain.connected).

**Inputs**

| Input | Type | Required | Description |
| --- | --- | --- | --- |
| `hostname` | `string` | Yes | The hostname to attach. |
| `startup` | [Startup](/business/nouns/startup) | Yes | The Startup it serves. |
| `tenant` | [Tenant](/business/nouns/tenant) | No | The Tenant it serves, when a Customer connects its own name. |

**Returns**

| Output | Type | Required | Description |
| --- | --- | --- | --- |
| `domain` | [Domain](/business/nouns/domain) | Yes | The connected Domain. |

**Refuses when**

| Check | Error | Fix | Then call |
| --- | --- | --- | --- |
| The input does not match the schema of the operation. | [`invalid-input`](/code/api/errors/invalid-input) | Read the schema of the operation, then send every required field with the right type. | None. |
| The key is valid, but its scopes do not allow this operation. | [`forbidden`](/code/api/errors/forbidden) | Use a key whose scopes cover the operation, or ask an owner of the namespace to grant them. | None. |
| The record changed since it was read, so the write would overwrite a newer version. | [`conflict`](/code/api/errors/conflict) | Read the record again, then retry the write against its current state. | None. |
| A wildcard name for a Tenant, and past the Tenant’s name count follows its Entitlement’s `atBound` | [`refused`](/code/api/errors/refused) | Clear what the check names, then call it again. | None. |

**Example**

```bash
npx startup-builder do Domain.connect --json '{"hostname":"kilnbakery.com","startup":"startup_ROlZw7tNIz"}'
```