# Domain programs: create, get

URL: /code/mcp/domain/records · Id: `page:code/mcp/domain/records`

> The Domain Verbs create, get as MCP do programs, with inputs, result, refusals and an example.

Reference for [Domain](/business/nouns/domain), one group of [Domain programs](/code/mcp/domain).

### Domain.create
Creates a Domain. [Verb page](/business/nouns/domain/create?interface=mcp).

```text
do: return await $.Domain.create(input)
```

Emits `Domain.created`.

**Inputs**

| Input | Type | Required | Description |
| --- | --- | --- | --- |
| `hostname` | `string` | Yes | The name, such as `leaseline.app`. |
| `role` | `string` | Yes | What the Domain does for the Thing it serves; a defensive name takes `redirect`. |
| `acquired` | `string` | No | One of `claimed`, `purchased`, or `connected`. |
| `registrant` | [Party](/business/nouns/party) | No | The owner of record: the holding Company while held, or the holder of a self-serve Startup’s Stripe account. |
| `expiresAt` | `datetime` | No | When the registration ends, as the registrar reports it; empty for a claimed Domain. |
| `autoRenew` | `boolean` | No | True when renewal runs without a Decision; false sends the Domain through renewal review. |
| `renewalPrice` | `money` | No | What the next renewal costs, which for a premium name differs from the purchase price. Never randomized. |
| `transferableAt` | `datetime` | No | The first moment the registrar allows a transfer out, after any registration, transfer or registrant lock. |
| `names` | `string` | No | How its subdomains are given out: explicit records only, or one-label claims by other Startups. |
| `publicSuffix` | `boolean` | No | True once the public suffix list browsers ship carries the Domain; an issuing Domain gives out no label before then. |
| `registrarAccount` | `string` | No | The registrar account that holds the Domain: one per Startup, never shared with a sibling. |
| `registryLock` | `boolean` | No | True when the registry refuses transfer, update and delete until a verified out-of-band request lifts it. |
| `certificate` | `json` | No | Certificate state (`pending`, `active`, `renewing` or `failed`), its expiry, and the failing check with its fix. |
| `validation` | `string` | No | `delegated` proves control through a CNAME to the platform; `serving` is for an apex that cannot hold one. |
| `walletsEnabled` | `boolean` | No | True once Stripe lists the Domain as a payment method domain on the Startup’s account. |
| `carriedIdentity` | `boolean` | No | True once the Domain received mail, hosted a Mailbox or verified an outside account; it never resets. |
| `to` | [Domain](/business/nouns/domain) | No | For a redirect: the canonical Domain it forwards to permanently, path and query kept. |
| `site` | [Site](/business/nouns/site) | No | A Site answers on one or more Domains; each Domain serves one Site. |
| `tenant` | [Tenant](/business/nouns/tenant) | No | A Tenant proves control of its Customer’s email domain, so sign-ins on that domain follow the Tenant’s policy. |

**Returns**

| Output | Type | Required | Description |
| --- | --- | --- | --- |
| `domain` | [Domain](/business/nouns/domain) | Yes | The Domain. |

**Refuses when**

| Check | Error | Fix | Then call |
| --- | --- | --- | --- |
| The key is valid, but its scopes do not allow this operation. | [`forbidden`](/code/api/errors/forbidden) | Use a key whose scopes cover the operation, or ask an owner of the namespace to grant them. | None. |

**Example**

```json
{
  "name": "do",
  "arguments": {
    "code": "return await $.Domain.create({ hostname: 'kilnbakery.com', role: 'canonical' })"
  }
}
```

### Domain.get
Returns one Domain by id. [Verb page](/business/nouns/domain/get?interface=mcp).

```text
do: return await $.Domain.get(input)
```

Reads only: it emits no Event.

**Inputs**

| Input | Type | Required | Description |
| --- | --- | --- | --- |
| `id` | `string` | Yes | The id of the Domain. |
| `at` | `string` | No | A time or Version name: the record as it stood then. Unset: as it stands now. |

**Returns**

| Output | Type | Required | Description |
| --- | --- | --- | --- |
| `domain` | [Domain](/business/nouns/domain) | Yes | The Domain. |

**Refuses when**

| Check | Error | Fix | Then call |
| --- | --- | --- | --- |
| The key is valid, but its scopes do not allow this operation. | [`forbidden`](/code/api/errors/forbidden) | Use a key whose scopes cover the operation, or ask an owner of the namespace to grant them. | None. |

**Example**

```json
{
  "name": "do",
  "arguments": {
    "code": "return await $.Domain.get({ id: 'domain_VbYut4CTsH' })"
  }
}
```