> ## Documentation Index
> Fetch the complete documentation index at: https://docs.pcnaid.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Add and verify a domain

> Add a base domain and publish the ownership TXT and delegation CNAME required by KeylessSSL.

# Add and verify a domain

## What does this do for me?

This connects a domain to your KeylessSSL organization without asking you to upload DNS-provider credentials.

## Add the domain

1. Open **Domains**.
2. Select **Add domain**.
3. Enter the base domain, such as `example.com`.
4. Select **Continue**.

KeylessSSL creates the domain in a pending state and shows the records generated for that domain.

## Publish both DNS records

Use the exact host, value or target, and TTL shown in the portal. Do not copy values from another domain or organization.

1. Create the **Ownership TXT** record. This contains a token unique to the domain and organization and is required for ownership verification.
2. Create the **Delegation CNAME** record. This points the `_acme-challenge` host to the delegated-validation target and is required for certificate issuance.
3. Save both records at your DNS provider.

## Verify the records

1. Return to the Add Domain dialog.
2. Select **Verify DNS**.
3. If verification is still pending, wait for DNS propagation and try again.

The API verifies the ownership TXT record before marking the domain verified. It also checks the CNAME and tells you if delegation is still missing. If the domain is already claimed by another active KeylessSSL organization, verification is refused.

You can later open a pending domain and select **Re-check DNS**.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.