Website Connection Center.
Verify a domain, bind server credentials and inspect access status. This workflow does not activate checkout or enable money movement.
01Register an immutable origin
POST /v1/workspaces/{workspaceId}/developer-access/websites with name and origin, an app session, recent passkey verification and Idempotency-Key. Only HTTPS hostnames without a path, credentials, non-default port, query or fragment are accepted. IP addresses and local hostnames are refused. The origin is canonicalized before duplicate checks.
02Publish the public DNS record
Add the returned TXT record at _allwallex.<hostname>. The challenge is public domain-verification material, not an API secret. TXT chunks within one record are joined; separate records and substring matches cannot satisfy the challenge. Each workspace receives its own challenge.
03Verify and activate
POST /websites/{id}/verify with expectedRevision. DNS resolves outside database locks. Session, role and revision are rechecked before committing the result. Successful evidence lasts seven days; checks are limited to every 30 seconds. A stale revision cannot overwrite a concurrent pause. Actual DNS proof has not been established by isolated fixtures.
04Pause and renew
POST /websites/{id}/pause with expectedRevision to restrict every bound key. A subsequent explicit verification can reactivate it after the check interval. An origin cannot be edited in place; register the replacement origin and rotate credentials. API authorization checks current activation, proof kind and expiry.
05Understand the boundary
DNS verification observes control at the check time and relies on the configured resolver. It is not payment finality, a financial review or a CORS permission for browser secrets. Synthetic DNS is restricted to APP_ENV=test and a disposable _test database and is labelled in the UI.
POST /v1/workspaces/{workspaceId}/developer-access/websites
Idempotency-Key: <original-request-key>
{ "name": "My shop", "origin": "https://shop.example.com" }
POST /v1/workspaces/{workspaceId}/developer-access/websites/{id}/verify
{ "expectedRevision": 0 }
POST /v1/workspaces/{workspaceId}/developer-access/websites/{id}/pause
{ "expectedRevision": 1 }Open your workspace