# Domains

| Method | Path | What it does | Permission | Sudo | Approval |
|---|---|---|---|---|---|
| GET | `/api/apps/{domain}/client-certs` | List Client Certificates | `apps.read` |  |  |
| POST | `/api/apps/{domain}/client-certs` | Issue Client Certificate | `apps.manage` | yes |  |
| GET | `/api/apps/{domain}/client-certs/ca` | Get Client Authority | `apps.read` |  |  |
| DELETE | `/api/apps/{domain}/client-certs/{serial}` | Revoke Client Certificate | `apps.manage` | yes |  |
| GET | `/api/apps/{domain}/domains` | Get Domains | `apps.read` |  |  |
| POST | `/api/apps/{domain}/domains` | Post Domain | `apps.manage` |  |  |
| PUT | `/api/apps/{domain}/domains/canonical` | Put Canonical | `apps.manage` |  |  |
| DELETE | `/api/apps/{domain}/domains/{name}` | Delete Domain | `apps.manage` | yes |  |
| PUT | `/api/apps/{domain}/domains/{name}/certificate` | Put Domain Certificate | `apps.manage` |  |  |
| GET | `/api/apps/{domain}/domains/{name}/dns` | Get Domain Dns | `apps.read` |  |  |
| PUT | `/api/apps/{domain}/domains/{name}/enabled` | Put Domain Enabled | `apps.manage` |  |  |
| PUT | `/api/apps/{domain}/domains/{name}/port` | Put Domain Port | `apps.manage` |  |  |
| GET | `/api/apps/{domain}/http3` | Get Http3 | `apps.read` |  |  |
| GET | `/api/apps/{domain}/policy` | Get Policy | `apps.read` |  |  |
| PUT | `/api/apps/{domain}/policy` | Put Policy | `apps.manage` |  |  |
| DELETE | `/api/apps/{domain}/policy` | Delete Policy | `apps.manage` |  |  |
| PUT | `/api/apps/{domain}/policy/users/{username}` | Put Policy User | `apps.manage` |  |  |
| DELETE | `/api/apps/{domain}/policy/users/{username}` | Delete Policy User | `apps.manage` |  |  |
| GET | `/api/apps/{domain}/private` | Get Private | `apps.read` |  |  |
| PUT | `/api/apps/{domain}/private` | Put Private | `apps.manage` |  |  |
| DELETE | `/api/apps/{domain}/private` | Delete Private | `apps.manage` |  |  |
| POST | `/api/apps/{domain}/private/certificate` | Post Tailnet Certificate | `apps.manage` | yes |  |
| GET | `/api/apps/{domain}/waf` | Get Waf | `apps.read` |  |  |
| GET | `/api/apps/{domain}/waf/events` | Get Waf Events | `apps.read` |  |  |
| GET | `/api/domains/dns` | Get Bare Dns | `apps.read` |  |  |
| GET | `/api/domains/temporary` | Get Temporary Name | `apps.read` |  |  |
| GET | `/api/policy/cloudflare-ranges` | Get Cloudflare Ranges | `apps.read` |  |  |
| POST | `/api/policy/cloudflare-ranges/refresh` | Refresh Cloudflare Ranges | `apps.manage` |  |  |
| GET | `/api/policy/forward-auth-presets` | Get Forward Auth Presets | `apps.read` |  |  |
| GET | `/api/private-networks` | List Networks | `apps.read` |  |  |
| POST | `/api/waf/install` | Post Install | `server.manage` | yes |  |