trusted domains.md
{
"title": "trusted-domains",
"description": "Manage the domains and addresses whose signed mail is never quarantined, for the organization, a pod or an inbox, from the MachineMail CLI: flags and examples.",
"canonical": "https://machinemail.dev/docs/cli/commands/trusted-domains",
"content": {
"intro": "Domains and addresses the organization, a pod or an inbox trusts: mail they genuinely sign is never quarantined or withheld from agents. Trust never beats a block entry or opens an allow-only scope.",
"commands": {
"table": {
"columns": ["Command", "Summary"],
"rows": [
{"Command": "trusted-domains create", "Summary": "Create trusted domain"},
{"Command": "trusted-domains delete", "Summary": "Delete trusted domain"},
{"Command": "trusted-domains get", "Summary": "Get trusted domain"},
{"Command": "trusted-domains list", "Summary": "List trusted domains"},
{"Command": "trusted-domains preview", "Summary": "Preview trusted domain"},
{"Command": "trusted-domains update", "Summary": "Update trusted domain"}
]
},
"global_flags": "Every command also takes the global flags.",
"trusted-domains create": {
"description": "Create trusted domain.",
"details": "Trust a domain (example.com) or one address (invoices@example.com) at this level. Domains are stored in ASCII (punycode) form; responses carry both forms. Adding an entry that exists at this level (the same domain, or the same --client-id) returns it unchanged with 200.",
"conflicts": "Trust takes effect only on mail that carries a DKIM signature of the trusted domain itself (d= equal to the domain, or a subdomain with --include-subdomains); a block entry always wins over trust, and an allow-only scope still blocks every sender it does not allow.",
"errors": [
"refused with 422: trusted_domain_not_allowed for names anyone can get mail from; confirmation_required for platforms where anyone can write the content.",
"Refused with 402 plan_limit_exceeded past the organization’s limit."],
"permission": "Requires the trusted_domain_create permission.",
"command_example": "machinemail trusted-domains create [flags]",
"flags": {
"table": {
"columns": ["Field", "Type", "Description"],
"rows": [
{"Field": "--inbox