{
"type": "forbidden_access_no_permission",
"code": 30,
"message": "Forbidden access. The authentication credentials don't have appropriate permissions to access or affect the resource.",
"metadata": {}
}
{
"type": "resource_not_found",
"code": 1,
"message": "Could not locate the resource for the given URI.",
"metadata": {}
}
{
"type": "domains_stale",
"code": 7232,
"message": "The audiences or allowed origins have changed since the version you edited. Read them again and reapply your change.",
"metadata": {}
}
{
"type": "validation_failed",
"code": 7112,
"message": "The request is invalid.",
"metadata": {}
}
{
"type": "if_match_required",
"code": 7220,
"message": "A replace needs an If-Match header naming the version you edited.",
"metadata": {}
}
Domains
Replace your application's audiences and allowed origins
Stores both lists, each sorted, in place of the current ones. Each value must already be canonical; one that is not is refused, never rewritten. Send the ETag of the lists you edited as If-Match; if another write changed them first, the replace is refused and nothing changes. Warnings never refuse a replace. Changing allowed_origins also needs the acceptance_origins:update permission. The change applies to presentations and browser checks after it. A body that fails validation is a 422; then, in order: no If-Match is a 428, an application that no longer exists a 404, a stale If-Match a 412, and an allowed_origins change without the permission a 403.
PUT
/
acceptance
/
domains
Replace your application's audiences and allowed origins
{
"type": "forbidden_access_no_permission",
"code": 30,
"message": "Forbidden access. The authentication credentials don't have appropriate permissions to access or affect the resource.",
"metadata": {}
}
{
"type": "resource_not_found",
"code": 1,
"message": "Could not locate the resource for the given URI.",
"metadata": {}
}
{
"type": "domains_stale",
"code": 7232,
"message": "The audiences or allowed origins have changed since the version you edited. Read them again and reapply your change.",
"metadata": {}
}
{
"type": "validation_failed",
"code": 7112,
"message": "The request is invalid.",
"metadata": {}
}
{
"type": "if_match_required",
"code": 7220,
"message": "A replace needs an If-Match header naming the version you edited.",
"metadata": {}
}
Where credentials can be presented (a key-binding JWT's aud): each exactly as canonicalized, a bare lowercase domain or https://<host>. Stored and returned sorted.
Where baselayer.js may run: https://<host>[:port], or http on localhost, 127.0.0.1 or [::1]; lowercase, with no path and no default port. Stored and returned sorted.
Maximum array length: 50
Maximum string length: 267
Response
The stored lists and their warnings.
Where credentials can be presented and where baselayer.js may run.
Computed from the two lists on every response and never stored: origin_without_audience for each origin whose host no audience names, bare or as https://<host>.
Show child attributes
{"docsConfig":{"theme":"mint","$schema":"https://mintlify.com/docs.json","name":"Baselayer","colors":{"primary":"#384ce3","light":"#c6dbf6","dark":"#2232b5"},"logo":{"light":"https://mintcdn.com/baselayer-81245324/D2HqlyNVJCqb8u23/logo/baselayer-wordmark-white.svg?fit=max\u0026auto=format\u0026n=D2HqlyNVJCqb8u23\u0026q=85\u0026s=533e2ee556334e910d3a6d1f2f66ca6a","dark":"https://mintcdn.com/baselayer-81245324/D2HqlyNVJCqb8u23/logo/baselayer-wordmark-white.svg?fit=max\u0026auto=format\u0026n=D2HqlyNVJCqb8u23\u0026q=85\u0026s=533e2ee556334e910d3a6d1f2f66ca6a","href":"https://www.baselayer.com"},"favicon":"https://mintcdn.com/baselayer-81245324/y8jjNyo-CIhfj2Df/favicon.ico?fit=max\u0026auto=format\u0026n=y8jjNyo-CIhfj2Df\u0026q=85\u0026s=5f1029f95d2abd5d4ffd1699330f82ff","navbar":{"links":[{"href":"https://console.baselayer.com","label":"Console"}]},"fonts":{"heading":{"family":"Season Mix","source":"fonts/SeasonMix-Variable.woff2","format":"woff2"},"body":{"family":"Uncut Sans","source":"fonts/UncutSans-Variable.woff2","format":"woff2"}},"styling":{"latex":true},"navigation":{"pages":[]}},"deployment":{"deploymentMetadataValue":{"subdomain":"baselayer-81245324","hasAudioNarration":false,"actualSubdomain":"baselayer-81245324","customDomains":["docs.baselayer.com"],"gitSource":{"type":"github","owner":"osiris-ratings","repo":"docs-mintlify","deployBranch":"main","contentDirectory":"","isPrivate":true,"mountPath":"","label":""},"entitlements":{"AI_CHAT":{"status":"ENABLED"},"WEB_MCP":{"status":"ENABLED"},"NARRATION":{"status":"ENABLED"}},"buildId":"6af26d723a191ec9c64c34e9","clientVersion":"0.0.4094","searchFilterCounts":[{"language":"default","tag":"API Reference","count":286},{"language":"default","tag":"Changelog","count":172},{"language":"default","tag":"Businesses","count":133},{"language":"default","tag":"Webhooks","count":81},{"language":"default","tag":"Know Your Agent","count":73},{"language":"default","tag":"Webhook Events","count":68},{"language":"default","tag":"PRODUCT GUIDES","count":64},{"language":"default","tag":"Verify Businesses \u0026 People","count":60},{"language":"default","tag":"Business Verification","count":49},{"language":"default","tag":"Portfolio Monitoring","count":48}]},"assistantConfig":{"enableAskAiButton":false,"enableStarterQuestions":false,"enableContextualStarterQuestions":false,"enableAskAiSearchBar":true},"basePath":"","hasChatPermissions":true,"hasWebMcpPermissions":true,"toggles":[{"name":"kill-isr","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-rbac-roles","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-mintlify-slack","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-integrations-settings","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"rbac-expansion","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-pr-grouping","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-prefix","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"analytics-v7","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"user-flows-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"no-publish-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-onboarding","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"llms-txt-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving-live","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"stripTemperatureMiddleware","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"support-platform-pylon-zendesk","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"instant-rollback","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications-server","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-fable","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fixed-ai-action-pricing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automation-resolve-merge-conflict","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"scoped-publishing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"mintql","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"page-level-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-version-history-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-page-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"full-page-search","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workspace-projects","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"assistant-v5","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fork-pr-previews","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"revalidation-jwt","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-sso-scim","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"hobby-abuse-scan","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"dashboard-inbox","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-signup","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-dual-write","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-enabled","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"approve-review-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-metadata","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"sso-setup-deadline-banner","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-serve","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"live-agents","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"comment-mode","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false}],"googleFontsInlined":false},"customCss":[{"filePath":"style.css","content":"html:not(.dark) #navbar{background:#384ce3!important}html:not(.dark) #navbar div,html:not(.dark) #navbar nav{background-color:transparent!important;backdrop-filter:none!important}html:not(.dark) #navbar *{border-color:rgba(255, 255, 255, 0.18)!important}html:not(.dark) #navbar a,html:not(.dark) #navbar span,html:not(.dark) #navbar svg,html:not(.dark) #navbar button,html:not(.dark) #navbar p,html:not(.dark) #navbar div{color:#fff!important}html:not(.dark) #navbar button{background:rgba(255, 255, 255, 0.12)!important;border-color:rgba(255, 255, 255, 0.25)!important}"}],"page":{"pagePath":"api-reference/acceptance/replace-your-applications-audiences-and-allowed-origins","slug":"/api-reference/acceptance/replace-your-applications-audiences-and-allowed-origins","pageMetadata":{"title":"Replace your application's audiences and allowed origins","description":"Stores both lists, each sorted, in place of the current ones. Each value must already be canonical; one that is not is refused, never rewritten. Send the `ETag` of the lists you edited as `If-Match`; if another write changed them first, the replace is refused and nothing changes. Warnings never refuse a replace. Changing `allowed_origins` also needs the `acceptance_origins:update` permission. The change applies to presentations and browser checks after it. A body that fails validation is a 422; then, in order: no `If-Match` is a 428, an application that no longer exists a 404, a stale `If-Match` a 412, and an `allowed_origins` change without the permission a 403.","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json put /acceptance/domains","href":"/api-reference/acceptance/replace-your-applications-audiences-and-allowed-origins","autogeneratedByOpenApi":true},"description":{"compiledSource":"\"use strict\";\nconst {jsx: _jsx, jsxs: _jsxs} = arguments[0];\nconst {useMDXComponents: _provideComponents} = arguments[0];\nfunction _createMdxContent(props) {\n const _components = {\n code: \"code\",\n p: \"p\",\n ..._provideComponents(),\n ...props.components\n };\n return _jsxs(_components.p, {\n children: [\"Stores both lists, each sorted, in place of the current ones. Each value must already be canonical; one that is not is refused, never rewritten. Send the \", _jsx(_components.code, {\n children: \"ETag\"\n }), \" of the lists you edited as \", _jsx(_components.code, {\n children: \"If-Match\"\n }), \"; if another write changed them first, the replace is refused and nothing changes. Warnings never refuse a replace. Changing \", _jsx(_components.code, {\n children: \"allowed_origins\"\n }), \" also needs the \", _jsx(_components.code, {\n children: \"acceptance_origins:update\"\n }), \" permission. The change applies to presentations and browser checks after it. A body that fails validation is a 422; then, in order: no \", _jsx(_components.code, {\n children: \"If-Match\"\n }), \" is a 428, an application that no longer exists a 404, a stale \", _jsx(_components.code, {\n children: \"If-Match\"\n }), \" a 412, and an \", _jsx(_components.code, {\n children: \"allowed_origins\"\n }), \" change without the permission a 403.\"]\n });\n}\nfunction MDXContent(props = {}) {\n const {wrapper: MDXLayout} = {\n ..._provideComponents(),\n ...props.components\n };\n return MDXLayout ? _jsx(MDXLayout, {\n ...props,\n children: _jsx(_createMdxContent, {\n ...props\n })\n }) : _createMdxContent(props);\n}\nreturn {\n default: MDXContent\n};\n","frontmatter":{},"scope":{}},"pageType":"default","mdx":{"mdxSource":{"compiledSource":"\"use strict\";const{Fragment:_Fragment,jsx:_jsx}=arguments[0];const{useMDXComponents:_provideComponents}=arguments[0];function _createMdxContent(props){return _jsx(_Fragment,{})}function MDXContent(props={}){const{wrapper:MDXLayout}={..._provideComponents(),...props.components};return MDXLayout?_jsx(MDXLayout,{...props,children:_jsx(_createMdxContent,{...props})}):_createMdxContent(props)}return{default:MDXContent}","frontmatter":{},"scope":{"config":{},"pageMetadata":{"title":"Replace your application's audiences and allowed origins","description":"Stores both lists, each sorted, in place of the current ones. Each value must already be canonical; one that is not is refused, never rewritten. Send the `ETag` of the lists you edited as `If-Match`; if another write changed them first, the replace is refused and nothing changes. Warnings never refuse a replace. Changing `allowed_origins` also needs the `acceptance_origins:update` permission. The change applies to presentations and browser checks after it. A body that fails validation is a 422; then, in order: no `If-Match` is a 428, an application that no longer exists a 404, a stale `If-Match` a 412, and an `allowed_origins` change without the permission a 403.","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json put /acceptance/domains","href":"/api-reference/acceptance/replace-your-applications-audiences-and-allowed-origins","autogeneratedByOpenApi":true}}},"mdxSourceWithNoJs":null},"mdxExtracts":{"tableOfContents":[],"codeExamples":{}},"jsLinks":["/_mintlify/custom/baselayer-81245324/8f3f8776472b6600/kya-nudge.js"],"openApiReferenceData":{"operation":{"tags":["Acceptance"],"summary":"Replace your application's audiences and allowed origins","description":"Stores both lists, each sorted, in place of the current ones. Each value must already be canonical; one that is not is refused, never rewritten. Send the `ETag` of the lists you edited as `If-Match`; if another write changed them first, the replace is refused and nothing changes. Warnings never refuse a replace. Changing `allowed_origins` also needs the `acceptance_origins:update` permission. The change applies to presentations and browser checks after it. A body that fails validation is a 422; then, in order: no `If-Match` is a 428, an application that no longer exists a 404, a stale `If-Match` a 412, and an `allowed_origins` change without the permission a 403.","operationId":"acceptance_domains_replace","security":["d55e5628-6086-482d-a54a-819ea03c4bb0"],"parameters":["72b0a605-dc33-4e38-814e-f118f869b8d2"],"responses":{"200":"d4216940-7f5a-4fba-8294-fedba79c8800","403":"57ce974d-5256-4b12-a233-e3e93a7c49fd","404":"0b2aa5a9-4171-4111-9f55-804b5c3b1fe9","412":"be6842ea-7c43-4c5e-8ff0-c3bbea684561","422":"76a5f178-0015-4ab2-8c14-b64887b13fc6","428":"c94760d9-2ec5-4451-961a-3e74ca465281"},"requestBody":"66d30638-cf10-440c-9b35-e28e5707d3a4","method":"put","type":"path","servers":["279408f9-2647-4b56-8ce7-e176bc3fec32"],"path":"/acceptance/domains","baseUrlOptions":["https://api.baselayer.com/"],"title":"Replace your application's audiences and allowed origins","codeSamples":[],"requiredOnlyExamples":false,"requestExampleType":"generated","responseExampleType":"generated"},"dependencies":{"parameters":{"72b0a605-dc33-4e38-814e-f118f869b8d2":{"name":"if-match","in":"header","required":false,"schema":{"oneOf":[{"type":"string","title":"If-Match","description":"The `ETag` of the lists the body was edited from.","uniqueKey":"oneOf.0","typeLabel":"string"},{"type":"null","title":"If-Match","description":"The `ETag` of the lists the body was edited from.","uniqueKey":"oneOf.1","typeLabel":"null"}],"isRequired":false,"uniqueKey":"","typeLabel":"string | null"},"description":"The `ETag` of the lists the body was edited from."}},"requestBody":{"required":true,"content":{"application/json":{"schema":{"additionalProperties":false,"description":"The two lists a replace stores, sorted, in place of the current ones.","properties":{"audiences":{"description":"Where credentials can be presented (a key-binding JWT's `aud`): each exactly as canonicalized, a bare lowercase domain or `https://\u003chost>`. Stored and returned sorted.","items":{"maxLength":253,"type":"string","uniqueKey":"audiences.items.[INDEX]","typeLabel":"string"},"maxItems":50,"title":"Audiences","type":"array","isRequired":true,"uniqueKey":"audiences","typeLabel":"string[]"},"allowed_origins":{"description":"Where baselayer.js may run: `https://\u003chost>[:port]`, or `http` on localhost, 127.0.0.1 or [::1]; lowercase, with no path and no default port. Stored and returned sorted.","items":{"maxLength":267,"type":"string","uniqueKey":"allowed_origins.items.[INDEX]","typeLabel":"string"},"maxItems":50,"title":"Allowed Origins","type":"array","isRequired":true,"uniqueKey":"allowed_origins","typeLabel":"string[]"}},"required":["audiences","allowed_origins"],"title":"AcceptanceDomainsRequest (v1)","type":"object","uniqueKey":"","typeLabel":"AcceptanceDomainsRequest (v1) · object"},"examples":{"Example":{"title":"Example","value":{"audiences":["\u003cstring>"],"allowed_origins":["\u003cstring>"]}}},"exampleType":"generated"},"application/vnd.baselayer.v1+json":{"schema":{"additionalProperties":false,"description":"The two lists a replace stores, sorted, in place of the current ones.","properties":{"audiences":{"description":"Where credentials can be presented (a key-binding JWT's `aud`): each exactly as canonicalized, a bare lowercase domain or `https://\u003chost>`. Stored and returned sorted.","items":{"maxLength":253,"type":"string","uniqueKey":"audiences.items.[INDEX]","typeLabel":"string"},"maxItems":50,"title":"Audiences","type":"array","isRequired":true,"uniqueKey":"audiences","typeLabel":"string[]"},"allowed_origins":{"description":"Where baselayer.js may run: `https://\u003chost>[:port]`, or `http` on localhost, 127.0.0.1 or [::1]; lowercase, with no path and no default port. Stored and returned sorted.","items":{"maxLength":267,"type":"string","uniqueKey":"allowed_origins.items.[INDEX]","typeLabel":"string"},"maxItems":50,"title":"Allowed Origins","type":"array","isRequired":true,"uniqueKey":"allowed_origins","typeLabel":"string[]"}},"required":["audiences","allowed_origins"],"title":"AcceptanceDomainsRequest (v1)","type":"object","uniqueKey":"","typeLabel":"AcceptanceDomainsRequest (v1) · object"},"examples":{"Example":{"title":"Example","value":{"audiences":["\u003cstring>"],"allowed_origins":["\u003cstring>"]}}},"exampleType":"generated"}},"exampleType":"generated"},"responses":{"d4216940-7f5a-4fba-8294-fedba79c8800":{"description":"The stored lists and their warnings.","content":{"application/json":{"schema":{"description":"Where credentials can be presented and where baselayer.js may run.","properties":{"audiences":{"description":"The audiences a key-binding JWT's `aud` must be one of, sorted ascending.","items":{"type":"string","uniqueKey":"audiences.items.[INDEX]","typeLabel":"string"},"title":"Audiences","type":"array","isRequired":true,"uniqueKey":"audiences","typeLabel":"string[]"},"allowed_origins":{"description":"The origins a browser check accepts a page from, sorted ascending.","items":{"type":"string","uniqueKey":"allowed_origins.items.[INDEX]","typeLabel":"string"},"title":"Allowed Origins","type":"array","isRequired":true,"uniqueKey":"allowed_origins","typeLabel":"string[]"},"warnings":{"description":"Computed from the two lists on every response and never stored: `origin_without_audience` for each origin whose host no audience names, bare or as `https://\u003chost>`.","items":{"description":"Something in the two lists that is allowed but probably not meant.","properties":{"code":{"description":"What the warning flags.","enum":["origin_without_audience"],"title":"DomainWarningCode","type":"string","isRequired":true,"uniqueKey":"warnings.items.[INDEX].code","typeLabel":"enum\u003cstring>"},"origin":{"description":"The allowed origin concerned.","title":"Origin","type":"string","isRequired":true,"uniqueKey":"warnings.items.[INDEX].origin","typeLabel":"string"},"message":{"description":"For a person reading it; not stable.","title":"Message","type":"string","isRequired":true,"uniqueKey":"warnings.items.[INDEX].message","typeLabel":"string"}},"required":["code","origin","message"],"title":"DomainWarning (v1)","type":"object","uniqueKey":"warnings.items.[INDEX]","typeLabel":"DomainWarning (v1) · object"},"title":"Warnings","type":"array","isRequired":true,"uniqueKey":"warnings","typeLabel":"DomainWarning (v1) · object[]"}},"required":["audiences","allowed_origins","warnings"],"title":"AcceptanceDomains (v1)","type":"object","uniqueKey":"","typeLabel":"AcceptanceDomains (v1) · object"},"examples":{"Example":{"title":"Example","value":{"audiences":["\u003cstring>"],"allowed_origins":["\u003cstring>"],"warnings":[{"code":"origin_without_audience","origin":"\u003cstring>","message":"\u003cstring>"}]}}},"exampleType":"generated"},"application/vnd.baselayer.v1+json":{"schema":{"description":"Where credentials can be presented and where baselayer.js may run.","properties":{"audiences":{"description":"The audiences a key-binding JWT's `aud` must be one of, sorted ascending.","items":{"type":"string","uniqueKey":"audiences.items.[INDEX]","typeLabel":"string"},"title":"Audiences","type":"array","isRequired":true,"uniqueKey":"audiences","typeLabel":"string[]"},"allowed_origins":{"description":"The origins a browser check accepts a page from, sorted ascending.","items":{"type":"string","uniqueKey":"allowed_origins.items.[INDEX]","typeLabel":"string"},"title":"Allowed Origins","type":"array","isRequired":true,"uniqueKey":"allowed_origins","typeLabel":"string[]"},"warnings":{"description":"Computed from the two lists on every response and never stored: `origin_without_audience` for each origin whose host no audience names, bare or as `https://\u003chost>`.","items":{"description":"Something in the two lists that is allowed but probably not meant.","properties":{"code":{"description":"What the warning flags.","enum":["origin_without_audience"],"title":"DomainWarningCode","type":"string","isRequired":true,"uniqueKey":"warnings.items.[INDEX].code","typeLabel":"enum\u003cstring>"},"origin":{"description":"The allowed origin concerned.","title":"Origin","type":"string","isRequired":true,"uniqueKey":"warnings.items.[INDEX].origin","typeLabel":"string"},"message":{"description":"For a person reading it; not stable.","title":"Message","type":"string","isRequired":true,"uniqueKey":"warnings.items.[INDEX].message","typeLabel":"string"}},"required":["code","origin","message"],"title":"DomainWarning (v1)","type":"object","uniqueKey":"warnings.items.[INDEX]","typeLabel":"DomainWarning (v1) · object"},"title":"Warnings","type":"array","isRequired":true,"uniqueKey":"warnings","typeLabel":"DomainWarning (v1) · object[]"}},"required":["audiences","allowed_origins","warnings"],"title":"AcceptanceDomains (v1)","type":"object","uniqueKey":"","typeLabel":"AcceptanceDomains (v1) · object"},"examples":{"Example":{"title":"Example","value":{"audiences":["\u003cstring>"],"allowed_origins":["\u003cstring>"],"warnings":[{"code":"origin_without_audience","origin":"\u003cstring>","message":"\u003cstring>"}]}}},"exampleType":"generated"}},"headers":{"ETag":{"description":"A hash of both sorted lists, quoted; send it back as `If-Match` to replace them.","schema":{"type":"string"}}},"exampleType":"generated"},"57ce974d-5256-4b12-a233-e3e93a7c49fd":{"description":"The body changes `allowed_origins` without `acceptance_origins:update`; `metadata.reason` names the permission.","content":{"application/json":{"schema":{"properties":{"type":{"type":"string","title":"Type","description":"Stable snake_case name of the error. Branch on this, never on `message`.","isRequired":true,"uniqueKey":"type","typeLabel":"string"},"code":{"type":"integer","title":"Code","description":"Integer catalog code of the error.","isRequired":true,"uniqueKey":"code","typeLabel":"integer"},"message":{"type":"string","title":"Message","description":"For a person reading a log; not stable and not localized.","isRequired":true,"uniqueKey":"message","typeLabel":"string"},"metadata":{"additionalProperties":true,"type":"object","title":"Metadata","description":"Context documented per `type`.","uniqueKey":"metadata","typeLabel":"Metadata · object"},"request_id":{"oneOf":[{"type":"string","title":"Request Id","description":"The `X-Request-ID` of the failed request.","uniqueKey":"request_id.oneOf.0","typeLabel":"string"},{"type":"null","title":"Request Id","description":"The `X-Request-ID` of the failed request.","uniqueKey":"request_id.oneOf.1","typeLabel":"null"}],"uniqueKey":"request_id","typeLabel":"string | null"}},"type":"object","required":["type","code","message"],"title":"ForbiddenAccessNoPermission","description":"Forbidden access. The authentication credentials don't have appropriate permissions to access or affect the resource.","examples":[{"type":"forbidden_access_no_permission","code":30,"message":"Forbidden access. The authentication credentials don't have appropriate permissions to access or affect the resource.","metadata":{}}],"uniqueKey":"","typeLabel":"ForbiddenAccessNoPermission · object"},"examples":{"Example":{"title":"Example","value":{"type":"forbidden_access_no_permission","code":30,"message":"Forbidden access. The authentication credentials don't have appropriate permissions to access or affect the resource.","metadata":{}}}},"exampleType":"generated"}},"exampleType":"generated"},"0b2aa5a9-4171-4111-9f55-804b5c3b1fe9":{"description":"The application no longer exists.","content":{"application/json":{"schema":{"properties":{"type":{"type":"string","title":"Type","description":"Stable snake_case name of the error. Branch on this, never on `message`.","isRequired":true,"uniqueKey":"type","typeLabel":"string"},"code":{"type":"integer","title":"Code","description":"Integer catalog code of the error.","isRequired":true,"uniqueKey":"code","typeLabel":"integer"},"message":{"type":"string","title":"Message","description":"For a person reading a log; not stable and not localized.","isRequired":true,"uniqueKey":"message","typeLabel":"string"},"metadata":{"additionalProperties":true,"type":"object","title":"Metadata","description":"Context documented per `type`.","uniqueKey":"metadata","typeLabel":"Metadata · object"},"request_id":{"oneOf":[{"type":"string","title":"Request Id","description":"The `X-Request-ID` of the failed request.","uniqueKey":"request_id.oneOf.0","typeLabel":"string"},{"type":"null","title":"Request Id","description":"The `X-Request-ID` of the failed request.","uniqueKey":"request_id.oneOf.1","typeLabel":"null"}],"uniqueKey":"request_id","typeLabel":"string | null"}},"type":"object","required":["type","code","message"],"title":"ResourceNotFound","description":"Could not locate the resource for the given URI.","examples":[{"type":"resource_not_found","code":1,"message":"Could not locate the resource for the given URI.","metadata":{}}],"uniqueKey":"","typeLabel":"ResourceNotFound · object"},"examples":{"Example":{"title":"Example","value":{"type":"resource_not_found","code":1,"message":"Could not locate the resource for the given URI.","metadata":{}}}},"exampleType":"generated"}},"exampleType":"generated"},"be6842ea-7c43-4c5e-8ff0-c3bbea684561":{"description":"`If-Match` does not name the current lists.","content":{"application/json":{"schema":{"properties":{"type":{"type":"string","title":"Type","description":"Stable snake_case name of the error. Branch on this, never on `message`.","isRequired":true,"uniqueKey":"type","typeLabel":"string"},"code":{"type":"integer","title":"Code","description":"Integer catalog code of the error.","isRequired":true,"uniqueKey":"code","typeLabel":"integer"},"message":{"type":"string","title":"Message","description":"For a person reading a log; not stable and not localized.","isRequired":true,"uniqueKey":"message","typeLabel":"string"},"metadata":{"additionalProperties":true,"type":"object","title":"Metadata","description":"Context documented per `type`.","uniqueKey":"metadata","typeLabel":"Metadata · object"},"request_id":{"oneOf":[{"type":"string","title":"Request Id","description":"The `X-Request-ID` of the failed request.","uniqueKey":"request_id.oneOf.0","typeLabel":"string"},{"type":"null","title":"Request Id","description":"The `X-Request-ID` of the failed request.","uniqueKey":"request_id.oneOf.1","typeLabel":"null"}],"uniqueKey":"request_id","typeLabel":"string | null"}},"type":"object","required":["type","code","message"],"title":"DomainsStale","description":"The audiences or allowed origins have changed since the version you edited. Read them again and reapply your change.","examples":[{"type":"domains_stale","code":7232,"message":"The audiences or allowed origins have changed since the version you edited. Read them again and reapply your change.","metadata":{}}],"uniqueKey":"","typeLabel":"DomainsStale · object"},"examples":{"Example":{"title":"Example","value":{"type":"domains_stale","code":7232,"message":"The audiences or allowed origins have changed since the version you edited. Read them again and reapply your change.","metadata":{}}}},"exampleType":"generated"}},"exampleType":"generated"},"76a5f178-0015-4ab2-8c14-b64887b13fc6":{"description":"The request is invalid.","content":{"application/json":{"schema":{"properties":{"type":{"type":"string","title":"Type","description":"Stable snake_case name of the error. Branch on this, never on `message`.","isRequired":true,"uniqueKey":"type","typeLabel":"string"},"code":{"type":"integer","title":"Code","description":"Integer catalog code of the error.","isRequired":true,"uniqueKey":"code","typeLabel":"integer"},"message":{"type":"string","title":"Message","description":"For a person reading a log; not stable and not localized.","isRequired":true,"uniqueKey":"message","typeLabel":"string"},"metadata":{"additionalProperties":true,"type":"object","title":"Metadata","description":"Context documented per `type`.","uniqueKey":"metadata","typeLabel":"Metadata · object"},"request_id":{"oneOf":[{"type":"string","title":"Request Id","description":"The `X-Request-ID` of the failed request.","uniqueKey":"request_id.oneOf.0","typeLabel":"string"},{"type":"null","title":"Request Id","description":"The `X-Request-ID` of the failed request.","uniqueKey":"request_id.oneOf.1","typeLabel":"null"}],"uniqueKey":"request_id","typeLabel":"string | null"}},"type":"object","required":["type","code","message"],"title":"ValidationFailed","description":"The request is invalid.","examples":[{"type":"validation_failed","code":7112,"message":"The request is invalid.","metadata":{}}],"uniqueKey":"","typeLabel":"ValidationFailed · object"},"examples":{"Example":{"title":"Example","value":{"type":"validation_failed","code":7112,"message":"The request is invalid.","metadata":{}}}},"exampleType":"generated"}},"exampleType":"generated"},"c94760d9-2ec5-4451-961a-3e74ca465281":{"description":"The request has no `If-Match`.","content":{"application/json":{"schema":{"properties":{"type":{"type":"string","title":"Type","description":"Stable snake_case name of the error. Branch on this, never on `message`.","isRequired":true,"uniqueKey":"type","typeLabel":"string"},"code":{"type":"integer","title":"Code","description":"Integer catalog code of the error.","isRequired":true,"uniqueKey":"code","typeLabel":"integer"},"message":{"type":"string","title":"Message","description":"For a person reading a log; not stable and not localized.","isRequired":true,"uniqueKey":"message","typeLabel":"string"},"metadata":{"additionalProperties":true,"type":"object","title":"Metadata","description":"Context documented per `type`.","uniqueKey":"metadata","typeLabel":"Metadata · object"},"request_id":{"oneOf":[{"type":"string","title":"Request Id","description":"The `X-Request-ID` of the failed request.","uniqueKey":"request_id.oneOf.0","typeLabel":"string"},{"type":"null","title":"Request Id","description":"The `X-Request-ID` of the failed request.","uniqueKey":"request_id.oneOf.1","typeLabel":"null"}],"uniqueKey":"request_id","typeLabel":"string | null"}},"type":"object","required":["type","code","message"],"title":"IfMatchRequired","description":"A replace needs an If-Match header naming the version you edited.","examples":[{"type":"if_match_required","code":7220,"message":"A replace needs an If-Match header naming the version you edited.","metadata":{}}],"uniqueKey":"","typeLabel":"IfMatchRequired · object"},"examples":{"Example":{"title":"Example","value":{"type":"if_match_required","code":7220,"message":"A replace needs an If-Match header naming the version you edited.","metadata":{}}}},"exampleType":"generated"}},"exampleType":"generated"}},"security":{"d55e5628-6086-482d-a54a-819ea03c4bb0":{"APIKeyHeader":{"type":"apiKey","in":"header","name":"X-API-Key","scopes":[],"schemeName":"APIKeyHeader"}}},"servers":{"279408f9-2647-4b56-8ce7-e176bc3fec32":{"url":"https://api.baselayer.com/"}},"processedSecurityOptions":[{"schemes":[{"scheme":{"type":"apiKey","in":"header","name":"X-API-Key","scopes":[],"schemeName":"APIKeyHeader"},"schema":{"title":"X-API-Key","type":"string","isRequired":true,"typeLabel":"string","deprecated":false},"schemeName":"APIKeyHeader","name":"X-API-Key"}],"title":"APIKeyHeader"}]},"originalFileLocation":"api-reference/openapi.json"},"subdomain":"baselayer-81245324","siteName":"Baselayer","title":"Replace your application's audiences and allowed origins - Baselayer","navMaps":{"firstHrefInVersion":{},"firstHrefInLanguage":{}},"lastModified":"2026-11-10T01:04:32.563Z","originalFileLocation":"api-reference/acceptance/replace-your-applications-audiences-and-allowed-origins.mdx"},"headHtml":"\u003cscript data-mint-head>(function(){var d=document.documentElement,p=null;if(!p){try{p=localStorage.getItem(\"isDarkMode\")}catch(e){}if(p==='true')p='dark';else if(p==='false')p='light';if(p!=='light'\u0026\u0026p!=='dark'\u0026\u0026p!=='system')p=\"system\"}var r=p==='system'?(matchMedia(\"(prefers-color-scheme: dark)\").matches?'dark':'light'):p;d.classList.remove(r==='dark'?'light':'dark');d.classList.add(r);d.setAttribute(\"data-theme-preference\",p)})();\u003c/script>\u003cmeta data-mint-head name=\"description\" content=\"Stores both lists, each sorted, in place of the current ones. Each value must already be canonical; one that is not is refused, never rewritten. Send the ETag of the lists you edited as If-Match; if another write changed them first, the replace is refused and nothing changes. Warnings never refuse a replace. Changing allowed_origins also needs the acceptance_origins:update permission. The change applies to presentations and browser checks after it. A body that fails validation is a 422; then, in order: no If-Match is a 428, an application that no longer exists a 404, a stale If-Match a 412, and an allowed_origins change without the permission a 403.\">\u003cmeta data-mint-head name=\"application-name\" content=\"Baselayer\">\u003cmeta data-mint-head name=\"generator\" content=\"Mintlify\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/baselayer-81245324/PX_ZXIXr1oHoY_hi/_generated/favicon/android-chrome-192x192.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"apple-touch-icon\" type=\"image/png\" sizes=\"180x180\" href=\"/mintlify-assets/_mintlify/favicons/baselayer-81245324/PX_ZXIXr1oHoY_hi/_generated/favicon/apple-touch-icon.png\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/baselayer-81245324/PX_ZXIXr1oHoY_hi/_generated/favicon/favicon-16x16.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/baselayer-81245324/PX_ZXIXr1oHoY_hi/_generated/favicon/favicon-32x32.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/baselayer-81245324/PX_ZXIXr1oHoY_hi/_generated/favicon/favicon.ico\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/baselayer-81245324/PX_ZXIXr1oHoY_hi/_generated/favicon-dark/android-chrome-192x192.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/baselayer-81245324/PX_ZXIXr1oHoY_hi/_generated/favicon-dark/favicon-16x16.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/baselayer-81245324/PX_ZXIXr1oHoY_hi/_generated/favicon-dark/favicon-32x32.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/baselayer-81245324/PX_ZXIXr1oHoY_hi/_generated/favicon-dark/favicon.ico\" media=\"(prefers-color-scheme: dark)\">\u003cmeta data-mint-head property=\"og:title\" content=\"Replace your application\u0026#x27;s audiences and allowed origins - Baselayer\">\u003cmeta data-mint-head property=\"og:description\" content=\"Stores both lists, each sorted, in place of the current ones. Each value must already be canonical; one that is not is refused, never rewritten. Send the ETag of the lists you edited as If-Match; if another write changed them first, the replace is refused and nothing changes. Warnings never refuse a replace. Changing allowed_origins also needs the acceptance_origins:update permission. The change applies to presentations and browser checks after it. A body that fails validation is a 422; then, in order: no If-Match is a 428, an application that no longer exists a 404, a stale If-Match a 412, and an allowed_origins change without the permission a 403.\">\u003cmeta data-mint-head property=\"og:site_name\" content=\"Baselayer\">\u003cmeta data-mint-head property=\"og:url\" content=\"https://docs.baselayer.com/api-reference/acceptance/replace-your-applications-audiences-and-allowed-origins\">\u003cmeta data-mint-head property=\"og:type\" content=\"website\">\u003cmeta data-mint-head property=\"og:image\" content=\"https://baselayer-81245324.mintlify.site/_mintlify/api/og/v2?division=Domains\u0026amp;title=Replace+your+application%27s+audiences+and+allowed+origins\u0026amp;description=Stores+both+lists%2C+each+sorted%2C+in+place+of+the+current+ones.+Each+value+must+already+be+canonical%3B+one+that+is+not+is+refused%2C+never+rewritten.+Send+the+%60ETag%60\u0026amp;theme=8062a696da8f8e4202f95a94\u0026amp;signature=ec835eee9694cf7e4bf8c4d99f585de4987a4ff4ce60efdb01ed6bbb081a5c82\">\u003cmeta data-mint-head property=\"og:image:width\" content=\"1200\">\u003cmeta data-mint-head property=\"og:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"twitter:card\" content=\"summary_large_image\">\u003cmeta data-mint-head name=\"twitter:title\" content=\"Replace your application\u0026#x27;s audiences and allowed origins - Baselayer\">\u003cmeta data-mint-head name=\"twitter:description\" content=\"Stores both lists, each sorted, in place of the current ones. Each value must already be canonical; one that is not is refused, never rewritten. Send the ETag of the lists you edited as If-Match; if another write changed them first, the replace is refused and nothing changes. Warnings never refuse a replace. Changing allowed_origins also needs the acceptance_origins:update permission. The change applies to presentations and browser checks after it. A body that fails validation is a 422; then, in order: no If-Match is a 428, an application that no longer exists a 404, a stale If-Match a 412, and an allowed_origins change without the permission a 403.\">\u003cmeta data-mint-head name=\"twitter:image\" content=\"https://baselayer-81245324.mintlify.site/_mintlify/api/og/v2?division=Domains\u0026amp;title=Replace+your+application%27s+audiences+and+allowed+origins\u0026amp;description=Stores+both+lists%2C+each+sorted%2C+in+place+of+the+current+ones.+Each+value+must+already+be+canonical%3B+one+that+is+not+is+refused%2C+never+rewritten.+Send+the+%60ETag%60\u0026amp;theme=8062a696da8f8e4202f95a94\u0026amp;signature=ec835eee9694cf7e4bf8c4d99f585de4987a4ff4ce60efdb01ed6bbb081a5c82\">\u003cmeta data-mint-head name=\"twitter:image:width\" content=\"1200\">\u003cmeta data-mint-head name=\"twitter:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"msapplication-config\" content=\"/mintlify-assets/_mintlify/favicons/baselayer-81245324/PX_ZXIXr1oHoY_hi/_generated/favicon/browserconfig.xml\">\u003cmeta data-mint-head name=\"apple-mobile-web-app-title\" content=\"Baselayer\">\u003cmeta data-mint-head name=\"msapplication-TileColor\" content=\"#384ce3\">\u003clink data-mint-head rel=\"canonical\" href=\"https://docs.baselayer.com/api-reference/acceptance/replace-your-applications-audiences-and-allowed-origins\">\u003clink data-mint-head rel=\"alternate\" type=\"application/xml\" href=\"/sitemap.xml\">\u003clink data-mint-head rel=\"alternate\" type=\"text/markdown\" href=\"/api-reference/acceptance/replace-your-applications-audiences-and-allowed-origins.md\">\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https://docs.baselayer.com/#organization\",\"name\":\"Baselayer\",\"url\":\"https://docs.baselayer.com\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https://mintcdn.com/baselayer-81245324/D2HqlyNVJCqb8u23/logo/baselayer-wordmark-white.svg?fit=max\u0026auto=format\u0026n=D2HqlyNVJCqb8u23\u0026q=85\u0026s=533e2ee556334e910d3a6d1f2f66ca6a\"}},{\"@type\":\"WebSite\",\"@id\":\"https://docs.baselayer.com#website\",\"name\":\"Baselayer\",\"url\":\"https://docs.baselayer.com\",\"publisher\":{\"@id\":\"https://docs.baselayer.com/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https://docs.baselayer.com/api-reference/acceptance/replace-your-applications-audiences-and-allowed-origins#webpage\",\"url\":\"https://docs.baselayer.com/api-reference/acceptance/replace-your-applications-audiences-and-allowed-origins\",\"name\":\"Replace your application's audiences and allowed origins\",\"description\":\"Stores both lists, each sorted, in place of the current ones. Each value must already be canonical; one that is not is refused, never rewritten. Send the ETag of the lists you edited as If-Match; if another write changed them first, the replace is refused and nothing changes. Warnings never refuse a replace. Changing allowed_origins also needs the acceptance_origins:update permission. The change applies to presentations and browser checks after it. A body that fails validation is a 422; then, in order: no If-Match is a 428, an application that no longer exists a 404, a stale If-Match a 412, and an allowed_origins change without the permission a 403.\",\"dateModified\":\"2026-11-10T01:04:32.563Z\",\"isPartOf\":{\"@id\":\"https://docs.baselayer.com#website\"},\"breadcrumb\":{\"@id\":\"https://docs.baselayer.com/api-reference/acceptance/replace-your-applications-audiences-and-allowed-origins#breadcrumb\"}},{\"@type\":\"BreadcrumbList\",\"@id\":\"https://docs.baselayer.com/api-reference/acceptance/replace-your-applications-audiences-and-allowed-origins#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Acceptance\",\"item\":\"https://docs.baselayer.com/api-reference/acceptance/list-your-applications-visits\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Domains\",\"item\":\"https://docs.baselayer.com/api-reference/acceptance/get-your-applications-audiences-and-allowed-origins\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Replace your application's audiences and allowed origins\",\"item\":\"https://docs.baselayer.com/api-reference/acceptance/replace-your-applications-audiences-and-allowed-origins\"}]},{\"@type\":[\"TechArticle\",\"APIReference\"],\"@id\":\"https://docs.baselayer.com/api-reference/acceptance/replace-your-applications-audiences-and-allowed-origins#apireference\",\"headline\":\"Replace your application's audiences and allowed origins\",\"name\":\"Replace your application's audiences and allowed origins\",\"description\":\"Stores both lists, each sorted, in place of the current ones. Each value must already be canonical; one that is not is refused, never rewritten. Send the ETag of the lists you edited as If-Match; if another write changed them first, the replace is refused and nothing changes. Warnings never refuse a replace. Changing allowed_origins also needs the acceptance_origins:update permission. The change applies to presentations and browser checks after it. A body that fails validation is a 422; then, in order: no If-Match is a 428, an application that no longer exists a 404, a stale If-Match a 412, and an allowed_origins change without the permission a 403.\",\"url\":\"https://docs.baselayer.com/api-reference/acceptance/replace-your-applications-audiences-and-allowed-origins\",\"mainEntityOfPage\":{\"@id\":\"https://docs.baselayer.com/api-reference/acceptance/replace-your-applications-audiences-and-allowed-origins#webpage\"},\"dateModified\":\"2026-11-10T01:04:32.563Z\",\"publisher\":{\"@id\":\"https://docs.baselayer.com/#organization\"},\"isPartOf\":{\"@id\":\"https://docs.baselayer.com#website\"}}]}\u003c/script>\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@type\":\"WebSite\",\"name\":\"Baselayer\",\"creator\":{\"@type\":\"Organization\",\"name\":\"Mintlify\",\"url\":\"https://mintlify.com\"}}\u003c/script>","siteName":"Baselayer","nav":{"global":null,"tabs":[{"tab":"Get Started","icon":"rocket","pages":[{"title":"Get Started","href":"/docs/meet-baselayer"}]},{"tab":"Verify Businesses \u0026 People","icon":"book-open","pages":[{"title":"Verify Businesses \u0026 People","href":"/docs/business-verification-basics"}]},{"tab":"Know Your Agent","icon":"robot","pages":[{"title":"Know Your Agent","href":"/docs/kya-overview"}]},{"tab":"Hosted Enrollment","icon":"id-card","pages":[{"title":"Hosted Enrollment","href":"/hosted-enrollment/overview"}]},{"tab":"MCP","icon":"plug","pages":[{"title":"MCP","href":"/docs/mcp"}]},{"tab":"API Reference","icon":"square-terminal","anchors":[{"anchor":"Businesses","icon":"building","pages":[{"title":"Businesses","href":"/api-reference/search/post-search"}]},{"anchor":"People","icon":"user","pages":[{"title":"People","href":"/api-reference/people/create-person"}]},{"anchor":"Know Your Agent","icon":"robot","groups":[{"group":"Credentials","pages":[{"group":"Mint","pages":[{"title":"Mint a credential for a person or a business operator","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json post /issuance/credentials","href":"/api-reference/credentials/mint-a-credential-for-a-person-or-a-business-operator"},{"title":"Preview what a Level 3 mint would disclose","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json post /issuance/credentials/preview","href":"/api-reference/credentials/preview-what-a-level-3-mint-would-disclose"},{"title":"List the presets a Level 3 mint can disclose by","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /issuance/credentials/presets","href":"/api-reference/credentials/list-the-presets-a-level-3-mint-can-disclose-by"},{"title":"Mint a test credential for a person or a business operator","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json post /issuance/credentials/test","href":"/api-reference/credentials/mint-a-test-credential-for-a-person-or-a-business-operator"},{"title":"Preview what a Level 3 test mint would disclose","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json post /issuance/credentials/test/preview","href":"/api-reference/credentials/preview-what-a-level-3-test-mint-would-disclose"}]},{"group":"Issued Credentials","pages":[{"title":"Resolve one credential record by its credential_id","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /issuance/credentials/{credential_id}","href":"/api-reference/credentials/resolve-one-credential-record-by-its-credential_id"},{"title":"List your organization's credential records","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /issuance/credentials","href":"/api-reference/credentials/list-your-organizations-credential-records"},{"title":"Revoke one credential","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json post /issuance/credentials/{credential_id}/revoke","href":"/api-reference/credentials/revoke-one-credential"}]},{"group":"Credential Events","pages":[{"title":"List your organization's credential events","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /issuance/credentials/events","href":"/api-reference/credentials/list-your-organizations-credential-events"},{"title":"Export your organization's credential events","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /issuance/credentials/events/export","href":"/api-reference/credentials/export-your-organizations-credential-events"}]}]},{"group":"Identities","pages":[{"group":"Hosted Sessions","pages":[{"title":"Start a hosted enrollment session","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json post /onboarding/sessions","href":"/api-reference/onboarding/start-a-hosted-enrollment-session"},{"title":"Get a hosted enrollment session","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /onboarding/sessions/{session_id}","href":"/api-reference/onboarding/get-a-hosted-enrollment-session"},{"title":"Get a hosted enrollment session's results","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /onboarding/sessions/{session_id}/results","href":"/api-reference/onboarding/get-a-hosted-enrollment-sessions-results"}]},{"group":"Direct Verifications","pages":[{"title":"Start a direct verification","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json post /issuance/identities/verifications","href":"/api-reference/identities/start-a-direct-verification"},{"title":"Get a direct verification","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /issuance/identities/verifications/{verification_id}","href":"/api-reference/identities/get-a-direct-verification"},{"title":"List direct verifications","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /issuance/identities/verifications","href":"/api-reference/identities/list-direct-verifications"}]},{"group":"Verified Identities","pages":[{"title":"List the individuals your organization has verified","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /issuance/identities/individuals","href":"/api-reference/identities/list-the-individuals-your-organization-has-verified"},{"title":"Look up a verified identity by pairwise reference","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /issuance/identities/individuals/{individual_ref}","href":"/api-reference/identities/look-up-a-verified-identity-by-pairwise-reference"},{"title":"Re-verify an identity from its stored verification","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json post /issuance/identities/individuals/{individual_ref}/reverify","href":"/api-reference/identities/re-verify-an-identity-from-its-stored-verification"},{"title":"List the businesses your organization has verified","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /issuance/identities/businesses","href":"/api-reference/identities/list-the-businesses-your-organization-has-verified"},{"title":"Look up a verified business by pairwise reference","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /issuance/identities/businesses/{business_ref}","href":"/api-reference/identities/look-up-a-verified-business-by-pairwise-reference"}]},{"group":"Operator Links","pages":[{"title":"List your organization's operator links","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /issuance/identities/operator_links","href":"/api-reference/identities/list-your-organizations-operator-links"},{"title":"Get one operator link with its evidence","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /issuance/identities/businesses/{business_ref}/operator_links/{individual_ref}","href":"/api-reference/identities/get-one-operator-link-with-its-evidence"},{"title":"Verify or reject that an individual operates a business","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json post /issuance/identities/businesses/{business_ref}/operator_links/{individual_ref}/decide","href":"/api-reference/identities/verify-or-reject-that-an-individual-operates-a-business"}]}]},{"group":"Public keys and status lists","pages":[{"title":"Resolve the credential issuer's DID document","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /.well-known/did.json","href":"/api-reference/registry/resolve-the-credential-issuers-did-document"},{"title":"Fetch the credential issuer's public keys (JWKS)","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /.well-known/jwks.json","href":"/api-reference/registry/fetch-the-credential-issuers-public-keys-jwks"},{"title":"Fetch the credential issuer's JWT VC Issuer Metadata","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /.well-known/jwt-vc-issuer","href":"/api-reference/registry/fetch-the-credential-issuers-jwt-vc-issuer-metadata"},{"title":"Fetch the credential status list token","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /statuslists/{list_id}","href":"/api-reference/registry/fetch-the-credential-status-list-token"},{"title":"Fetch the individual credential's type metadata","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /vct/kya/individual/v1","href":"/api-reference/registry/fetch-the-individual-credentials-type-metadata"},{"title":"Fetch the business credential's type metadata","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /vct/kya/business/v1","href":"/api-reference/registry/fetch-the-business-credentials-type-metadata"}]},{"group":"Audit Log","pages":[{"title":"Read the calling organization's slice of the audit log","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /issuance/audit_log","href":"/api-reference/audit-log/read-the-calling-organizations-slice-of-the-audit-log"}]},{"group":"Acceptance","pages":[{"group":"Visits","pages":[{"title":"List your application's visits","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /acceptance/visits","href":"/api-reference/acceptance/list-your-applications-visits"},{"title":"Get one visit","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /acceptance/visits/{visit_id}","href":"/api-reference/acceptance/get-one-visit"},{"title":"List one visit's timeline","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /acceptance/visits/{visit_id}/timeline","href":"/api-reference/acceptance/list-one-visits-timeline"},{"title":"List one visit's decisions","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /acceptance/visits/{visit_id}/decisions","href":"/api-reference/acceptance/list-one-visits-decisions"}]},{"group":"Decisions","pages":[{"title":"List your application's decisions","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /acceptance/decisions","href":"/api-reference/acceptance/list-your-applications-decisions"},{"title":"Get one decision","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /acceptance/decisions/{decision_id}","href":"/api-reference/acceptance/get-one-decision"}]},{"group":"Policy","pages":[{"title":"Get your application's acceptance policy","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /acceptance/policy","href":"/api-reference/acceptance/get-your-applications-acceptance-policy"},{"title":"Replace your application's acceptance policy","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json put /acceptance/policy","href":"/api-reference/acceptance/replace-your-applications-acceptance-policy"},{"title":"List your application's acceptance policy versions","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /acceptance/policy/versions","href":"/api-reference/acceptance/list-your-applications-acceptance-policy-versions"},{"title":"Get one version of your application's acceptance policy","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /acceptance/policy/versions/{policy_version_id}","href":"/api-reference/acceptance/get-one-version-of-your-applications-acceptance-policy"}]},{"group":"Domains","pages":[{"title":"Get your application's audiences and allowed origins","description":"`audiences` are where credentials can be presented: a key-binding JWT's `aud` must be one of them. `allowed_origins` are where baselayer.js may run: a browser check refuses any other page origin. `warnings` are computed on every response.","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /acceptance/domains","href":"/api-reference/acceptance/get-your-applications-audiences-and-allowed-origins"},{"title":"Replace your application's audiences and allowed origins","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json put /acceptance/domains","href":"/api-reference/acceptance/replace-your-applications-audiences-and-allowed-origins"}]},{"group":"Browser Keys","pages":[{"title":"Create a browser key","description":"Creates a browser public key for your application, the `browserKey` baselayer.js sends. An application has at most 2 keys, so a replacement can be deployed before the old key is deleted; at the limit, delete a key first. Baselayer accepts a new key usually within about 20 seconds, and within about 5 minutes once publishing is healthy.","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json post /acceptance/browser_keys","href":"/api-reference/acceptance/create-a-browser-key"},{"title":"List your application's browser keys","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /acceptance/browser_keys","href":"/api-reference/acceptance/list-your-applications-browser-keys"},{"title":"Get one of your application's browser keys","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json get /acceptance/browser_keys/{browser_key_id}","href":"/api-reference/acceptance/get-one-of-your-applications-browser-keys"},{"title":"Delete a browser key","deprecated":null,"version":null,"openapi":"/api-reference/openapi.json delete /acceptance/browser_keys/{browser_key_id}","href":"/api-reference/acceptance/delete-a-browser-key"}]}]}]},{"anchor":"Admin","icon":"gear","pages":[{"title":"Admin","href":"/api-reference/organization-management/create-organization-for-federation"}]},{"anchor":"Webhooks","icon":"webhook","pages":[{"title":"Webhooks","href":"/api-reference/webhook-management/create-webhook-endpoint"}]}]},{"tab":"Changelog","icon":"clock-rotate-left","pages":[{"title":"Changelog","href":"/changelog/kyb-score-settings-unknown-status-and-missing-address"}]}]},"basePath":"","title":"Replace your application's audiences and allowed origins - Baselayer","buildId":"dpl_42LwxxU1kGN114H4XzwGYXa9ZDah","deploymentId":"dpl_42LwxxU1kGN114H4XzwGYXa9ZDah","dynamics":["c2aa737661","2b790eda92","b0f84f53ff","a9bb46feb3"],"chunks":["OpenApiReferenceProvider-C-hEh3I2.js","utils-CnF4QiUD.js","cloneDeep-izs3Hzxb.js","_Uint8Array-BVIqJ90l.js","isObjectLike-C8vmzPEN.js","isArray-Dcu1dQ5t.js","utils-C7PVNbel.js","toString-BX-iyh8G.js","isSymbol-CSH9U2Gm.js","addUniqueKeysToSchema-8ytevL2A.js","snippetPresets-BT1alx3v.js","style-to-object-BY3JEAdk.js","v4-DIgz8zy6.js","conditional-requirements-CFM0id0Q.js","ApiExamples-BLXC0i_W.js","isEqual-BfaiBbcl.js","usePlaygroundInputsStore-CyLIGI9_.js","shallow-DC0lGVIW.js","getApiPlaygroundDisplay-CgDQ85tN.js","CodeSnippet-6-I-Gpv9.js","CodeSnippets-BAk1kDdu.js","Page-C945cI-W.js","getPastedJson-B276RuWN.js","icon-BqP8etTm.js","MethodPill-DM6sbxG1.js","DuplicateIcon-PyJglOaE.js","createIcon-CMeOMAc_.js","DynamicMarkdown-BoyYAA8K.js","SectionHeading-DAYv3gvZ.js","axios-vUo_bRtp.js","Markdown-BhTTmazV.js","clsx-CR-RHrVC.js","lib-DuNMoZ05.js","lib-B8HbPgcC.js","html-void-elements-mCSPHezU.js","dist-CBUH0-zX.js","katex-YMM-FMeD.js","marked.esm-CZWythHk.js","AssistantPageLink-BmARFYNC.js"]}