Check website and domain

Judges a website and a .ton domain without writing anything: the website's host as it will be served, the domain's owner, expiry and current site record, and every problem that prevents an order. It reads the domain on the chain and resolves the host, but sends your website no request: a firewall in front of it shows only in Verify (upstream_challenge).

Field	Type	Notes
`url`	string	your website: `https://shop.example.com` or `shop.example.com`; https only, no path, query or port other than 443; up to 2048 characters
`domain`	string	your `.ton` domain: `shop.ton` or `shop`, one label

curl -X POST https://app.apiton.org/v2.SiteProxy/Check -H 'Content-Type: application/json' \
  -d '{"url":"https://shop.example.com","domain":"shop.ton"}'

eligible is true when problems is empty (absent when false). domain_owner is the wallet that owns the domain's NFT; right after the domain's auction, until the item takes its next message, that is the winner (as Nft/Domain answers it). record is absent when a problem was found before the chain was read. kind: domain (or subdomain, once names under apiton.ton open); empty when domain is not a .ton name that can be ordered (apiton.ton itself, in the live example).

Problems (problems[].code; message is one sentence for the person who asked). New codes may be added: show message for an unknown one.

Code	When
`bad_url`	not a website address
`not_https`	`http://` or another scheme: only https websites are served
`credentials`	a user name or password in the address
`has_path`	a path, query or `#` (a start page is `root_path` of `Create`)
`bad_port`	a port other than 443
`ip_literal`	an IP address instead of the website's name
`bad_host`	not a valid website name
`reserved_name`	a name that is not a public website (`.ton`, `.onion`, `.local`, `localhost`, …)
`own_host`	apiton's own names, or a name that resolves to apiton's address
`gateway_host`	a public `.ton` web gateway: serving it would loop
`denied_host`	a website apiton does not serve
`private_address`	the host resolves to a private or reserved address
`host_not_found`	the host does not resolve
`restricted_name`	a word like `wallet`, `tonkeeper`, `airdrop`, `support` or an exchange's name in the domain or the host: refused automatically against phishing
`bad_domain`	not a `.ton` domain of one label (4–126 letters, digits or `-`); a name under apiton.ton while those are not open
`own_domain`	a domain apiton serves itself
`domain_not_found`	the domain was never minted
`domain_expired`	the domain has expired: renew it first
`domain_on_sale`	the domain is on sale: take it off sale first
`domain_on_auction`	the domain is on auction
`domain_no_owner`	nobody owns the domain right now
`domain_taken`	another live order serves the domain
`reserved_subdomain`	a name under apiton.ton that apiton keeps (`www`, `api`, `docs`, `wallet`, `support`, …), once those names open

Errors: failed_precondition (400) — url or domain empty or too long · unavailable (503) — the chain read failed (retry), or the service is off.

Request Code Samples

Shell

JavaScript

Java

Swift

PHP

Python

HTTP

Objective-C

Ruby

OCaml

Dart

Responses

🟢200OK

application/json

Bodyapplication/json

Examples

Refused: apiton.ton is served by apiton itself (live, 2026-11-06)Refused: the domain is on sale (illustrative)

{
    "host": "example.com",
    "domain": "apiton.ton",
    "problems": [
        {
            "code": "own_domain",
            "message": "this domain is served by apiton itself"
        }
    ]
}

🔴500Server Error