Your domain on your app. Certificates that renew themselves.
Add a domain, set the DNS records the answer names, and Rytiv proves it, issues the certificate and renews it before it runs out. Prove a whole zone once and every name below it is yours. Included at no charge.
ry domains add web www.example.com
Domains and TLS, in detail.
The records, named for you
The answer of ry domains add names exactly what to set: a CNAME for a subdomain, A records for an apex, and a TXT record to prove ownership. Copy them from there.
Checked until it works
Rytiv checks again after about a minute, then doubles the gap up to an hour. ry domains check asks right away. A missing record keeps the domain pending, never in error.
Renews itself
The certificate is ordered over ACME as soon as ownership is proven and renewed when fewer than 30 days remain. Port 80 answers a redirect to HTTPS.
A whole zone
Prove example.com once with two CNAME records. Every name directly below it is covered by one wildcard certificate and needs no DNS change of its own.
Redirects without loops
example.com to www.example.com with a 308, path and query kept. A target cannot itself redirect, so there are no chains and no loops.
Every app has one already
https://<app>.rytiv.app answers from the start, covered by the platform's own certificate.
Add, check, redirect.
From the CLI or the API. The answer carries the records to set.
ry domains add web www.example.com # prints the records to set ry domains check web www.example.com # check now instead of waiting ry domains list web # status, days left, missing records ry domains redirect web example.com www.example.com ry domains zones add example.com # every name below, one certificate
curl -X POST https://api.rytiv.com/v1/apps/web/domains \
-H "Authorization: Bearer $RYTIV_TOKEN" \
-H "Content-Type: application/json" \
-d '{"domain": "www.example.com"}'
# status pending_dns, and dns.txt and dns.point: the records to set
curl https://api.rytiv.com/v1/apps/web/domains \
-H "Authorization: Bearer $RYTIV_TOKEN" The bounds, as the platform enforces them.
Limits
- Price
- included, fair use applies
- Domain length
- up to 253 characters, labels up to 63
- Certificate renewal
- when fewer than 30 days remain
- DNS checks
- after about 1 minute, doubling up to 1 hour
- Zone proof covers
- one level below the zone
- Wildcards
- by proving the zone
Every bound is on Limits and quotas. A request outside them answers 400 with bad-request and names the field.
Errors you will meet
| 400 | wildcardA wildcard. ip-literal, single-label and platform-domain answer the same way |
| 400 | app-domainThe name is inside the platform's own address space |
| 409 | mail-domainA name below your proven zone is a sending domain |
| 409 | conflictThe domain is already claimed by someone |
Every error is JSON with a sentence and a stable code. Branch on code. See the error catalog.
TLS certificates and custom domains are included at no charge. Fair use applies.
For businesses and freelancers. All prices excluding VAT. Prepaid credit in euros, no plans, no seats. Introductory pricing until 31 January 2027. Pricing
What developers ask about Domains and TLS.
Answers from the documentation. The Custom domains guide has the rest.
Can I put an apex domain like example.com on an app?
Yes. An apex cannot carry a CNAME, so it gets A records with the ingress addresses from the answer instead.
How long until it works?
As long as your DNS takes. Rytiv checks again after about a minute, then doubles the gap up to an hour; ry domains check asks right away. The domain is active once the certificate exists and a machine of the app is ready to answer.
Do you accept wildcard domains?
Yes, through the zone. Prove it once with ry domains zones add, and every name directly below it is covered by one wildcard certificate.
What does the list show?
ry domains list shows each domain's status, the days left on its certificate and the records still missing.
What happens when I remove a domain?
It stops routing.
What does it cost?
Nothing. TLS certificates and custom domains are included, like builds, outbound transfer and team members.
On the same API, the same bill.
Put your domain on an app.
Deploy, add the domain, set the records. Certificates included.
claude mcp add --transport http rytiv https://api.rytiv.com/v1/mcp --header "Authorization: Bearer <your key>"
For businesses and freelancers, from a solo developer to a team. Pricing