---
title: "Check CAA (domain lock)"
source_url: https://dev.digicert.com/certcentral-apis/services-api/domains/check-caa-domain-lock.html
api_method: PUT
api_endpoint: "/services/v2/domain/{{domain_id}}/caa"
api_url: "https://www.digicert.com/services/v2/domain/{{domain_id}}/caa"
---

**PUT** `https://www.digicert.com/services/v2/domain/{{domain_id}}/caa`

Use this endpoint to check a given domain's DNS CAA resource record for a domain lock account token.

If the correct token is found:

- The API returns a `status` value of `1`
- The domain's lock status (`domain_locking_status`) becomes `enabled`.

If the token is not found:

- The API returns a `status` value of `0`.
- The domain's lock status (`domain_locking_status`) becomes `pending`.

To learn how to place your account token, see <a href="https://docs.digicert.com/en/certcentral/manage-certificates/organization-and-domain-management/domain-locking.html#locking-a-domain" target="_blank" rel="noopener noreferrer">Domain locking – Locking your domain</a>, step 6.

## Example requests and responses

## cURL

```bash
curl --request PUT 'https://www.digicert.com/services/v2/domain/{{domain_id}}/caa' \
--header 'X-DC-DEVKEY: {{api_key}}' \
--header 'Content-Type: application/json' \
--data-raw '{
  "account_token": {{account_token}}
}'
```

**200 OK (Token found)**

```json
{
  "status": "1"
}
```

**200 OK (Token not found)**

```
{
  "status": "0"
}
```


## Path parameters

<table>
<thead>
<tr>
<th>Name</th>
<th>Req/Opt</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td>domain_id</td>
<td>required</td>
<td>Domain ID.</td>
</tr>
</tbody>
</table>

## Request parameters

<table class="params-table">
<thead>
<tr>
<th>Name</th>
<th>Req/Opt</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td>account_token</td>
<td>required</td>
<td>string</td>
<td>Domain lock account token. To get the account token, use the <a href="https://dev.digicert.com/md/certcentral-apis/services-api/domains/domain-info.md">Domain info</a> API.</td>
</tr>
</tbody>
</table>

## Response parameters

<table class="params-table">
<thead>
<tr>
<th>Name</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td>status</td>
<td>string</td>
<td>Number that represents domain lock status.<br><ul><li>If <code>1</code>, the account token is found, and domain locking is enabled.</li><li>If <code>0</code>, the account token is not found, and domain locking is pending.</li></ul></td>
</tr>
</tbody>
</table>