Verify operator domain

A verified operator domain is required before your buyer account can transact. Two endpoints let you complete verification without waiting for a Scope3 admin.

Verify via AAO

POST /api/v2/buyer/readiness/operator/verify Verifies the operator domain by checking the email claim in an AdCP Alliance Organization (AAO) identity token. Use this path when your work email domain matches the domain you’re claiming. The caller must have already completed the AAO OAuth flow (using openid email scopes). Pass the resulting id_token alongside the domain to verify. The server verifies the JWT signature against AAO’s public keys and compares the email domain to the claimed operator domain. On a match, the domain is marked verified for the account.

curl

curl -X POST https://api.interchange.io/api/v2/buyer/readiness/operator/verify \
  -H "Authorization: Bearer $SCOPE3_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "domain": "acmeretail.com",
    "idToken": "<id_token from AAO OAuth>",
    "audience": "<client_id from AAO dynamic client registration>"
  }'

Parameters

Field	In	Type	Required	Notes
`domain`	body	string	Yes	Operator domain to verify (hostname, no `https://` prefix)
`idToken`	body	string	Yes	JWT `id_token` returned by the AAO OAuth token endpoint
`audience`	body	string	Yes	`client_id` returned by AAO dynamic client registration. Prevents cross-session token reuse.

Response

{ "verified": true }

Errors

400 VALIDATION_ERROR — missing or malformed domain or idToken; or the email claim in the id_token does not match the claimed domain (the error context includes aaoEmailDomain). Use the manual review path if your email is from a different organization.
401 UNAUTHORIZED — missing or invalid bearer token.
404 NOT_FOUND — no saved operator domain found for this account. Save the domain first with PATCH /api/v2/accounts/{customerId}/domain or via the account settings panel.
500 INTERNAL_ERROR — the id_token could not be verified (invalid signature, expired, or AAO metadata unavailable). Retry the OAuth flow.

Request manual review

POST /api/v2/buyer/readiness/operator/verify-request Submits a manual verification request. Use this path when you’re an agency or consultant claiming a client domain that doesn’t match your work email. Your request has been recorded. A member of the Scope3 team will follow up with you at the email address you provided.

curl

curl -X POST https://api.interchange.io/api/v2/buyer/readiness/operator/verify-request \
  -H "Authorization: Bearer $SCOPE3_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "domain": "clientbrand.com",
    "requesterEmail": "you@youragency.com",
    "message": "We are the agency of record for this brand."
  }'

Parameters

Field	In	Type	Required	Notes
`domain`	body	string	Yes	Operator domain to verify
`requesterEmail`	body	string	Yes	Your contact email for this request
`message`	body	string	No	Brief explanation (max 2000 characters)

Response

Returns 202 Accepted:

{ "submitted": true, "id": "12345" }

Errors

400 VALIDATION_ERROR — missing or malformed fields.
401 UNAUTHORIZED — missing or invalid bearer token.

Update account domain

PATCH /accounts/:customerId/domain — save the domain before verifying

Account tasks

All account operations

Getting Started

Advertisers

Campaigns

Product Discovery

Webhooks

Creatives

Signals & Brand

Audiences & Inventory

Measurement & Conversions

Reporting & Activity

Planning & Governance

Connections

Account & Billing

Verify via AAO

Parameters

Response

Errors

Request manual review

Parameters

Response

Errors

Update account domain

Account tasks

​Verify via AAO

​Parameters

​Response

​Errors

​Request manual review

​Parameters

​Response

​Errors

​Related

Update account domain

Account tasks

Verify via AAO

Parameters

Response

Errors

Request manual review

Parameters

Response

Errors

Related