# Claim a domain

Keyless installs collect data under the hostname. Verifying the domain makes it yours, back to the first session.

1. Add the site in [HQ](https://app.doubleagent.so/sites/new), or open the `claim_url` the CLI and install-check print.
2. Prove control with one method:

| Method | Put this | Where |
|---|---|---|
| DNS | TXT `da-verify=<token>` | `_doubleagent.<host>` (on the apex it covers subdomains) |
| Meta tag | `<meta name="doubleagent-verification" content="<token>">` | Home page `<head>` |
| File | `da-verify=<token>` | `https://<host>/.well-known/doubleagent.txt` |
| Script | Your site's `pk_…` in the live page HTML | Any page |

3. Press **Check now** (or `npx @doubleagent-so/cli verify-domain <host> --method dns`). You get `{ "verified": true, "claimed": { "sessions": 1284 } }`.

- Unclaimed data is kept 30 days: aggregates, plus up to 1,000 non-human sessions per hostname.
- Once verified, keyed beacons are only accepted from verified hostnames (`403 origin_not_allowed`).
- Don't want the history? Settings › Discard pre-claim data (`DELETE /v1/sites/:id/preclaim`).
