doDomain is domain-connect-as-a-service: it gives a product a guided flow for pointing a customer's own domain at that product, and handles the DNS records, verification, and certificates behind it. The doDomain plugin lets ChatGPT drive that work from your account: check a domain's current DNS state, list the apps configured on your team, list existing domain connections, create a new connect session for a customer, look up a session you already started, verify a session once the records are in place, and re-run verification on a connection that has drifted.
Access runs through OAuth 2.1 with PKCE and dynamic client registration. Scopes are granted per capability on the consent screen — separate read and write scopes for domains, apps, connections, and sessions — and a tool whose scope you did not grant is never offered to the assistant. Connected apps can be revoked at any time from the Connected Apps page in the dashboard. Tool responses are written against a narrow contract: secret API keys are never returned, and doDomain's billing surface is not reachable over the plugin at all.
Creating a connect session counts against your plan's monthly connection quota; verification checks are rate limited, so a repeated re-verify on the same connection will be told to wait rather than silently retried.