{"command":{"effect":"write","timeoutSeconds":30,"inputSchema":{"type":"object","description":"Creates a candidate and four DNS instructions. Rejects hostnames with more than 16 labels or whose assigned Return-Path exceeds 201 ASCII characters; error 2077 names the hostname rule that failed. Creation follows read-only checks of the saved provider bundle and published exclusion. Hostnames inside an active full Cloudflare DNS zone, including zones under a PSL private suffix such as workers.dev, or held by another enrollment, return the generic hostname conflict error 2083. While an earlier enrollment of this account with the same hostname or client_reference is being deleted, create returns error 2084 with Retry-After set to the expected completion time. No per-domain provider DNS writes occur. Customer DNS observations remain pending and mail remains inactive. Unverified candidates may share a hostname. Supply an account-unique client_reference to retry the same enrollment safely; reuse with a different hostname returns error 2089. A full domain quota returns error 2081 and frees only when domains are deleted or candidates expire, so it is not retryable; the create rate limit returns 429 with error 2088 and Retry-After. Requests rejected before the Cloudflare zone check do not count toward the rate limit. Final public-DNS, namespace protection and runtime readiness are separate gates. Available only to the configured OpenAI pilot account behind a default-off gate; while the gate is off, the pilot account gets 503 with error 2090 and Retry-After, and existing domains are unaffected. Unsupported methods return 405 with error 2091. Authentication failures may use the gateway error envelope.","properties":{"path":{"type":"object","properties":{"account_id":{"$ref":"#/definitions/email_identifier"}},"required":["account_id"],"additionalProperties":false},"body":{"$ref":"#/definitions/email_email_domain_create"}},"required":["path","body"],"additionalProperties":false,"definitions":{"email_identifier":{"description":"Identifier.","type":"string","maxLength":32,"examples":["023e105f4ecef8ad9ca31a8372d0c353"]},"email_email_domain_create":{"type":"object","properties":{"client_reference":{"description":"Opaque reference for one customer enrollment. Reuse it with the same hostname to retry Create safely. Distinct references can enroll the same unverified hostname; a hostname alone never identifies a customer.","type":"string","maxLength":128,"examples":["customer-42-enrollment-1"]},"hostname":{"description":"Exact external hostname to enroll. After ASCII conversion, the assigned Return-Path hostname must be at most 201 characters (191 for the current cf-bounce. prefix). Wildcards, provider-zone names, and hostnames inside an existing Cloudflare-managed DNS zone are rejected.","type":"string","maxLength":253,"examples":["agents.customer.com"]}},"additionalProperties":false,"required":["hostname"]}}},"name":"Create an Email Domain","id":"cloudflare.email-domains-create","example":{"path":{"account_id":"023e105f4ecef8ad9ca31a8372d0c353"},"body":{"hostname":"agents.customer.com"}},"maxRequests":1,"summary":false}}