# Allow Zone
## Endpoint
`/api/allowed/add`
**Obsolete Path:** `/api/allowZone`
## Method
GET
## Description
Adds a domain name into the Allowed Zones. This creates a new allowed zone entry for the specified domain.
## Authentication
Required. A valid session token obtained from the `login` or `createToken` API call.
## Permissions
Allowed: Modify
## Parameters
| `token` | string | Yes | No | The session token generated by the `login` or the `createToken` call. |
| `domain` | string | Yes | No | The domain name for the zone to be added to the Allowed Zones. |
## Response Fields
| `status` | string | `"ok"` on success. |
## Conditional Logic Notes
- No conditional parameters. Both `token` and `domain` are always required.
- The API uses the "Modify" permission level, distinct from "View" or "Delete".
## Edge Cases
- The documentation does not specify behavior when adding a domain that already exists in the Allowed Zones (likely a no-op or idempotent).
- The documentation does not specify validation rules for the `domain` parameter (e.g., whether wildcards or invalid domain names are accepted).
- No `node` parameter is documented for this endpoint, unlike the `list` and `export` endpoints, so it may not support cluster-aware targeting.