Allowlist the redirect URI for CustomDomain™ (customers connecting a domain through Hostinger sign-in) #73

Hi Hostinger team,

CustomDomain™ (https://customdomain.ai) connects a Hostinger customer's domain to the SaaS products they use. After the customer approves on Hostinger's own consent screen, we write only the one or two DNS records the product needs (a CNAME for a subdomain, or an A record for the root domain).

We sign customers in through the OAuth of your hosted MCP server (RFC 9728 discovery, dynamic client registration, PKCE S256), and we only call the DNS tools. Registration works, but the token endpoint answers untrusted_redirect_uri for our callback. Could you allowlist this redirect URI?

https://api.customdomain.ai/v1/connect/oauth/callback

What we do with a token: read the zone, write only the records the customer approved, read them back, and then revoke the token (unless the customer chose a managed connection). We never touch other records, billing or hosting.

We saw in #53, #58 and #59 that Hostinger does not currently give third parties OAuth client access. If that still holds, is there a partner route we can apply to? Until then, customers can keep connecting with an API token from hPanel.

Thank you,
The CustomDomain™ team
connect@customdomain.ai