About this block

Domain Verification Card is the auto join onboarding surface for workspace admins: two verified domains (acme.com and acme.io) each show their auto join behavior and joined member count, while the pending acmelabs.dev domain expands into a DNS TXT record panel with host, value, a copy action, and a Check DNS recheck button.

Domains are one typed array with a status field. Verified rows carry a member count the pending row leaves undefined, and the pending branch renders the record panel inline. The footer note states the two rules admins forget: auto joined members get the workspace default role, and removing a domain never removes members who already joined through it.

When to use

Reach for this block on the organization or security settings page, wired to your domains and DNS verification endpoints. Gate the Add domain button behind the workspace admin role so members cannot open the org to a new email domain.

A natural flow around it on an Application Pro page:

Before

• Settings shell
• Auth pages

After

• Pending invites list
• Settings pages

What you can display

One strong use is the verified domains panel. Other verification shapes:

• SSO domain claim. The same rows tied to an identity provider with a claimed badge per domain.
• Approval queue. Auto join swapped for a request list that admins clear by hand.
• Subdomain scoping. Records scoped to a subdomain so only that team auto joins.

Tip: the DNS record panel is the whole block; keep the copy action and propagation note or admins bounce to support before the record ever resolves.