# POST /api/v1/domains/{domain}/lock

> Set or clear the transfer lock (not available)

- Group: domains
- Tier: W
- Required scope: write:domains
- Docs: https://api.inleed.com/reference/domains/set-domain-lock

## Description

Resolves ownership, then returns a clean `feature_not_available`: the registrar transfer lock cannot be read or changed through the API. Direct the human to the Inleed client area. Returns the domain's resulting `{domain, isLocked, target}` read back from the registrar.

## Path parameters

- `domain` — string (required)

## Body

- `input` — string (required). A domain, email address, website URL, or Inleed service id — for example example.se, info@example.se or 42976. Resolved to the owning account automatically, and the resolved target is echoed back in the response.
- `locked` — boolean [default: false]. true to lock the domain against transfer, false to unlock it.

## Request

```bash
curl -X POST "https://mcp.inleed.com/api/v1/domains/example.se/lock" \
  -H "Authorization: Bearer inl_live_…" \
  -H "Content-Type: application/json" \
  -d '{"input":"example.se","locked":true}'
```

## Errors

- **400**  — codes: invalid_request
- **401** No token was presented, or the token is revoked, expired or unknown. — codes: unauthorized, token_expired, token_revoked
- **403** The token lacks a required scope, or this account does not own the resource. — codes: insufficient_scope, not_owned
- **404** No such resource for this account. — codes: not_found
- **422** Validation error — codes: validation_failed
- **429** The rate limit for this token is exhausted. See `Retry-After`. — codes: rate_limited
- **500** Something went wrong on our side. The failure is logged against `requestId`. — codes: internal_error

## Related

- GET /api/v1/domains — https://api.inleed.com/reference/domains/list-domains
- GET /api/v1/domains/{domain} — https://api.inleed.com/reference/domains/get-domain
- GET /api/v1/domains/{domain}/auth-code — https://api.inleed.com/reference/domains/get-domain-auth-code
- GET /api/v1/domains/{domain}/redirects — https://api.inleed.com/reference/domains/list-domain-redirects