Back to blog
Integrationcustom-domainproduction

Host your MCP server on your own custom domain

Serve your MCP endpoint from mcp.yourdomain.com instead of a shared URL. Walk through the DNS records, certificate validation, and verification flow end to end.

June 10, 2026·7 min read

A shared MCP URL works perfectly well, but serving your server from mcp.yourdomain.com makes it feel like a native part of your product — better for branding, trust, and customer-facing docs. This guide walks through putting your MCP server on a custom domain: the DNS records you add, how certificate validation works, and the verification flow end to end.

Key takeaways
  • A custom domain maps a hostname you own to your MCP server.
  • You add three DNS records: ownership (TXT), certificate validation (CNAME), and routing (CNAME).
  • A TLS certificate is issued and validated automatically once DNS resolves.
  • Verification checks the records, provisions the cert, and attaches routing for you.
  • Re-verify after DNS changes; propagation can take minutes to hours.

Why use a custom domain

The endpoint is what your customers paste into their AI client and what you publish in your docs. A branded host signals that the integration is official and yours. It also decouples your public endpoint from the underlying infrastructure — you can change what's behind it without customers ever updating their config.

Step 1: Add your domain in Cast

In your workspace, open the domain settings and enter the hostname you want, such as mcp.yourdomain.com. Cast generates the exact DNS records you need to add at your DNS provider.

Workspace navigationactual UI
overview
upload
configure
connect
analytics
logs

Step 2: Add three DNS records

At your DNS provider (Cloudflare, Route 53, Namecheap, etc.), add the records Cast shows you. There are three, each with a distinct job:

DNS records to add
Ownership (TXT)
TXT record

Proves you control the domain before anything is provisioned.

Certificate (CNAME)
ACM validation CNAME

Lets the certificate authority validate and issue a TLS cert for the host.

Routing (CNAME)
CNAME → load balancer

Points your hostname at Cast's ingress so traffic reaches your server.

🌐

If your DNS provider proxies traffic (for example, Cloudflare's orange cloud), set the routing record to DNS-only so the certificate validation and TLS handshake work correctly.

Step 3: Verify

Back in Cast, click Verify. Cast checks that the records resolve, confirms domain ownership, waits for the certificate to be issued and validated, then attaches the certificate and a routing rule so requests to your hostname reach your workspace. When it's done, the domain shows as verified.

If verification doesn't pass immediately

  • Give DNS time — propagation can take minutes to hours depending on your provider and TTL.
  • Check for typos — a single wrong character in a record value will fail validation.
  • Disable proxying — set records to DNS-only if your provider proxies by default.
  • Re-run verify — it's safe to retry; Cast re-checks the current state each time.

Step 4: Use the branded URL

Once verified, your MCP endpoint is available at your custom host over HTTPS. Update your connect snippets and docs to use it. Customers connecting through the branded URL get the same server — now under your name.

See where your customers connect from

Once a branded endpoint is live and customers start connecting, Cast tracks each connection as a session and resolves its geography from the client IP. That turns your custom domain into a live map of demand — which regions use your server, how long sessions last, and how many tools each one calls:

Analytics → Sessionsactual UI
🇺🇸

United States

4m 48s · 21 tool calls

sselive
🇩🇪

Germany

1m 36s · 9 tool calls

sseended
🇧🇷

Brazil

52s · 5 tool calls

httpended
🇯🇵

Japan

2m 41s · 13 tool calls

sseended

Pair this with the session-pattern view (covered in our analytics guide) and your branded server becomes a feedback loop: you see who connects, what they do, and which tools to add next — all under your own domain.

ℹ️

Custom domains are part of the SMB and Enterprise plans, with a limit on how many you can add per plan. Check your plan's allowance if you need several.

Put your MCP server on your own domain

Branded, HTTPS endpoints for your customers — set up in a few DNS records.

Try Cast free

Frequently asked questions

How long does verification take?

Once DNS records propagate, verification and certificate issuance usually complete within minutes. DNS propagation itself can take longer depending on your provider and TTL.

Do I need to manage the TLS certificate?

No. The certificate is requested, validated, and attached automatically once the validation CNAME resolves. Renewal is handled for you.

My provider proxies traffic — will it work?

Set the routing record to DNS-only (e.g. disable Cloudflare's proxy) so certificate validation and the TLS handshake succeed.

Can one domain serve multiple workspaces?

Each custom domain maps to a single workspace. Use separate hostnames for separate servers.