api: claim tlds, not domains