Pauses or resumes a domain the tenant has registered for Domain Protection. Pausing parks DISPLAY and ALERTING only: the domain drops out of the analytics and volume views (unless a read asks for includePaused) and the notifier stops digesting it, but aggregate reports keep arriving at its reporting address and keep being ingested, so nothing is lost while it is parked. The row keeps its reporting address, its fleet claim and its history; resuming restores the state the domain was in before it was paused (pending_dns, verified or monitoring).

A paused domain still counts towards the registry cap that list-protected-domains reports under Limits - remove it if the slot is what you need.

Idempotent: pausing an already-paused domain, or resuming one that is not paused, succeeds and changes nothing, so a retry is always safe. paused is required and must be a boolean - there is no default, because defaulting an absent field to "resume" would silently undo a pause on a malformed retry.

Requires an Enterprise subscription (ErrorCode ENTERPRISE_REQUIRED; not satisfied by Professional, and get-entitlements.isEnterpriseEntitled does not imply it for partner-managed or staff-trial tenants). Platform Admin or Super Admin and a paid plan.