Introducing @onlydns/mcp — the official Model Context Protocol server for OnlyDNS. Connect Claude Desktop, Cursor, and autonomous AI agents directly to authoritative Anycast DNS for natural-language domain orchestration, record management, 1-click DNSSEC, and TSIG dynamic updates.
As AI agents transition from code generators to autonomous deployment engines, infrastructure management must become frictionless and machine-native. Developers and agents shouldn't have to pause automated workflows to manually configure DNS records or click through web dashboards. Today, we are excited to release @onlydns/mcp, our official Model Context Protocol (MCP) server that empowers LLMs to inspect, manage, and secure authoritative DNS infrastructure safely and autonomously.
Built on top of the official TypeScript SDK (@onlydns/sdk), the OnlyDNS MCP server exposes a rich suite of typed tools for Claude Desktop, Cursor, Windsurf, Claude Code, Junie, and custom agentic frameworks. With standard environment configuration and zero-install execution via npx, AI assistants can query records, configure routing, sign zones with DNSSEC, and provision TSIG credentials in response to natural-language prompts.
Why Model Context Protocol for DNS?
The Model Context Protocol (MCP) is an open standard that allows LLMs to interact securely with external tools and data sources. Bringing MCP to authoritative DNS provides crucial advantages:
Ask your assistant to "Add an A record pointing staging to 192.0.2.100 and sign the zone with DNSSEC" and have it executed accurately in seconds.
Autonomous coding agents spinning up preview containers, cloud functions, or staging clusters can provision public Anycast DNS ingress autonomously.
Every tool defines explicit JSON schema validation, record normalization, and informative error handling to prevent malformed DNS updates.
Quick Start & Client Setup
Getting started requires only an OnlyDNS API Bearer Token from the OnlyDNS Portal.
🟣 Claude Desktop Configuration
Add the OnlyDNS server configuration to your claude_desktop_config.json file:
{
"mcpServers": {
"onlydns": {
"command": "npx",
"args": ["-y", "@onlydns/mcp"],
"env": {
"ONLYDNS_API_TOKEN": "YOUR_ONLYDNS_BEARER_TOKEN"
}
}
}
}~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows).
⚡ Cursor, Windsurf & Claude Code
Add to your project’s .cursor/mcp.json or global IDE MCP settings:
{
"mcpServers": {
"onlydns": {
"command": "npx",
"args": ["-y", "@onlydns/mcp"],
"env": {
"ONLYDNS_API_TOKEN": "YOUR_ONLYDNS_BEARER_TOKEN"
}
}
}
}Complete Suite of MCP Tools
The OnlyDNS MCP server gives LLMs comprehensive control over DNS operations while enforcing clean parameter boundaries:
Domain Management
list_domains: List all active domains and zones in the account.create_domain: Create a new authoritative DNS zone.
DNS Record Operations
list_records: Query records with type/name filtering.add_record: Add or append records (A, AAAA, CNAME, MX, TXT, SRV, CAA, URL, PROXY).update_record: Modify values or adjust TTL.delete_record: Delete specific records or values.set_records: Atomic full zone replacement.
Automated DNSSEC
get_dnssec: Retrieve signing status, DS records, and DNSKEY parameters.enable_dnssec: 1-click cryptographic zone signing.disable_dnssec: Disable DNSSEC signing.
RFC 2136 TSIG Keys
list_tsig_keys: List account TSIG keys.create_tsig_key: Generate HMAC-SHA256 credentials.configure_domain_tsig: Bind keys for DDNS or AXFR.remove_domain_tsig: Detach keys from a zone.
What You Can Ask Your AI Assistant
Once the MCP server is configured in Claude Desktop or Cursor, you can manage DNS in plain English:
The Complete OnlyDNS Developer Ecosystem
The MCP server is one part of our commitment to building the fastest, most accessible authoritative DNS infrastructure for modern software engineering:
- Autonomous & AI Agent Infrastructure Hub: Complete guide to agent architectures, machine discovery, and ephemeral ingress.
- Official OnlyDNS SDKs: Python, TypeScript, Go, and PHP client libraries.
- OnlyDNS CLI (@onlydns/cli): Terminal-based DNS management and JSON automation for CI/CD pipelines.
- Automated 1-Click DNSSEC: Instant cryptographic signing with automatic Zone Signing Key rollover.
- RFC 2136 TSIG Dynamic DNS: Dynamic updates via standard RFC protocol for Let's Encrypt and Certbot.
- Web Management Interface: Clean, distraction-free visual table management for human oversight.