// Agent-Native Infrastructure

Authoritative DNS Engineered for Autonomous AI Agents

Equip autonomous agents, coding assistants, and ephemeral cloud sandboxes with instant Anycast DNS provisioning. Featuring official Model Context Protocol (MCP) server support, programmatic RFC 2136 dynamic updates, and token-optimized machine discovery.

0.2–5s
Edge Sync & Propagation
Native MCP
LLM Tool Calling Server
RFC 2136
TSIG Dynamic DNS Protocol
250,000 / mo
Free Query Tier Included
// The Agent Paradigm Shift

Why Traditional DNS Breaks Autonomous Workflows

Autonomous agents operate at machine speeds — creating sandboxes, validating ACME certificates, deploying preview environments, and routing traffic in seconds. Legacy DNS systems were designed for humans and introduce catastrophic latency and friction.

Legacy DNS Bottlenecks

  • Minutes-long propagation: Unpredictable TTL caches stall automated deployment verification pipelines.
  • Human-centric auth: Clunky web dashboards, MFA prompts, and overly complex IAM permissions halt agent automation.
  • Unstructured docs: Massive HTML manuals waste agent context windows and cause hallucinated API payloads.
  • Static infrastructure assumptions: Manual record management with no standard protocol for ephemeral containers.

The OnlyDNS Agent Architecture

  • Rapid global updates: Zone updates propagate across our 23 Anycast edge nodes in typically 0.2 to 5 seconds.
  • Zero-friction authentication: Granular Bearer tokens and HMAC TSIG keys allow instant, secure programmatic access.
  • Machine-first documentation: Curated /llms.txt and OpenAPI 3.1 specs formatted specifically for token efficiency.
  • Dynamic protocols (RFC 2136 & MCP): Direct tool execution without brittle web scrapers or wrapper scripts.
// Built For AI

Agent-Native Infrastructure Capabilities

Every feature in OnlyDNS is built with an API-first, protocol-standard architecture designed to let autonomous agents manage DNS independently and safely.

01

Model Context Protocol (MCP) Server

Plug OnlyDNS directly into Claude Desktop, Cursor, Devin, LangChain, or custom autonomous loops. Agents can inspect zones, create records, verify propagation, and manage routing via native tool calling.

02

RFC 2136 TSIG Updates & Subdomain Scoping

Perform lightning-fast record updates over standard DNS protocol using cryptographic HMAC-SHA256 transaction signatures. Restrict TSIG keys to specific subdomains (e.g. _acme_challenge or agent sandboxes) to enforce least privilege.

03

Curated Machine Discovery (llms.txt)

Provide agents with concise, markdown-formatted API specs without consuming excessive context tokens. Both /llms.txt (index) and /llms-full.txt (full guide) are always up to date.

04

Ephemeral Sandbox Ingress

Automatically spin up unique subdomains for agent preview environments (e.g., run-912.agent.example.com) and safely tear them down when execution concludes with granular TTL control.

05

Instant ACME DNS-01 Verification

Enable agents to obtain Wildcard SSL/TLS certificates automatically. Publish challenge TXT records with rapid Anycast propagation (0.2–5s) so Let's Encrypt / ZeroSSL validations never time out.

06

Automated DNSSEC & DDoS Defense

Every zone benefits from automated cryptographic DNSSEC signing, key rollover, and global BGP Anycast DDoS scrubbing across 20+ Tier 1 PoPs, protecting agent workloads against spoofing and outages.

// Agent Integration Examples

Integrate in Seconds Across Any Framework

Whether you configure an MCP server, write a Python agent tool, or execute dynamic DNS updates, OnlyDNS requires minimal code and zero boilerplate.

// Add OnlyDNS to your Claude Desktop or Cursor MCP settings:
// File: ~/.config/claude/claude_desktop_config.json
{
  "mcpServers": {
    "onlydns": {
      "command": "npx",
      "args": ["-y", "@onlydns/mcp"],
      "env": {
        "ONLYDNS_API_KEY": "odn_live_your_api_key_here"
      }
    }
  }
}

// Available Tools automatically exposed to LLM:
// - onlydns_list_zones: Inspect hosted domains and query quotas
// - onlydns_get_records: Retrieve current A, AAAA, CNAME, TXT records
// - onlydns_upsert_record: Programmatically provision or update records
// - onlydns_delete_record: Safely clean up ephemeral sandbox subdomains
// The Benchmark

Comparing DNS Infrastructure for AI Systems

How OnlyDNS delivers superior developer ergonomics and speed compared to general-purpose DNS providers.

Capability / Metric OnlyDNS Cloudflare DNS AWS Route 53 Legacy Registrars
Native MCP Tool Server ✅ Official (@onlydns/mcp) ❌ Community / Custom Proxy ❌ Requires Complex AWS IAM ❌ Not Supported
RFC 2136 Dynamic DNS + TSIG ✅ Built-in Native Support ❌ Not Supported ❌ Not Supported ❌ Rare / Extra Cost
Edge Propagation Speed ⚡ Rapid (0.2–5s) ~ 2-5 seconds ~ 30-60 seconds 10 minutes - 24 hours
Machine Discovery (llms.txt) ✅ /llms.txt & /llms-full.txt ❌ HTML Portals Only ❌ Massive Documentation ❌ None
Free Developer / Agent Tier ✅ 250,000 queries/mo free Free (Requires Credit Card) ❌ Paid Per Zone & Query ❌ Paid Bundle Only
Automated DNSSEC Key Rollover ✅ Automated Zone Keys (ZSK) ✅ Supported Manual Setup Required ❌ Often Paid Add-on
// Practical Implementations

Primary AI Agent & Infrastructure Use Cases

From autonomous coding assistants to multi-tenant LLM applications, see how teams leverage OnlyDNS.

Autonomous DevOps & Preview Environments

Coding agents like Devin, Claude Code, or Cursor background workers build and test web applications. OnlyDNS gives them the ability to attach real, SSL-secured domain routes to test preview containers without human intervention.

Multi-Tenant AI Workspaces

SaaS platforms hosting agent sandboxes assign each customer or agent thread a dedicated subdomain. OnlyDNS handles high-frequency zone insertions and updates with zero rate-limit friction.

Edge & Local Agent Mesh Routing

Self-hosted LLMs running on home lab clusters, dynamic residential IPs, or cloud GPUs use RFC 2136 Dynamic DNS to keep authoritative hostnames synchronized with current IP addresses instantaneously.

Automated ACME DNS-01 Challenges

Eliminate HTTP-01 challenge failures in firewalled environments. Agents securely update TXT verification records via API or TSIG, enabling fully autonomous SSL certificate lifecycle management.

// Frequently Asked Questions

AI Agent & Developer FAQ

Common questions about integrating OnlyDNS into automated workflows.

How does the OnlyDNS MCP Server work?

The Model Context Protocol (MCP) server runs locally (e.g. via npx @onlydns/mcp) and exposes structured DNS tools to LLM interfaces like Claude Desktop or Cursor. When the agent determines it needs to create or modify a DNS record, it calls the tool with validated JSON arguments, and the MCP server executes the API call securely using your local API key.

Is a credit card required to start using the API?

No. Our Free Tier includes 1 domain, 25 records, and 250,000 Anycast DNS queries per month with instant API key access immediately upon email verification. You can test your agent workflows without billing hurdles.

How fast do DNS updates propagate across your Anycast network?

Zone updates made via REST API, MCP, or RFC 2136 are pushed to our globally distributed Anycast edge nameservers rapidly, typically synchronizing within 0.2 to 5 seconds. When combined with low TTL records (e.g., 60 seconds), changes resolve worldwide immediately.

What machine-readable documentation formats are provided?

We provide /llms.txt (concise index for agent discovery), /llms-full.txt (complete API operational reference), and an OpenAPI 3.1 specification at https://api.onlydns.com/openapi.json.

Can high-frequency agent fleets scale beyond standard package limits?

Yes! For multi-tenant AI agent swarms, sandbox hosts, and SaaS platforms requiring hundreds of domains or 100M+ queries per month, we provide custom Enterprise packages with tailored limits, dedicated Anycast IPs, and custom SLAs. Contact our engineering team to scale your setup.

// Get Started Today

Empower Your AI Agents with Instant DNS

Create your account in 30 seconds. Get 250,000 free queries every month and full API and MCP access immediately.

Create Free Account Contact Engineering

Message Sent

Thanks for contacting OnlyDNS. We received your message and will follow up shortly.