# DNSimple MCP for AI Agents MCP > DNSimple connects domain infrastructure and DNS management directly into your AI agent. It lets you manage domains, control DNSSEC settings, create records, and handle email forwarding without leaving your chat interface. Use it to automate complex tasks like certificate renewals and full domain life cycle management. ## Overview - **Category:** developer-tools - **Price:** Free - **Tags:** dns-management, domain-registration, dnssec, automation, infrastructure-as-code ## Description Managing a modern digital presence means keeping track of everything from basic domain records to advanced security protocols. This MCP lets you talk to your entire DNS infrastructure using natural language. Need to check if a new domain is available? Done. Want to update zone records or enable cryptographic security with DNSSEC? Your agent handles it, just like that. Whether you're building out a new site or auditing existing accounts, you can manage the full lifecycle of your domains—from listing all zones and contacts to creating webhooks and setting up email forwarding rules. It’s designed for technical users who need precision and speed. By connecting this MCP through Vinkius, your AI client acts as a specialized DevOps assistant, giving you direct control over complex DNS operations right where you work. ## Tools ### issue_letsencrypt_renewal Requests the renewal of a Let's Encrypt security certificate for an active domain. ### list_accounts Retrieves a list of all accounts that your current API token has access to. ### list_billing_charges Shows the billing charges associated with a specific account ID. ### list_certificates Lists all active security certificates tied to a given domain name. ### list_contacts Retrieves a list of contacts saved within an account. ### list_domains Lists all domains registered and managed under the authenticated account. ### list_ds_records Shows Delegation Signer (DS) records for a specific domain, used in advanced DNS chains. ### list_email_forwards Retrieves all configured email forwarding rules for a given domain. ### list_pending_pushes Shows if there are any pending updates or pushes waiting for acceptance on domains. ### list_services Lists available services offered within the DNSimple platform context. ### list_templates Retrieves a list of reusable templates stored in an account. ### list_tlds Lists all Top-Level Domains (TLDs) supported by the platform. ### list_webhooks Retrieves a list of webhooks set up to notify other services when events happen. ### list_zone_records Lists all types of records (A, CNAME, TXT, etc.) within a specified zone file. ### list_zones Retrieves a list of all DNS zones managed by the account. ### order_letsencrypt_certificate Initiates the process to order a new Let's Encrypt certificate for a domain. ### accept_push Accepts pending updates or pushes related to a domain push request. ### activate_zone_dns Activates DNS services for an existing zone so it starts resolving. ### authorize_transfer_out Authorizes the transfer of a domain out to another registrar or service. ### batch_change_zone_records Modifies multiple zone records across different zones in one operation. ### change_domain_delegation Updates the name servers for a domain to point to different authoritative sources. ### check_domain_availability Checks if a desired domain name is currently available for registration or use. ### check_zone_distribution Verifies how the zone's DNS records are distributed across various points of presence. ### check_zone_record_distribution Checks the distribution and status of specific zone records globally. ### create_contact Creates a new contact profile within an account, storing relevant details. ### create_domain Registers and creates a brand-new domain name under the current account. ### create_ds_record Creates a Delegation Signer (DS) record for a specified domain to enhance security. ### create_email_forward Establishes a new rule that redirects incoming emails from one address to another. ### create_template Generates and saves a reusable template for future record creation or configuration. ### create_webhook Sets up a webhook URL that triggers notifications when specific events occur. ### create_zone_record Creates a new, single record (like an A or CNAME) in a specified zone file. ### deactivate_zone_dns Temporarily disables DNS resolution for a specific zone. ### dedelegate_from_vanity Removes name server delegation from vanity or default servers. ### delegate_to_vanity Sets up name server delegation to specific vanity servers. ### delete_contact Permanently removes a contact profile from the account. ### delete_domain Deletes an existing domain name managed within the account. ### delete_ds_record Removes a specific Delegation Signer record from a domain's settings. ### delete_email_forward Deletes an existing email forwarding rule for a domain. ### delete_template Removes a reusable template that was previously created. ### delete_webhook Deletes an active webhook notification endpoint. ### delete_zone_record Removes a single, specified record from a zone file. ### disable_auto_renewal Stops the automatic renewal process for a domain's registration period. ### disable_dnssec Turns off DNSSEC security features for a particular domain. ### disable_whois_privacy Disables the privacy protection layer for WHOIS lookups on a domain. ### download_certificate Downloads the actual security certificate file associated with a domain. ### enable_auto_renewal Turns back on the automatic renewal process for a domain's registration period. ### enable_dnssec Activates DNSSEC security features for a particular domain name. ### enable_whois_privacy Turns on the privacy protection layer for WHOIS lookups on a domain. ### get_certificate_private_key Retrieves the private key associated with an existing certificate file. ### get_certificate Downloads or retrieves a copy of a domain's active security certificate. ### get_contact Retrieves the full details for a specific contact profile. ### get_dnssec Checks and reports the current DNSSEC status (enabled or disabled) for a domain. ### get_domain_delegation Retrieves the list of name servers currently assigned to a domain. ### get_domain_prices Fetches pricing information for registering or managing domains. ### get_domain Retrieves all metadata and details about a specific domain name. ### get_ds_record Retrieves the current Delegation Signer record for a given domain. ### get_email_forward Retrieves all detailed information about an existing email forwarding rule. ### get_service Retrieves the full details for a listed service within the account. ### get_template Retrieves all content and parameters of a saved template. ### get_tld_extended_attributes Retrieves extra attributes for any specific Top-Level Domain (TLD). ### get_tld Retrieves general information about a specified TLD. ### get_webhook Retrieves all settings and details for an active webhook notification. ### get_whoami Provides detailed information about the identity of the user making the API call. ### get_zone_file Downloads the complete, raw zone file containing all records for a domain. ### get_zone_record Retrieves the specific data and type of an individual record within a zone. ### get_zone Retrieves all high-level metadata about an entire DNS zone. ### initiate_push Starts the process of pushing updates or changes to a domain's records. ### issue_letsencrypt_certificate Requests and issues a new Let's Encrypt security certificate for a specified domain. ### order_letsencrypt_renewal Orders the renewal of an existing Let's Encrypt certificate, ensuring continuous coverage. ### register_domain Registers a brand new domain name that is currently available for purchase. ### reject_push Declines or rejects an incoming domain push notification, requiring manual intervention. ### renew_domain Renews the registration period for a domain name to prevent expiration. ### restore_domain Restores a domain that has expired or been otherwise deactivated. ### transfer_domain Initiates the process of transferring an existing domain from another registrar. ### update_contact Modifies the details of a specific contact profile within the account. ### update_template Makes changes to an existing reusable template before it's used for record creation. ### update_zone_record Modifies the content or type of a specific zone record already in place. ## Prompt Examples **Prompt:** ``` We need to add a new CNAME record for our staging environment. ``` **Response:** ``` **✅ Success.** The CNAME record 'staging.example.com' has been created and points correctly to `cname.hostingprovider.net`. **Details:** * **Record Type:** CNAME * **Name:** staging.example.com * **Target:** cname.hostingprovider.net * **Status:** Active (TTL: 3600 seconds) The change is live now. ``` **Prompt:** ``` What are my domain name servers for account 987? ``` **Response:** ``` I checked the delegation status for your domains. Here's what I found: | Domain | Current Name Servers | | :--- | :--- | | example.com | ns1.mycompany.net, ns2.mycompany.net | | test-site.org | ns3.otherhost.com | Do you need me to change any of these nameservers? ``` **Prompt:** ``` Our email forwarding seems broken for support@example.com ``` **Response:** ``` **Found the Issue.** I checked your rules and see that the rule set up for `support@example.com` is currently pointing to an invalid address (`old-server.net`). I've deleted that rule and created a new one directing traffic to `helpdesk@newcompany.com`. Please confirm if this looks right. ``` ## Capabilities ### Domain Lifecycle Management You can check if domains are available, create new ones in an account, or delete existing domains. ### DNS Record Configuration and Auditing Manage zone records by retrieving them, creating new entries, batch-changing records across zones, or deleting specific records. ### Security & Certificate Control Enable or disable DNSSEC for any domain, issue Let's Encrypt certificates, and download existing certificates when needed. ### DNS Delegation and Transfer Change name servers for a domain or authorize the transfer of a domain out of your account. ### Communication Flow Management List, create, or delete email forwarding rules to control where incoming mail is routed. ### Account and Resource Auditing Quickly list all accessible accounts, zones, contacts, or billing charges across the entire DNSimple setup. ## Use Cases ### A new client needs a secure website setup. The agent first runs 'check_domain_availability' to find an open name. Then, it automatically registers the domain ('register_domain'), issues a Let's Encrypt certificate ('issue_letsencrypt_certificate'), and finally enables DNSSEC for maximum security. ### An existing site needs its records updated across multiple zones. Instead of making changes zone by zone, the user asks the agent to 'batch_change_zone_records' using a template. The system applies the update consistently and confirms the change. ### A company is migrating its email infrastructure. The user instructs the agent to retrieve all current rules ('list_email_forwards'). The agent reviews them, then creates new forwarding rules ('create_email_forward') for the updated domains. ### An old domain is expiring and needs immediate action. The user asks to renew a lapsed name. The agent first checks if auto-renewal is needed, then runs 'renew_domain' or 'restore_domain', ensuring the site stays online without human intervention. ## Benefits - Manage domain registration, from checking availability to renewing domains like 'renew_domain' or 'register_domain', all in one chat session. - Simplify security auditing by instantly listing credentials using tools like 'list_certificates' and enabling cryptographic protection with 'enable_dnssec'. - Automate communication routing; instead of logging into multiple panels, your agent can list, create, or delete email forwards using 'list_email_forwards' or 'create_email_forward'. - Handle full infrastructure updates by batch-changing zone records across multiple zones with the 'batch_change_zone_records' tool. - Improve visibility into complex data structures; easily list all domains, contacts, and accounts using tools like 'list_domains' or 'list_accounts'. ## How It Works The bottom line is: you skip the dashboard and talk directly to your entire domain infrastructure through your AI client. 1. Subscribe to this MCP on Vinkius and provide your unique DNSimple API Token. 2. Connect your preferred AI client (like Claude or Cursor) using the tokenized connection. 3. Ask your agent a plain language question—for example, 'Enable DNSSEC for my new website'—and watch it execute the complex operation. ## Frequently Asked Questions **How do I use the DNSimple MCP for AI Agents to update my records?** You just ask your agent directly what you need done—for example, 'Change the A record for www.example.com.' The agent handles the complex API calls and makes sure the change is applied correctly. **Can I use the DNSimple MCP for AI Agents to manage multiple domains?** Yes. You can list all your domains with a single request, allowing you to audit or apply changes across different zones simultaneously from one place. **What if my domain expires? Can the DNSimple MCP for AI Agents help renew it?** Absolutely. You can tell your agent to run 'renew_domain' on an expiring name, preventing downtime and keeping your site live without manual steps. **Does this MCP handle SSL certificate renewals? Is that part of the DNSimple MCP for AI Agents?** Yes. The agent can check for expired certificates using 'list_certificates' and automatically issue new ones with a single command, keeping your site secure. **Is this tool better than just using my registrar's dashboard?** It's faster and more repeatable. You get an audit trail in chat instead of digging through logs, and you can automate multi-step processes that would take hours manually. **How do I set up email forwarding using the DNSimple MCP for AI Agents?** You simply ask your agent to 'Set up an alias' or 'Create a forward.' It handles listing current rules and establishing the new redirect rule instantly.