---
title: "API keys and MCP for your DNS"
description: "Create API keys for scripts and pipelines, or connect an AI assistant like Claude through MCP. Both act as you, so your roles, approvals and audit log still apply."
canonical_url: "https://dnsense.io/api-mcp"
---

> Index of every page on this site: [llms.txt](https://dnsense.io/llms.txt)

<key-visual-subpage ctaHref="https://app.dnsense.io/" ctaIcon="ArrowUpRight" ctaLabel="Start for free" description="A deploy script that adds a record. A colleague asking Claude which domains expire this month. API keys and MCP give them access to your account, with the same permissions you have and every change in your history." highlight="your tools" imageAlt="API keys list on the account page of DNSense" imageUrl="feature-api-hero.webp" title="Let your tools work in DNSense">



</key-visual-subpage>

<feature-rows :rows="[{"title":"API keys for scripts and pipelines","titleIcon":"KeyRound","description":"Create a key under Account, name it after where it runs and send it as a Bearer token. Anything you can do in DNSense, a script can do, from creating a record to rolling back a change.","imageUrl":"feature-api-keys.webp","imageAlt":"List of API keys with last used time and disable, rotate and delete buttons","bullets":["Name every key after its job, so you know what breaks when you remove it","Last used and created dates on every key, so unused ones stand out","Disable a key to pause it, enable it again when you need it back"]},{"title":"A secret you see once","titleIcon":"ShieldCheck","description":"The secret is shown when you create the key and never again. Lost it? Rotate the key. The new secret replaces the old one at once, and anything still using the old one stops working.","imageUrl":"feature-api-secret.webp","imageAlt":"Dialog showing a new API key secret with a copy button","bullets":["A key cannot change your password, two-factor or other keys, so a leaked key cannot make itself permanent","Creating, rotating, disabling and deleting a key all land in the audit log","Delete a key and it stops working immediately"]},{"title":"Connect Claude and other AI assistants","titleIcon":"Bot","description":"DNSense speaks MCP, the standard AI assistants use to work with other software. Add the server to Claude or ChatGPT, approve the connection once, and ask in plain language.","imageUrl":"feature-api-mcp.webp","imageAlt":"A conversation where an assistant lists expiring domains and adds a DNS record","bullets":["Every action in the DNSense API is available to the assistant as a tool","Roles, permissions and approvals apply, because the assistant acts as you","Changes it makes show up in the history and the audit log like any other"]},{"title":"You approve it, you can revoke it","titleIcon":"UserCheck","description":"An assistant asks for access on a screen in DNSense. You see which application it is and who you are signed in as, and you decide. The connection becomes an API key in your list.","imageUrl":"feature-api-consent.webp","imageAlt":"Consent screen asking to connect Claude to a DNSense account","bullets":["No password or key to paste into the assistant, you sign in to DNSense and approve","The connection is named after the application, for example Claude (OAuth)","Delete that key and the assistant is out, with no other account to clean up"]}]" highlight="stays inside your rules" label="API keys and MCP" title="Automation that stays inside your rules">



</feature-rows>

<faq :faqs="[{"question":"What can an API key do?","answer":"Whatever you can do, within your team role. It cannot manage your login, two-factor or API keys. Those need you to be signed in to the app."},{"question":"Is the key tied to a team?","answer":"A key belongs to your user account and acts as you, so it follows the permissions of your role in the team you are working in."},{"question":"What is MCP?","answer":"Model Context Protocol, an open standard that lets AI assistants call tools in other software. DNSense offers its API through MCP, so an assistant can read and change your DNS the way a script would."},{"question":"Can an assistant do more than I can?","answer":"No. It uses your own key, so a Viewer cannot make changes through Claude, and a change that needs approval still waits for approval."},{"question":"What if I lose a secret?","answer":"Rotate the key. You get a new secret and the old one stops working at once. Then update wherever the key was used."},{"question":"How do I remove an assistant's access?","answer":"Delete its key under Account, API keys. It is named after the application, for example Claude (OAuth). Disable it instead if you may want it back."},{"question":"Which plans include this?","answer":"All of them. Nothing in DNSense is locked behind a plan."}]" decorativeShape="bottom-left" label="Questions" title="Frequently asked questions about API keys and MCP">



</faq>

## Sitemap

See the full [sitemap](https://dnsense.io/sitemap.md) for all pages.