# dynadot-mcp MCP server for the Dynadot domain registrar API — manage domains, DNS, contacts, transfers, and more - **Type:** MCP server - **Trust:** 60/100 (B), scored on the package rubric - **Verification:** community-indexed — nobody has claimed this listing - **Version:** 1.4.0 - **Author:** plumbug - **License:** MIT - **npm:** dynadot-mcp - **Source:** https://github.com/mikusnuz/dynadot-mcp - **Compatible clients:** claude-code, cursor, copilot, gemini (basis: transport) ## Trust 60/100 (B), scored on the package rubric - Publisher verified: no - Install scripts: nothing suspicious found - Prompt-injection scan: not run - Obfuscation scan: not run - Evidence age: 0 days ## Security scan - **Status:** clean - **Scanned:** 2026-10-13T23:16:22.960Z - **Version scanned:** 1.4.0 - **CVEs:** none found by OSV at scan time ## Tools 40 declared. Statically extracted from the shipped source — a floor on the surface, not a census. - `get_account_info` — Get Dynadot account information including username, email, and settings. - `get_account_balance` — Check the current account balance available for domain purchases and renewals. - `set_account_defaults` — Set default account settings for new domain registrations. Supports - `list_orders` — List all orders (purchases, renewals, transfers) in the account history. - `get_order_status` — Check the status of a specific order by ID. - `check_processing` — Check if there are any pending/processing operations on the account. - `list_coupons` — List all available coupon codes on the account. - `get_tld_price` — Get pricing information for TLDs (top-level domains). Returns registration, - `create_contact` — Create a new contact record for use with domain registrations. - `edit_contact` — Edit an existing contact record. Only provided fields will be updated. - `delete_contact` — Delete a contact record. The contact must not be in use by any domain. - `list_contacts` — List all contacts in the account, or get details of a specific contact by ID. - `set_contact_regional_setting` — Set region-specific contact settings required by certain TLD registries - `manage_cn_audit` — Manage China (.cn) domain audit requests. Required for .cn domain registration. - `set_reseller_verification` — Set the WHOIS verification status for a reseller contact. - `get_dns` — Get all DNS records for a domain, including A, AAAA, CNAME, MX, TXT, - `set_dns` — Set DNS records for a domain using Dynadot's DNS service. Supports - `set_nameservers` — Set nameservers for a domain. Accepts up to 13 nameserver hostnames. - `get_nameservers` — Get the current nameservers configured for a domain. - `register_nameserver` — Register a custom nameserver (glue record) with a hostname and IP address. - `get_dnssec` — Get DNSSEC (Domain Name System Security Extensions) settings for a domain. - `set_dnssec` — Set or clear DNSSEC for a domain. Provide either a DS record - `add_nameserver` — Add (create) a new nameserver entry with a hostname and IP address. - `set_nameserver_ip` — Update the IP address of an existing registered nameserver. - `delete_nameserver` — Delete a registered nameserver by hostname, or delete all nameservers - `list_registered_nameservers` — List all registered (custom) nameservers in the account. - `search_domain` — Check domain availability. Supports up to 100 domains at once. - `register_domain` — Register a new domain name. Duration is in years (1-10). - `bulk_register_domains` — Register multiple domains at once (up to 100). All domains are registered - `get_domain_info` — Get detailed information about a domain including expiry date, nameservers, - `list_domains` — List all domains in the Dynadot account with basic information. - `renew_domain` — Renew an existing domain registration. Duration is in years. - `delete_domain` — Delete a domain during its grace period. This action cannot be undone - `restore_domain` — Restore a recently deleted domain from the redemption grace period. - `push_domain` — Push (transfer) a domain to another Dynadot account by username. - `create_folder` — Create a new folder for organizing domains. - `delete_folder` — Delete a folder. The folder must be empty (no domains assigned to it). - `list_folders` — List all folders in the Dynadot account. - `set_folder_settings` — Apply default settings to a folder. All domains in the folder will - `rename_folder` — Rename an existing folder. ## Install **Verdict: review** — Installable, but 1 thing to check first: No publisher has proved control of this listing; it is indexed, not vouched for. **Cautions** (coverage gaps and advisories — never blocking) - No publisher has proved control of this listing; it is indexed, not vouched for. **Config** (claude-code): ```json "{\n \"mcpServers\": {\n \"dynadot\": {\n \"command\": \"npx\",\n \"args\": [\n \"-y\",\n \"dynadot-mcp\"\n ],\n \"env\": {\n \"DYNADOT_API_KEY\": \"\"\n }\n }\n }\n}" ``` **Credentials it will ask for** (names only — Forge never holds a value): - `DYNADOT_API_KEY` — Dynadot API Key (required) Placeholders only. Forge never holds, brokers, or transmits a credential value — replace each in your own config file. Do not send a value back to Forge; no Forge endpoint accepts one. - This entry needs 1 credential (1 required). The generated config carries placeholders, so it will fail in the editor rather than at runtime if they are left unset. ## Blast radius Extensive blast radius — deletes data; holds an api key. - Floor 57, ceiling 57 (tier: extensive) - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/dynadot-mcp - Install plan: https://forgeregistry.com/api/v1/packages/dynadot-mcp/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/dynadot-mcp - HTML page: https://forgeregistry.com/registry/dynadot-mcp - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.