What can deSEC MCP by usefulapi do?

It exposes 7 tools: desec_list_domains, desec_get_domain, desec_export_zonefile, desec_list_rrsets, desec_get_rrset, desec_create_rrset, desec_replace_rrset.

Is deSEC MCP by usefulapi safe and reliable?

Trust score 82/100 (grade B), based on live reachability, verified publisher, maintenance, adoption, transparency and tool quality. See our methodology.

Servers / Other

deSEC MCP by usefulapi

io.usefulapi/desec

Read deSEC domains, DNSSEC keys, zone files and RRsets; create or replace one DNS record set.

Compare Website ↗Source ↗

Yes, your AI can use this right now.Answered a live MCP handshake in 196 ms with no sign-in needed and exposes 7 tools.

Connect it

Settings → Connectors → Add custom connector
URL: https://desec.usefulapi.io/mcp

Settings → Apps & Connectors → Advanced → Developer mode
Create connector with URL: https://desec.usefulapi.io/mcp

{
  "mcpServers": {
    "desec": {
      "url": "https://desec.usefulapi.io/mcp"
    }
  }
}

claude mcp add --transport http desec https://desec.usefulapi.io/mcp

{
  "servers": {
    "desec": {
      "type": "http",
      "url": "https://desec.usefulapi.io/mcp"
    }
  }
}

7 tools, verified live

Pulled straight from the server with tools/list on 2026-10-17.

desec_list_domainsread-only

List the DNS domains (zones) in this deSEC account, newest first, with creation and last-published times and minimum TTL. DNSSEC keys are omitted here (see desec_get_domain). Use owns_qname to find which of your domains is responsible for a DNS name (for example before adding a record for www.dev.example.net). Up to 500 per page. GET /domains/.

desec_get_domainread-only

One domain with its DNSSEC key material: the DNSKEY and the DS records to publish at the registrar for the chain of trust, plus minimum TTL and publication times. GET /domains/{name}/.

desec_export_zonefileread-only

The whole zone as a plain-text BIND-format zonefile (all RRsets except DNSSEC types). Handy as a backup before changing records. Counts as an expensive deSEC operation (300/min). GET /domains/{name}/zonefile/.

desec_list_rrsetsread-only

List the DNS records of a domain as RRsets (all records of one name and type, sharing one TTL), newest first. Filter by type and/or subname. Up to 500 per page. GET /domains/{name}/rrsets/.

desec_get_rrsetread-only

One RRset by subname and type, e.g. the A records of "www" or the MX records of the apex. GET /domains/{name}/rrsets/{subname}/{type}/.

desec_create_rrsetcan modify

WRITE: create ONE new RRset (a set of DNS records of one type at one name) in a domain. It goes live in DNS immediately and a wrong record can take a site or mail offline. Fails if an RRset with this subname and type already exists (use desec_replace_rrset for that) or if a CNAME would conflict with other records. Never touches the apex NS or DNSSEC records and cannot delete anything. Subject to d

desec_replace_rrsetcan modify

WRITE (overwrites): set ONE RRset to exactly the given TTL and records, creating it if it does not exist and REPLACING all its current records if it does. It goes live in DNS immediately; a wrong value can take a site or mail offline. The previous RRset is read first and returned as `previous` so the change can be undone with another call. An empty record list is refused (this tool never deletes),

Alternatives in Other

Compare →

deSEC MCP by usefulapi

Connect it

7 tools, verified live

Alternatives in Other

KMKolmo MCP ServerB

FSFabrica (Sepolia testnet)B

RHRhylthymeB

ATAtlasB

BBBikefuchs — Bike Parts Price ComparisonB

UPUrantia PapersB