URL: /mcp/tools/dns
---
title: DNS tools
description: Read and write DNS records, plus apply preset templates for common providers.
---
DNS lives on Cloudflare. The domain must have `dns_management = "domaingenius"` and a configured `cloudflare_zone_id`. Use `update_domain_settings` to enable managed DNS first.
Write operations route through the agent confirmation pipeline. If the user's threshold is exceeded, the response is `status: "pending_confirmation"` with a token + URL — surface the URL to the user, they approve, then re-call with `request_id`.
## `list_dns_records`
Required scope: `dns:read`.
A, AAAA, CNAME, MX, TXT, NS, etc.
Seconds, or `1` for auto.
## `create_dns_record`
Required scope: `dns:write`.
Record type.
Apex (`example.com.au`) or subdomain.
IP, target hostname, TXT body, etc.
TTL in seconds, or `1` for auto.
Required for MX and SRV.
Whether Cloudflare should proxy.
Idempotency key. Auto-generated if omitted.
## `update_dns_record`
Replaces a record — supply every field. Same scope and params as `create_dns_record` plus:
Record id from `list_dns_records`.
## `delete_dns_record`
Required scope: `dns:write`.
## `list_dns_presets`
Catalog of preset templates (Vercel, Cloudflare Pages, Google Workspace MX, etc.).
Required scope: `dns:read`.
## `get_active_dns_presets`
Detect which presets are currently applied to the domain's zone.
Required scope: `dns:read`.
Returns `{ "active": ["vercel", "google_mx"] }`.
## `apply_dns_preset`
Deletes records the preset conflicts with, then creates the preset's records. Always confirms — `bulk_count=5` forces it through the confirmation pipeline.
Required scope: `dns:write`.
Key from `list_dns_presets`.
Per-preset inputs (e.g. Vercel team id).
Returns `{ "created": int, "deleted": int }`.
## `remove_dns_preset`
Removes records belonging to the preset. Same confirmation behaviour as apply.
Required scope: `dns:write`.