| server_id required | string The id of the server to retrieve |
{- "config_url": "string",
- "daemon_type": "string",
- "id": "string",
- "type": "string",
- "url": "string",
- "version": "string",
- "zones_url": "string"
}| server_id required | string The id of the server to retrieve |
| domain required | string The domain name to flush from the cache |
{- "count": 0,
- "result": "string"
}This methods add a new autoprimary server.
| server_id required | string The id of the server to manage the list of autoprimaries on |
autoprimary entry to add
| account | string Account name for the autoprimary server |
| ip | string IP address of the autoprimary server |
| nameserver | string DNS name of the autoprimary server |
{- "account": "string",
- "ip": "string",
- "nameserver": "string"
}{- "error": "string",
- "errors": [
- "string"
]
}| server_id required | string The id of the server to delete the autoprimary from |
| ip required | string IP address of autoprimary |
| nameserver required | string DNS name of the autoprimary |
{- "error": "string",
- "errors": [
- "string"
]
}NOT IMPLEMENTED
| server_id required | string The id of the server to retrieve |
| config_setting_name required | string The name of the setting to retrieve |
{- "name": "string",
- "type": "string",
- "value": "string"
}| server_id required | string The id of the server to retrieve |
| ip required | string The base address of the network |
| prefixlen required | string The length of the network prefix |
{- "network": "string",
- "view": "string"
}| server_id required | string The id of the server to retrieve |
| ip required | string The base address of the network |
| prefixlen required | string The length of the network prefix |
The name of the view to use for this network
"string"{- "error": "string",
- "errors": [
- "string"
]
}Search the data inside PowerDNS for search_term and return at most max_results. This includes zones, records and comments. The * character can be used in search_term as a wildcard character and the ? character can be used as a wildcard for a single character.
| server_id required | string The id of the server to retrieve |
| q required | string The string to search for |
| max required | integer Maximum number of entries to return |
| object_type | string Type of data to search for, one of “all”, “zone”, “record”, “comment” |
[- {
- "content": "string",
- "disabled": true,
- "name": "string",
- "object_type": "string",
- "ttl": 0,
- "type": "string",
- "zone": "string",
- "zone_id": "string"
}
]Query PowerDNS internal statistics.
| server_id required | string The id of the server to retrieve |
| statistic | string When set to the name of a specific statistic, only this value is returned. If no statistic with that name exists, the response has a 422 status and an error message. |
| includerings | boolean Default: true “true” (default) or “false”, whether to include the Ring items, which can contain thousands of log messages or queried domains. Setting this to ”false” may make the response a lot smaller. |
[- {
- "name": "string",
- "type": "string",
- "value": "string"
}
]| server_id required | string The id of the server |
[- {
- "algorithm": "string",
- "id": "string",
- "key": "string",
- "name": "string",
- "type": "string"
}
]This methods add a new TSIGKey. The actual key can be generated by the server or be provided by the client
| server_id required | string The id of the server |
The TSIGKey to add
| algorithm | string The algorithm of the TSIG key |
| key | string The Base64 encoded secret key, empty when listing keys. MAY be empty when POSTing to have the server generate the key material |
| name | string The name of the key |
{- "algorithm": "string",
- "key": "string",
- "name": "string"
}{- "algorithm": "string",
- "id": "string",
- "key": "string",
- "name": "string",
- "type": "string"
}| server_id required | string The id of the server to retrieve the key from |
| tsigkey_id required | string The id of the TSIGkey. Should match the "id" field in the TSIGKey object |
{- "error": "string",
- "errors": [
- "string"
]
}| server_id required | string The id of the server to retrieve the key from |
| tsigkey_id required | string The id of the TSIGkey. Should match the "id" field in the TSIGKey object |
{- "algorithm": "string",
- "id": "string",
- "key": "string",
- "name": "string",
- "type": "string"
}The TSIGKey at tsigkey_id can be changed in multiple ways:
Only the relevant fields have to be provided in the request body.
| server_id required | string The id of the server to retrieve the key from |
| tsigkey_id required | string The id of the TSIGkey. Should match the "id" field in the TSIGKey object |
A (possibly stripped down) TSIGKey object with the new values
| algorithm | string The algorithm of the TSIG key |
| key | string The Base64 encoded secret key, empty when listing keys. MAY be empty when POSTing to have the server generate the key material |
| name | string The name of the key |
{- "algorithm": "string",
- "key": "string",
- "name": "string"
}{- "algorithm": "string",
- "id": "string",
- "key": "string",
- "name": "string",
- "type": "string"
}| server_id required | string The id of the server to retrieve |
| view required | string The name of the view to update |
The zone to add to the view
"string"{- "error": "string",
- "errors": [
- "string"
]
}| server_id required | string The id of the server to retrieve |
| view required | string The name of the view to update |
| id required | string The zone to remove from the view |
{- "error": "string",
- "errors": [
- "string"
]
}| server_id required | string The id of the server to retrieve |
| zone | string When set to the name of a zone, only this zone is returned. If no zone with that name exists, the response is an empty array. This can e.g. be used to check if a zone exists in the database without having to guess/encode the zone's id or to check if a zone exists. |
| dnssec | boolean Default: true “true” (default) or “false”, whether to include the “dnssec” and “edited_serial” fields in the Zone objects. Setting this to ”false” will make the query a lot faster. |
[- {
- "account": "string",
- "api_rectify": true,
- "catalog": "string",
- "dnssec": true,
- "edited_serial": 0,
- "id": "string",
- "kind": "Native",
- "master_tsig_key_ids": [
- "string"
], - "masters": [
- "string"
], - "name": "string",
- "nameservers": [
- "string"
], - "notified_serial": 0,
- "nsec3narrow": true,
- "nsec3param": "string",
- "presigned": true,
- "rrsets": [
- {
- "changetype": "string",
- "comments": [
- {
- "account": "string",
- "content": "string",
- "modified_at": 0
}
], - "name": "string",
- "records": [
- {
- "content": "string",
- "disabled": true,
- "modified_at": 0
}
], - "ttl": 0,
- "type": "string"
}
], - "serial": 0,
- "slave_tsig_key_ids": [
- "string"
], - "soa_edit": "string",
- "soa_edit_api": "string",
- "type": "string",
- "url": "string",
- "zone": "string"
}
]| server_id required | string The id of the server to retrieve |
| rrsets | boolean Default: true “true” (default) or “false”, whether to include the “rrsets” in the response Zone object. |
The zone struct to patch with
| account | string MAY be set. Its value is defined by local policy |
| api_rectify | boolean Whether or not the zone will be rectified on data changes via the API |
| catalog | string The catalog this zone is a member of |
| dnssec | boolean Whether or not this zone is DNSSEC signed (inferred from presigned being true XOR presence of at least one cryptokey with active being true) |
| edited_serial | integer The SOA serial as seen in query responses. Calculated using the SOA-EDIT metadata, default-soa-edit and default-soa-edit-signed settings |
| id | string Opaque zone id (string), assigned by the server, should not be interpreted by the application. Guaranteed to be safe for embedding in URLs. |
| kind | string Enum: "Native" "Master" "Slave" "Producer" "Consumer" Zone kind, one of “Native”, “Master”, “Slave”, “Producer”, “Consumer” |
| master_tsig_key_ids | Array of strings The id of the TSIG keys used for primary operation in this zone |
| masters | Array of strings List of IP addresses configured as a primary for this zone (“Slave” type zones only) |
| name | string Name of the zone (e.g. “example.com.”) MUST have a trailing dot |
| nameservers | Array of strings MAY be sent in client bodies during creation, and MUST NOT be sent by the server. Simple list of strings of nameserver names, including the trailing dot. Not required for secondary zones. |
| notified_serial | integer The SOA serial notifications have been sent out for |
| nsec3narrow | boolean Whether or not the zone uses NSEC3 narrow |
| nsec3param | string The NSEC3PARAM record |
| presigned | boolean Whether or not the zone is pre-signed |
Array of objects (RRSet) RRSets in this zone (for zones/{zone_id} endpoint only; omitted during GET on the .../zones list endpoint) | |
| serial | integer The SOA serial number |
| slave_tsig_key_ids | Array of strings The id of the TSIG keys used for secondary operation in this zone |
| soa_edit | string The SOA-EDIT metadata item |
| soa_edit_api | string The SOA-EDIT-API metadata item |
| type | string Set to “Zone” |
| url | string API endpoint for this zone |
| zone | string MAY contain a BIND-style zone file when creating a zone |
{- "account": "string",
- "api_rectify": true,
- "catalog": "string",
- "dnssec": true,
- "edited_serial": 0,
- "id": "string",
- "kind": "Native",
- "master_tsig_key_ids": [
- "string"
], - "masters": [
- "string"
], - "name": "string",
- "nameservers": [
- "string"
], - "notified_serial": 0,
- "nsec3narrow": true,
- "nsec3param": "string",
- "presigned": true,
- "rrsets": [
- {
- "changetype": "string",
- "comments": [
- {
- "account": "string",
- "content": "string",
- "modified_at": 0
}
], - "name": "string",
- "records": [
- {
- "content": "string",
- "disabled": true,
- "modified_at": 0
}
], - "ttl": 0,
- "type": "string"
}
], - "serial": 0,
- "slave_tsig_key_ids": [
- "string"
], - "soa_edit": "string",
- "soa_edit_api": "string",
- "type": "string",
- "url": "string",
- "zone": "string"
}{- "account": "string",
- "api_rectify": true,
- "catalog": "string",
- "dnssec": true,
- "edited_serial": 0,
- "id": "string",
- "kind": "Native",
- "master_tsig_key_ids": [
- "string"
], - "masters": [
- "string"
], - "name": "string",
- "nameservers": [
- "string"
], - "notified_serial": 0,
- "nsec3narrow": true,
- "nsec3param": "string",
- "presigned": true,
- "rrsets": [
- {
- "changetype": "string",
- "comments": [
- {
- "account": "string",
- "content": "string",
- "modified_at": 0
}
], - "name": "string",
- "records": [
- {
- "content": "string",
- "disabled": true,
- "modified_at": 0
}
], - "ttl": 0,
- "type": "string"
}
], - "serial": 0,
- "slave_tsig_key_ids": [
- "string"
], - "soa_edit": "string",
- "soa_edit_api": "string",
- "type": "string",
- "url": "string",
- "zone": "string"
}| server_id required | string The id of the server to retrieve |
| zone_id required | string The id of the zone to retrieve |
{- "error": "string",
- "errors": [
- "string"
]
}| server_id required | string The id of the server to retrieve |
| zone_id required | string The id of the zone to retrieve |
| rrsets | boolean Default: true “true” (default) or “false”, whether to include the “rrsets” in the response Zone object. |
| rrset_name | string Limit output to RRsets for this name. |
| rrset_type | string Limit output to the RRset of this type. Can only be used together with rrset_name. |
| include_disabled | boolean “true” (default) or “false”, whether to include disabled RRsets in the response. |
{- "account": "string",
- "api_rectify": true,
- "catalog": "string",
- "dnssec": true,
- "edited_serial": 0,
- "id": "string",
- "kind": "Native",
- "master_tsig_key_ids": [
- "string"
], - "masters": [
- "string"
], - "name": "string",
- "nameservers": [
- "string"
], - "notified_serial": 0,
- "nsec3narrow": true,
- "nsec3param": "string",
- "presigned": true,
- "rrsets": [
- {
- "changetype": "string",
- "comments": [
- {
- "account": "string",
- "content": "string",
- "modified_at": 0
}
], - "name": "string",
- "records": [
- {
- "content": "string",
- "disabled": true,
- "modified_at": 0
}
], - "ttl": 0,
- "type": "string"
}
], - "serial": 0,
- "slave_tsig_key_ids": [
- "string"
], - "soa_edit": "string",
- "soa_edit_api": "string",
- "type": "string",
- "url": "string",
- "zone": "string"
}| server_id required | string The id of the server to retrieve |
| zone_id required | string |
The zone struct to patch with
| account | string MAY be set. Its value is defined by local policy |
| api_rectify | boolean Whether or not the zone will be rectified on data changes via the API |
| catalog | string The catalog this zone is a member of |
| dnssec | boolean Whether or not this zone is DNSSEC signed (inferred from presigned being true XOR presence of at least one cryptokey with active being true) |
| edited_serial | integer The SOA serial as seen in query responses. Calculated using the SOA-EDIT metadata, default-soa-edit and default-soa-edit-signed settings |
| id | string Opaque zone id (string), assigned by the server, should not be interpreted by the application. Guaranteed to be safe for embedding in URLs. |
| kind | string Enum: "Native" "Master" "Slave" "Producer" "Consumer" Zone kind, one of “Native”, “Master”, “Slave”, “Producer”, “Consumer” |
| master_tsig_key_ids | Array of strings The id of the TSIG keys used for primary operation in this zone |
| masters | Array of strings List of IP addresses configured as a primary for this zone (“Slave” type zones only) |
| name | string Name of the zone (e.g. “example.com.”) MUST have a trailing dot |
| nameservers | Array of strings MAY be sent in client bodies during creation, and MUST NOT be sent by the server. Simple list of strings of nameserver names, including the trailing dot. Not required for secondary zones. |
| notified_serial | integer The SOA serial notifications have been sent out for |
| nsec3narrow | boolean Whether or not the zone uses NSEC3 narrow |
| nsec3param | string The NSEC3PARAM record |
| presigned | boolean Whether or not the zone is pre-signed |
Array of objects (RRSet) RRSets in this zone (for zones/{zone_id} endpoint only; omitted during GET on the .../zones list endpoint) | |
| serial | integer The SOA serial number |
| slave_tsig_key_ids | Array of strings The id of the TSIG keys used for secondary operation in this zone |
| soa_edit | string The SOA-EDIT metadata item |
| soa_edit_api | string The SOA-EDIT-API metadata item |
| type | string Set to “Zone” |
| url | string API endpoint for this zone |
| zone | string MAY contain a BIND-style zone file when creating a zone |
{- "account": "string",
- "api_rectify": true,
- "catalog": "string",
- "dnssec": true,
- "edited_serial": 0,
- "id": "string",
- "kind": "Native",
- "master_tsig_key_ids": [
- "string"
], - "masters": [
- "string"
], - "name": "string",
- "nameservers": [
- "string"
], - "notified_serial": 0,
- "nsec3narrow": true,
- "nsec3param": "string",
- "presigned": true,
- "rrsets": [
- {
- "changetype": "string",
- "comments": [
- {
- "account": "string",
- "content": "string",
- "modified_at": 0
}
], - "name": "string",
- "records": [
- {
- "content": "string",
- "disabled": true,
- "modified_at": 0
}
], - "ttl": 0,
- "type": "string"
}
], - "serial": 0,
- "slave_tsig_key_ids": [
- "string"
], - "soa_edit": "string",
- "soa_edit_api": "string",
- "type": "string",
- "url": "string",
- "zone": "string"
}{- "error": "string",
- "errors": [
- "string"
]
}The only fields in the zone structure which can be modified are: kind, masters, catalog, account, soa_edit, soa_edit_api, api_rectify, dnssec, and nsec3param. All other fields are ignored.
| server_id required | string The id of the server to retrieve |
| zone_id required | string |
The zone struct to patch with
| account | string MAY be set. Its value is defined by local policy |
| api_rectify | boolean Whether or not the zone will be rectified on data changes via the API |
| catalog | string The catalog this zone is a member of |
| dnssec | boolean Whether or not this zone is DNSSEC signed (inferred from presigned being true XOR presence of at least one cryptokey with active being true) |
| edited_serial | integer The SOA serial as seen in query responses. Calculated using the SOA-EDIT metadata, default-soa-edit and default-soa-edit-signed settings |
| id | string Opaque zone id (string), assigned by the server, should not be interpreted by the application. Guaranteed to be safe for embedding in URLs. |
| kind | string Enum: "Native" "Master" "Slave" "Producer" "Consumer" Zone kind, one of “Native”, “Master”, “Slave”, “Producer”, “Consumer” |
| master_tsig_key_ids | Array of strings The id of the TSIG keys used for primary operation in this zone |
| masters | Array of strings List of IP addresses configured as a primary for this zone (“Slave” type zones only) |
| name | string Name of the zone (e.g. “example.com.”) MUST have a trailing dot |
| nameservers | Array of strings MAY be sent in client bodies during creation, and MUST NOT be sent by the server. Simple list of strings of nameserver names, including the trailing dot. Not required for secondary zones. |
| notified_serial | integer The SOA serial notifications have been sent out for |
| nsec3narrow | boolean Whether or not the zone uses NSEC3 narrow |
| nsec3param | string The NSEC3PARAM record |
| presigned | boolean Whether or not the zone is pre-signed |
Array of objects (RRSet) RRSets in this zone (for zones/{zone_id} endpoint only; omitted during GET on the .../zones list endpoint) | |
| serial | integer The SOA serial number |
| slave_tsig_key_ids | Array of strings The id of the TSIG keys used for secondary operation in this zone |
| soa_edit | string The SOA-EDIT metadata item |
| soa_edit_api | string The SOA-EDIT-API metadata item |
| type | string Set to “Zone” |
| url | string API endpoint for this zone |
| zone | string MAY contain a BIND-style zone file when creating a zone |
{- "account": "string",
- "api_rectify": true,
- "catalog": "string",
- "dnssec": true,
- "edited_serial": 0,
- "id": "string",
- "kind": "Native",
- "master_tsig_key_ids": [
- "string"
], - "masters": [
- "string"
], - "name": "string",
- "nameservers": [
- "string"
], - "notified_serial": 0,
- "nsec3narrow": true,
- "nsec3param": "string",
- "presigned": true,
- "rrsets": [
- {
- "changetype": "string",
- "comments": [
- {
- "account": "string",
- "content": "string",
- "modified_at": 0
}
], - "name": "string",
- "records": [
- {
- "content": "string",
- "disabled": true,
- "modified_at": 0
}
], - "ttl": 0,
- "type": "string"
}
], - "serial": 0,
- "slave_tsig_key_ids": [
- "string"
], - "soa_edit": "string",
- "soa_edit_api": "string",
- "type": "string",
- "url": "string",
- "zone": "string"
}{- "error": "string",
- "errors": [
- "string"
]
}Fails when zone kind is not Slave, or secondary is disabled in the configuration. Clients MUST NOT send a body.
| server_id required | string The id of the server to retrieve |
| zone_id required | string The id of the zone to retrieve |
{- "error": "string",
- "errors": [
- "string"
]
}Fails when zone kind is not Master or Slave, or primary and secondary are disabled in the configuration. Only works for Slave if renotify is on. Clients MUST NOT send a body.
| server_id required | string The id of the server to retrieve |
| zone_id required | string The id of the zone to retrieve |
{- "error": "string",
- "errors": [
- "string"
]
}This does not take into account the API-RECTIFY metadata. Fails on secondary zones.
| server_id required | string The id of the server to retrieve |
| zone_id required | string The id of the zone to retrieve |
"string"| server_id required | string The id of the server to retrieve |
| zone_id required | string The id of the zone to retrieve |
[- {
- "active": true,
- "algorithm": "string",
- "bits": 0,
- "cds": [
- "string"
], - "dnskey": "string",
- "ds": [
- "string"
], - "id": 0,
- "keytype": "ksk",
- "privatekey": "string",
- "published": true,
- "type": "string"
}
]This method adds a new key to a zone. The key can either be generated or imported by supplying the content parameter. if content, bits and algo are null, a key will be generated based on the default-ksk-algorithm and default-ksk-size settings for a KSK and the default-zsk-algorithm and default-zsk-size options for a ZSK.
| server_id required | string The id of the server to retrieve |
| zone_id required | string |
Add a Cryptokey
| active | boolean Whether or not the key is in active use |
| algorithm | string The name of the algorithm of the key, should be a mnemonic |
| bits | integer The size of the key |
| cds | Array of strings An array of DS records for this key, filtered by CDS publication settings |
| dnskey | string The DNSKEY record for this key |
| ds | Array of strings An array of DS records for this key |
| id | integer The internal identifier, read only |
| keytype | string Enum: "ksk" "zsk" "csk" |
| privatekey | string The private key in ISC format |
| published | boolean Whether or not the DNSKEY record is published in the zone |
| type | string set to "Cryptokey" |
{- "active": true,
- "algorithm": "string",
- "bits": 0,
- "cds": [
- "string"
], - "dnskey": "string",
- "ds": [
- "string"
], - "id": 0,
- "keytype": "ksk",
- "privatekey": "string",
- "published": true,
- "type": "string"
}{- "active": true,
- "algorithm": "string",
- "bits": 0,
- "cds": [
- "string"
], - "dnskey": "string",
- "ds": [
- "string"
], - "id": 0,
- "keytype": "ksk",
- "privatekey": "string",
- "published": true,
- "type": "string"
}| server_id required | string The id of the server to retrieve |
| zone_id required | string The id of the zone to retrieve |
| cryptokey_id required | string The id value of the Cryptokey |
{- "error": "string",
- "errors": [
- "string"
]
}| server_id required | string The id of the server to retrieve |
| zone_id required | string The id of the zone to retrieve |
| cryptokey_id required | string The id value of the CryptoKey |
{- "active": true,
- "algorithm": "string",
- "bits": 0,
- "cds": [
- "string"
], - "dnskey": "string",
- "ds": [
- "string"
], - "id": 0,
- "keytype": "ksk",
- "privatekey": "string",
- "published": true,
- "type": "string"
}| server_id required | string The id of the server to retrieve |
| zone_id required | string |
| cryptokey_id required | string Cryptokey to manipulate |
the Cryptokey
| active | boolean Whether or not the key is in active use |
| algorithm | string The name of the algorithm of the key, should be a mnemonic |
| bits | integer The size of the key |
| cds | Array of strings An array of DS records for this key, filtered by CDS publication settings |
| dnskey | string The DNSKEY record for this key |
| ds | Array of strings An array of DS records for this key |
| id | integer The internal identifier, read only |
| keytype | string Enum: "ksk" "zsk" "csk" |
| privatekey | string The private key in ISC format |
| published | boolean Whether or not the DNSKEY record is published in the zone |
| type | string set to "Cryptokey" |
{- "active": true,
- "algorithm": "string",
- "bits": 0,
- "cds": [
- "string"
], - "dnskey": "string",
- "ds": [
- "string"
], - "id": 0,
- "keytype": "ksk",
- "privatekey": "string",
- "published": true,
- "type": "string"
}{- "error": "string",
- "errors": [
- "string"
]
}| server_id required | string The id of the server to retrieve |
| zone_id required | string The id of the zone to retrieve |
[- {
- "kind": "string",
- "metadata": [
- "string"
]
}
]Creates a set of metadata entries of given kind for the zone. Existing metadata entries for the zone with the same kind are not overwritten.
| server_id required | string The id of the server to retrieve |
| zone_id required | string |
Metadata object with list of values to create
| kind | string Name of the metadata |
| metadata | Array of strings Array with all values for this metadata kind. |
{- "kind": "string",
- "metadata": [
- "string"
]
}{- "error": "string",
- "errors": [
- "string"
]
}| server_id required | string The id of the server to retrieve |
| zone_id required | string The id of the zone to retrieve |
| metadata_kind required | string The kind of metadata |
{- "error": "string",
- "errors": [
- "string"
]
}| server_id required | string The id of the server to retrieve |
| zone_id required | string The id of the zone to retrieve |
| metadata_kind required | string The kind of metadata |
{- "kind": "string",
- "metadata": [
- "string"
]
}Creates a set of metadata entries of given kind for the zone. Existing metadata entries for the zone with the same kind are removed.
| server_id required | string The id of the server to retrieve |
| zone_id required | string |
| metadata_kind required | string The kind of metadata |
metadata to add/create
| kind | string Name of the metadata |
| metadata | Array of strings Array with all values for this metadata kind. |
{- "kind": "string",
- "metadata": [
- "string"
]
}{- "kind": "string",
- "metadata": [
- "string"
]
}