List registered domains together with key portfolio details such as owner label, DNSSEC status, renewal status, and expiry date. Supports text search, filtering, sorting, and pagination.

List DNS zones with SOA data, delegated nameservers, DNSSEC status, and record counts.

Retrieve the complete DNS zone for the specified domain. The response includes SOA metadata, delegated nameservers, DNSSEC status, record counts, and all records stored in the zone, including `NS` records.

Export the specified zone as a BIND-compatible zone file. Non-standard `ALIAS` records are included as comments and, when possible, as resolved `A` records.

List all DNS records stored in the zone for the specified domain.

Retrieve details about a specific Resource Record (`rrid`).

Create a new DNS record and automatically detect the zone based on the `fqdn` specified in the `name` parameter.

Update a DNS record and automatically detect the record based on the `name` and `type` specified in the parameters. If you want to update the `name` or `type` attribute, please refer to the `PATCH /dns/rr/{rrid}` endpoint.

Update a specific Resource Record (`rrid`). This is useful for modifying the record’s name or type, or when managing multiple records with the same name and type combination.

Delete a specific Resource Record (`rrid`).

Retrieve the current DNSSEC configuration and status for the specified domain. Important response fields: - `desired_state`: the target DNSSEC state - `live_state`: the last state observed from the registry and delegation checks - `dnssec_state`: high-level status for quick status checks (`active`, `pending`, `inactive`) - `pending_job`: the current DNSSEC transition job, if processing is still in progress DNSSEC changes can be asynchronous, so `desired_state` and `live_state` may differ temporarily.

Enable, disable, or update registry DNSSEC for the specified domain. Use `mode=regfish` only when the domain uses regfish authoritative nameservers. Use `mode=external` only when DNSSEC data must be supplied for external nameservers. Use `mode=none` together with `state=disabled` to disable registry DNSSEC. The response may already be final, or it may include a `pending_job` while the registry or DNS delegation is still converging. If the update cannot be completed, the response returns the last stable DNSSEC state.

Refresh registry DNSSEC state and verify whether delegation is visible. This endpoint is useful after asynchronous registry processing or delayed DS/DNSKEY delegation. A successful response can still be `pending` when the target state has not propagated completely yet.

Retrieve recent registry DNSSEC jobs for the specified domain.

Cancel a currently pending DNSSEC activation or, for regfish-managed nameservers, a pending DNSSEC deactivation. If no cancellable transition exists, the request fails with `409`.