Porkbun DNS 🐷

io.github.majorPublished by GitHub account majorv1.1.2Updated Oct 24, 2026

Manage DNS records, domains, DNSSEC, SSL certificates via MCP

The publisher's own server: Porkbun (official)

VerifiedSTDIODesktop onlyCloud & InfrastructureDeveloper Tools

Overview

AI-generated overview

Lets an assistant read and, when enabled, modify Porkbun DNS records, domains, DNSSEC, and SSL certificates.

What you can do
Wraps the Porkbun DNS API so an assistant can list, get, create, edit, and delete DNS records, including lookups by subdomain and type. It also lists domains, reads and updates nameservers, manages URL forwarding rules, checks domain availability and pricing, and handles DNSSEC records and SSL certificate retrieval. Bundled prompts cover common workflows such as initial DNS setup, DNS audits, email DNS, server IP migration, and subdomain creation.
When to use it
Useful when you manage domains at Porkbun and want an assistant to inspect or change DNS, nameservers, forwarding, DNSSEC, or certificates without using the web dashboard. Suited to routine record edits, migrations, and audits; less relevant if your DNS is hosted elsewhere.
Requirements
Runs locally as a Python package (pypi porkbun-mcp), typically via uvx, and is configured in a desktop MCP client. Requires a Porkbun API key and secret key, supplied as the environment variables PORKBUN_API_KEY and PORKBUN_SECRET_KEY, plus network access to the Porkbun API.
Before you install
The credentials PORKBUN_API_KEY and PORKBUN_SECRET_KEY grant control over your Porkbun account and are stored in the client configuration. Write operations are off by default and only work when PORKBUN_GET_MUDDY is set to true or the --get-muddy flag is passed; once enabled, the assistant can create, edit, and delete DNS records, change nameservers, and remove forwarding or DNSSEC records. Leave it read-only unless changes are intended.

Installation

In SourceWeft

  1. Open Porkbun DNS 🐷 in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

porkbun-mcp

MCP server for the Porkbun DNS API.

Manage DNS records, domains, DNSSEC, SSL certificates, and more via the Model Context Protocol.

[CI] [codecov] [PyPI version] [Python 3.13+] [License: MIT]

Configuration

Set your Porkbun API credentials as environment variables:

bash
export PORKBUN_API_KEY="pk1_..."export PORKBUN_SECRET_KEY="sk1_..."

Get your API keys from the Porkbun API Access page.

Read-Only Mode (Default)

By default, porkbun-mcp runs in read-only mode for safety. Write operations (create, edit, delete) will return an error until explicitly enabled.

Enabling Write Operations

To let the pig get muddy and make changes:

Environment variable:

bash
export PORKBUN_GET_MUDDY=true

CLI flag:

bash
uvx porkbun-mcp --get-muddy

Usage

Run directly with uvx (no installation required):

bash
uvx porkbun-mcp

SSE transport

bash
uvx porkbun-mcp --transport sse

MCP Client Configuration

Claude Desktop

Add to ~/.config/claude/claude_desktop_config.json:

json
{  "mcpServers": {    "porkbun": {      "command": "uvx",      "args": ["porkbun-mcp", "--get-muddy"],      "env": {        "PORKBUN_API_KEY": "pk1_...",        "PORKBUN_SECRET_KEY": "sk1_..."      }    }  }}

Note: Remove --get-muddy from args for read-only mode (recommended for safety).

Claude Code / Codex

Add to ~/.claude/settings.json:

json
{  "mcpServers": {    "porkbun": {      "command": "uvx",      "args": ["porkbun-mcp", "--get-muddy"],      "env": {        "PORKBUN_API_KEY": "pk1_...",        "PORKBUN_SECRET_KEY": "sk1_..."      }    }  }}

VS Code

Add to .vscode/mcp.json in your workspace (or use MCP: Add Server command):

json
{  "servers": {    "porkbun": {      "command": "uvx",      "args": ["porkbun-mcp", "--get-muddy"],      "env": {        "PORKBUN_API_KEY": "pk1_...",        "PORKBUN_SECRET_KEY": "sk1_..."      }    }  }}

OpenCode

Add to your opencode.json configuration:

json
{  "mcp": {    "porkbun": {      "type": "local",      "command": ["uvx", "porkbun-mcp", "--get-muddy"],      "environment": {        "PORKBUN_API_KEY": "pk1_...",        "PORKBUN_SECRET_KEY": "sk1_..."      }    }  }}

Available Tools

DNS

  • dns_list - List all DNS records for a domain
  • dns_get - Get a specific DNS record by ID
  • dns_get_by_name_type - Get DNS records by subdomain and type
  • dns_create - Create a new DNS record
  • dns_edit - Edit a DNS record by ID
  • dns_edit_by_name_type - Edit DNS records by subdomain and type
  • dns_delete - Delete a DNS record by ID
  • dns_delete_by_name_type - Delete DNS records by subdomain and type

Domains

  • domains_list - List all domains in your account
  • domains_get_nameservers - Get nameservers for a domain
  • domains_update_nameservers - Update nameservers for a domain
  • domains_get_url_forwards - Get URL forwarding rules
  • domains_add_url_forward - Add a URL forwarding rule
  • domains_delete_url_forward - Delete a URL forwarding rule
  • domains_check_availability - Check domain availability and pricing
  • domains_get_glue_records - Get glue records for a domain

DNSSEC

  • dnssec_list - List DNSSEC records for a domain
  • dnssec_create - Create a DNSSEC record
  • dnssec_delete - Delete a DNSSEC record

SSL

  • ssl_retrieve - Retrieve the SSL certificate bundle for a domain

Pricing

  • pricing_get - Get pricing for all available TLDs

Utility

  • ping - Test API connectivity and get your public IP

Prompts

Pre-defined workflows to guide common DNS operations:

  • dns_setup - Set up basic DNS for a new server (root A + www records)
  • dns_audit - Audit DNS configuration for issues (duplicates, missing email records, low TTLs)
  • email_dns_setup - Configure email DNS (MX, SPF, DKIM, DMARC)
  • update_server_ip - Update DNS records when migrating to a new server IP
  • subdomain_setup - Create A/CNAME records for a new subdomain

Development

bash
# Install dependenciesuv sync --dev
# Run all checksmake check
# Individual commandsmake lint       # ruff checkmake format     # ruff formatmake typecheck  # ty checkmake test       # pytest with coverage

License

MIT

Source: README.md at commit 8ff5e1d

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v1.1.2LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

Other Porkbun integrations