deSEC MCP by usefulapi

io.usefulapi由 usefulapi.io 发布官方发布者v1.23.4更新于 Nov 7, 2026

Read deSEC domains, DNSSEC keys, zone files and RRsets; create or replace one DNS record set.

发布方自己的服务:Ably MCP by usefulapi

已验证Streamable HTTP可网页运行云端与基础设施安全与监控

概览

AI 生成的概览

托管式 deSEC 服务器,让助手列出 DNS 域名、读取 DNSSEC 密钥、区域文件和记录集,并新建或替换单条 RRset。

可以做什么
  • 列出域名并查看单个域名,包括 DNSSEC 的 DNSKEY 与 DS 记录
  • 以 BIND 格式导出整个区域文件
  • 列出并读取 DNS 记录集(RRset),可按类型或子域名筛选
  • 新建一条 RRset,或用新的 TTL 和记录替换已有 RRset
  • 查看每月工具调用用量、提交功能请求、升级或取消付费方案
适用场景
适合让助手查看或解释 deSEC 账户中域名的 DNS 记录、在改动前备份区域文件,或做单条有针对性的记录变更,例如添加 A 或 MX 记录。
运行要求
远程 MCP 端点,无需本地安装。通过 OAuth 登录,登录页会要求填写 deSEC 账户凭据。客户端配置中只填服务器 URL,不要添加 Authorization 头或 API 密钥。免费方案每月 50 次工具调用。
安装前请注意
新建和替换工具会立即写入线上 DNS,错误记录可能导致网站或邮件中断;服务器在写入前会请求确认。替换工具会覆盖该名称和类型下的全部现有记录。导出区域文件属于高开销操作。付费方案需付费,通过 Stripe 结账链接付款;取消后当期不退款。

安装

在 SourceWeft 中

  1. 打开 控制台中的 deSEC MCP by usefulapi,将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Web executable,通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。

交给智能体安装

把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体,或 SourceWeft 对话中。智能体会读取该服务器的安装指南,先向你展示发布者、端点和登录方式,经你同意后再把它添加到你的客户端。密钥不会写进任何命令。

阅读 https://sourceweft.com/mcp/io.usefulapi%2Fdesec/install.md,并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前,先告诉我它的发布者、端点和登录方式,等我确认。不要把 API 密钥写进命令或我会提交的文件;问我密钥应从哪里获取。

查看智能体所依据的安装指南

其他 MCP 客户端

把它添加到你客户端的 mcpServers 配置中。

{
  "mcpServers": {
    "desec-by-usefulapi": {
      "type": "http",
      "url": "https://desec.usefulapi.io/mcp"
    }
  }
}

README

deSEC MCP by usefulapi

Use deSEC from Claude, Cursor, or any MCP client — domains, DNSSEC keys, zone files and RRsets, plus guarded single-RRset writes. Hosted, no local install: connect with your own deSEC credentials.

Live endpoint: https://desec.usefulapi.io/mcp · Homepage: https://usefulapi.io/desec

Connect

  • Claude (claude.ai, Desktop): open Customize → Connectors, click + Add → Add custom connector, and paste https://desec.usefulapi.io/mcp.
  • Claude Code: claude mcp add --transport http desec https://desec.usefulapi.io/mcp, then run /mcp to log in.
  • VS Code: Add to VS Code.
  • Cursor and other clients: add the URL as a remote MCP server:
json
{  "mcpServers": {    "desec": {      "url": "https://desec.usefulapi.io/mcp"    }  }}

Add only the URL. Do not add an Authorization header or an API key to the client config: the server signs you in with OAuth, and the login page asks for your deSEC credentials.

Step-by-step setup, where to find your credentials, and FAQ: https://usefulapi.io/desec/

Tools

ToolTypeWhat it does
desec_list_domainsreadList domains
desec_get_domainreadGet domain
desec_export_zonefilereadExport zonefile
desec_list_rrsetsreadList RRsets
desec_get_rrsetreadGet RRset
desec_create_rrsetwriteCreate RRset
desec_replace_rrsetwriteReplace RRset
desec_usage_statusmetaUsage status (free-tier meter)
desec_request_featuremetaRequest a missing feature
desec_upgrademetaUpgrade to Pro or Pro+
desec_cancel_subscriptionmetaCancel the Pro subscription

read tools are read-only; write tools mutate data (clients should confirm them); meta tools report usage, manage your subscription or send a feature request.

Pricing

PlanPriceLimit
Free$050 tool calls / month
Pro (per user)$9/mo or $90/yr (2 months free)Unlimited*

*Pro has a fair use limit of 10,000 tool calls a month on this server. For more, write to [email protected].

Pro covers this server only. Subscribe with desec_upgrade (it returns a Stripe Checkout link). Cancel any time with desec_cancel_subscription: Pro continues to the end of the paid period, with no refund for the current period, and running desec_upgrade before then undoes the cancel. Or write to [email protected].

License

MIT © usefulapi. Not affiliated with or endorsed by deSEC.

来源:servers/desec/README.md,提交 4046075

工具

7

desec_list_domains

List domains

List the DNS domains (zones) in this deSEC account, newest first, with creation and last-published times and minimum TTL. DNSSEC keys are omitted here (see desec_get_domain). Use owns_qname to find which of your domains is responsible for a DNS name (for example before adding a record for www.dev.example.net). Up to 500 per page. GET /domains/.

输入参数cursorowns_qname

desec_get_domain

Get domain

One domain with its DNSSEC key material: the DNSKEY and the DS records to publish at the registrar for the chain of trust, plus minimum TTL and publication times. GET /domains/{name}/.

输入参数domain必填

desec_export_zonefile

Export zonefile

The whole zone as a plain-text BIND-format zonefile (all RRsets except DNSSEC types). Handy as a backup before changing records. Counts as an expensive deSEC operation (300/min). GET /domains/{name}/zonefile/.

输入参数domain必填

desec_list_rrsets

List RRsets

List the DNS records of a domain as RRsets (all records of one name and type, sharing one TTL), newest first. Filter by type and/or subname. Up to 500 per page. GET /domains/{name}/rrsets/.

输入参数typecursordomain必填subname

desec_get_rrset

Get RRset

One RRset by subname and type, e.g. the A records of "www" or the MX records of the apex. GET /domains/{name}/rrsets/{subname}/{type}/.

输入参数type必填domain必填subname

desec_create_rrset

Create RRset

WRITE: create ONE new RRset (a set of DNS records of one type at one name) in a domain. It goes live in DNS immediately and a wrong record can take a site or mail offline. Fails if an RRset with this subname and type already exists (use desec_replace_rrset for that) or if a CNAME would conflict with other records. Never touches the apex NS or DNSSEC records and cannot delete anything. Subject to deSEC's write limits (15/min, 300/day per domain). POST /domains/{name}/rrsets/.

输入参数ttl必填type必填domain必填records必填subname

desec_replace_rrset

Replace RRset

WRITE (overwrites): set ONE RRset to exactly the given TTL and records, creating it if it does not exist and REPLACING all its current records if it does. It goes live in DNS immediately; a wrong value can take a site or mail offline. The previous RRset is read first and returned as `previous` so the change can be undone with another call. An empty record list is refused (this tool never deletes), and the apex NS and DNSSEC records cannot be changed. Subject to deSEC's write limits (15/min, 300/day per domain). PUT /domains/{name}/rrsets/ with a one-element array.

输入参数ttl必填type必填domain必填records必填subname

版本历史

19
  1. v1.23.4最新Nov 7, 2026
  2. v1.22.3Nov 5, 2026
  3. v1.22.2Nov 5, 2026
  4. v1.22.1Nov 4, 2026
  5. v1.22.0Nov 3, 2026
  6. v1.21.1Nov 3, 2026
  7. v1.20.0Nov 1, 2026
  8. v1.18.0Oct 31, 2026
  9. v1.17.0Oct 31, 2026
  10. v1.16.2Oct 30, 2026
  11. v1.16.0Oct 30, 2026
  12. v1.11.0Oct 26, 2026
  13. v1.8.3Oct 25, 2026
  14. v1.8.0Oct 25, 2026
  15. v1.7.0Oct 24, 2026
  16. v1.4.0Oct 23, 2026
  17. v1.3.4Oct 22, 2026
  18. v1.3.3Oct 21, 2026
  19. v1.0.0Oct 12, 2026

评分

已满足适用检查项的 100%

该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。

  • 近 30 天内可连通必需25 分
  • 已声明认证方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分

其他 Usefulapi 集成