deSEC MCP by usefulapi

io.usefulapi由 usefulapi.io 發布官方發布者v1.23.4更新於 Nov 7, 2026

Read deSEC domains, DNSSEC keys, zone files and RRsets; create or replace one DNS record set.

發布方自己的服務:Ably MCP by usefulapi

已驗證Streamable HTTP可網頁執行雲端與基礎設施安全與監控

概覽

AI 產生的概覽

託管式 deSEC 伺服器,讓助理列出 DNS 網域、讀取 DNSSEC 金鑰、區域檔與記錄集,並新增或取代單一 RRset。

可以做什麼
  • 列出網域並檢視單一網域,包含 DNSSEC 的 DNSKEY 與 DS 記錄
  • 以 BIND 格式匯出整個區域檔
  • 列出並讀取 DNS 記錄集(RRset),可依類型或子網域篩選
  • 新增一筆 RRset,或以新的 TTL 和記錄取代既有 RRset
  • 查看每月工具呼叫用量、提出功能需求、升級或取消付費方案
適用情境
適合讓助理檢視或說明 deSEC 帳戶中網域的 DNS 記錄、在變更前備份區域檔,或進行單筆有針對性的記錄變更,例如新增 A 或 MX 記錄。
執行需求
遠端 MCP 端點,無需本機安裝。透過 OAuth 登入,登入頁會要求填寫 deSEC 帳戶憑證。用戶端設定只填伺服器 URL,不要加入 Authorization 標頭或 API 金鑰。免費方案每月 50 次工具呼叫。
安裝前請注意
新增與取代工具會立即寫入線上 DNS,錯誤記錄可能導致網站或郵件中斷;伺服器在寫入前會要求確認。取代工具會覆蓋該名稱與類型下的所有現有記錄。匯出區域檔屬於高成本操作。付費方案需付費,透過 Stripe 結帳連結付款;取消後當期不退款。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 deSEC MCP by usefulapi,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Web executable,透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式,或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南,先向你展示發布者、端點和登入方式,經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/io.usefulapi%2Fdesec/install.md,並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前,先告訴我它的發布者、端點和登入方式,等我確認。不要把 API 金鑰寫進命令或我會提交的檔案;問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。

{
  "mcpServers": {
    "desec-by-usefulapi": {
      "type": "http",
      "url": "https://desec.usefulapi.io/mcp"
    }
  }
}

README

deSEC MCP by usefulapi

Use deSEC from Claude, Cursor, or any MCP client — domains, DNSSEC keys, zone files and RRsets, plus guarded single-RRset writes. Hosted, no local install: connect with your own deSEC credentials.

Live endpoint: https://desec.usefulapi.io/mcp · Homepage: https://usefulapi.io/desec

Connect

  • Claude (claude.ai, Desktop): open Customize → Connectors, click + Add → Add custom connector, and paste https://desec.usefulapi.io/mcp.
  • Claude Code: claude mcp add --transport http desec https://desec.usefulapi.io/mcp, then run /mcp to log in.
  • VS Code: Add to VS Code.
  • Cursor and other clients: add the URL as a remote MCP server:
json
{  "mcpServers": {    "desec": {      "url": "https://desec.usefulapi.io/mcp"    }  }}

Add only the URL. Do not add an Authorization header or an API key to the client config: the server signs you in with OAuth, and the login page asks for your deSEC credentials.

Step-by-step setup, where to find your credentials, and FAQ: https://usefulapi.io/desec/

Tools

ToolTypeWhat it does
desec_list_domainsreadList domains
desec_get_domainreadGet domain
desec_export_zonefilereadExport zonefile
desec_list_rrsetsreadList RRsets
desec_get_rrsetreadGet RRset
desec_create_rrsetwriteCreate RRset
desec_replace_rrsetwriteReplace RRset
desec_usage_statusmetaUsage status (free-tier meter)
desec_request_featuremetaRequest a missing feature
desec_upgrademetaUpgrade to Pro or Pro+
desec_cancel_subscriptionmetaCancel the Pro subscription

read tools are read-only; write tools mutate data (clients should confirm them); meta tools report usage, manage your subscription or send a feature request.

Pricing

PlanPriceLimit
Free$050 tool calls / month
Pro (per user)$9/mo or $90/yr (2 months free)Unlimited*

*Pro has a fair use limit of 10,000 tool calls a month on this server. For more, write to [email protected].

Pro covers this server only. Subscribe with desec_upgrade (it returns a Stripe Checkout link). Cancel any time with desec_cancel_subscription: Pro continues to the end of the paid period, with no refund for the current period, and running desec_upgrade before then undoes the cancel. Or write to [email protected].

License

MIT © usefulapi. Not affiliated with or endorsed by deSEC.

來源:servers/desec/README.md,提交 4046075

工具

7

desec_list_domains

List domains

List the DNS domains (zones) in this deSEC account, newest first, with creation and last-published times and minimum TTL. DNSSEC keys are omitted here (see desec_get_domain). Use owns_qname to find which of your domains is responsible for a DNS name (for example before adding a record for www.dev.example.net). Up to 500 per page. GET /domains/.

輸入參數cursorowns_qname

desec_get_domain

Get domain

One domain with its DNSSEC key material: the DNSKEY and the DS records to publish at the registrar for the chain of trust, plus minimum TTL and publication times. GET /domains/{name}/.

輸入參數domain必填

desec_export_zonefile

Export zonefile

The whole zone as a plain-text BIND-format zonefile (all RRsets except DNSSEC types). Handy as a backup before changing records. Counts as an expensive deSEC operation (300/min). GET /domains/{name}/zonefile/.

輸入參數domain必填

desec_list_rrsets

List RRsets

List the DNS records of a domain as RRsets (all records of one name and type, sharing one TTL), newest first. Filter by type and/or subname. Up to 500 per page. GET /domains/{name}/rrsets/.

輸入參數typecursordomain必填subname

desec_get_rrset

Get RRset

One RRset by subname and type, e.g. the A records of "www" or the MX records of the apex. GET /domains/{name}/rrsets/{subname}/{type}/.

輸入參數type必填domain必填subname

desec_create_rrset

Create RRset

WRITE: create ONE new RRset (a set of DNS records of one type at one name) in a domain. It goes live in DNS immediately and a wrong record can take a site or mail offline. Fails if an RRset with this subname and type already exists (use desec_replace_rrset for that) or if a CNAME would conflict with other records. Never touches the apex NS or DNSSEC records and cannot delete anything. Subject to deSEC's write limits (15/min, 300/day per domain). POST /domains/{name}/rrsets/.

輸入參數ttl必填type必填domain必填records必填subname

desec_replace_rrset

Replace RRset

WRITE (overwrites): set ONE RRset to exactly the given TTL and records, creating it if it does not exist and REPLACING all its current records if it does. It goes live in DNS immediately; a wrong value can take a site or mail offline. The previous RRset is read first and returned as `previous` so the change can be undone with another call. An empty record list is refused (this tool never deletes), and the apex NS and DNSSEC records cannot be changed. Subject to deSEC's write limits (15/min, 300/day per domain). PUT /domains/{name}/rrsets/ with a one-element array.

輸入參數ttl必填type必填domain必填records必填subname

版本歷史

19
  1. v1.23.4最新Nov 7, 2026
  2. v1.22.3Nov 5, 2026
  3. v1.22.2Nov 5, 2026
  4. v1.22.1Nov 4, 2026
  5. v1.22.0Nov 3, 2026
  6. v1.21.1Nov 3, 2026
  7. v1.20.0Nov 1, 2026
  8. v1.18.0Oct 31, 2026
  9. v1.17.0Oct 31, 2026
  10. v1.16.2Oct 30, 2026
  11. v1.16.0Oct 30, 2026
  12. v1.11.0Oct 26, 2026
  13. v1.8.3Oct 25, 2026
  14. v1.8.0Oct 25, 2026
  15. v1.7.0Oct 24, 2026
  16. v1.4.0Oct 23, 2026
  17. v1.3.4Oct 22, 2026
  18. v1.3.3Oct 21, 2026
  19. v1.0.0Oct 12, 2026

評分

已滿足適用檢查項的 100%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通必需25 分
  • 已宣告認證方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分

其他 Usefulapi 整合