Eurodns MCP server

eurodns-mcp

Manage your domains, DNS zones and subscriptions by asking for it.

A Model Context Protocol server for the EuroDNS User API — domains, DNS zones, contacts, subscriptions, SSL, invoices and orders.

Documentation · Tools · Guardrails · Deploying

This is an independent open-source project. It is **not affiliated with, endorsed by, or

supported by EuroDNS**. "EuroDNS" is used only to identify the API this server talks to.

Written by a professional engineer with AI assistance. Every line was reviewed before it

was committed, and the responsibility for what it does is human.

What you get

pair, profile create/update pair, on/off toggle and per-product read folded into one tool; 55 tools once billing and irreversible operations are enabled.

• Full API coverage in 36 tools — every one of the 79 API operations, with each list/get

returns, when to prefer its neighbour and when not to, what it does that the annotations cannot say, where an id comes from. A test holds the whole surface to it, and a workflow runs the registries' own linter over it.

• Every tool and argument described for the model that reads them: what it does and

browsable, and one that says what this deployment allows — including why a tool you expected is not in the list.

• Three DNS workflow tools that make record edits safe, because saving a zone replaces it.
• Guardrails so a deployment can refuse operations that spend money or destroy things.
• Four prompts for the workflows worth naming, and two resources: the portfolio,

still serves 2025-era clients, which is most of them today.

• Two transports — stdio for a local client, streamable HTTP for a shared deployment.
• Both protocol eras on one endpoint — speaks the 2026-07-28 revision natively and

• OAuth 2.1 or a shared token on HTTP, with an audit line per call.
• Queryable history — ask the server what has been done, and by whom.
• 1Password Connect as an optional source for any secret it reads.

How it works

flowchart TD
    client(["MCP client"])

    client -->|stdio| registry
    client -->|streamable HTTP| origin

    subgraph http ["HTTP transport only"]
        origin["Origin check"] --> bearer["Bearer token<br/>OAuth 2.1 or shared secret"]
        bearer --> scopes["Scope gate"]
    end

    scopes --> registry["Tool registry"]
    registry --> guard{"Guardrails<br/>read-only, billing, destructive"}
    guard -->|refused| deny["Error naming the setting to change"]
    guard -->|allowed| api[("EuroDNS User API")]

    op[("1Password Connect")] -.->|"op:// refs, at startup"| creds["Credentials"]
    creds -.-> api

    registry -.-> log[("Audit log")]
    guard -.-> log
    log -.->|eurodns_audit_query| client

Shortened. The full README is on GitHub.