// SCAN REPORT

Dynadot

105 tools. 70 can modify or destroy data without limits.

18 destructive tools with no built-in limits. Policy required.

Last updated:

70 can modify or destroy data
35 read-only
105 tools total

Community server · catalogue entry checked 30/06/2026

How to control Dynadot ↓

TOOL MAP

What Dynadot exposes to your agents

Read (35) Write / Execute (52) Destructive / Financial (18)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
Critical Risk

The most dangerous Dynadot tools

Financial · Critical dynadot_bulk_register Registering domains involves purchasing them, which commits financial obligations. Financial · High dynadot_buy_expired_closeout_domain This tool initiates a purchase transaction for a domain, committing financial resources. Financial · Critical dynadot_buy_it_now This tool directly commits a financial transaction by purchasing a domain listing at a fixed price, creating an immediate financial obligation. Financial · High dynadot_place_auction_bid Placing a bid on an auction constitutes a financial commitment — if the bid wins, real money is spent to acquire the domain.

70 of Dynadot's 105 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Dynadot

PolicyLayer is an MCP gateway — it sits between your AI agents and Dynadot, and nothing reaches the server without passing your rules. These are the rules we recommend:

Block financial tools by default
{
  "dynadot_authorize_transfer_away": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Deny destructive operations
{
  "dynadot_cancel_transfer": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "dynadot_add_backorder_request": {
    "limits": [
      {
        "counter": "dynadot_add_backorder_request_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "dynadot_account_info": {
    "limits": [
      {
        "counter": "dynadot_account_info_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register Dynadot — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON DYNADOT →

Instant setup, no code required.

FULL CATALOGUE

All 105 Dynadot tools

FINANCIAL 9 tools
Financial dynadot_authorize_transfer_away Approve or deny an outgoing transfer. Financial dynadot_bulk_register Register multiple domains at once (up to 100). Financial dynadot_buy_expired_closeout_domain Buy an expired closeout domain. Financial dynadot_buy_it_now Purchase a marketplace listing at its Buy-It-Now price. Financial dynadot_place_auction_bid Place a bid on an expired-domain auction. NOTE: requires auction-API access. Financial dynadot_place_backorder_auction_bid Place a bid on a backorder auction. Financial dynadot_register Register a new domain. Financial dynadot_renew Renew a domain. Financial dynadot_set_afternic_confirm_action Confirm an Afternic sale action.
DESTRUCTIVE 9 tools
Destructive dynadot_cancel_transfer Cancel a pending transfer order. Destructive dynadot_clear_dnssec Remove all DNSSEC records from a domain. Destructive dynadot_clear_domain_setting Reset a specific domain setting (forwarding, dns, ns, etc.) to defaults. Destructive dynadot_delete_backorder_request Cancel a backorder request. Destructive dynadot_delete_contact Delete a contact record. Destructive dynadot_delete_folder Delete a folder. Destructive dynadot_delete_ns Delete a nameserver record. Destructive dynadot_delete_ns_by_domain Remove all nameservers for a domain. Destructive dynadot_grace_delete Delete a domain that
EXECUTE 1 tools
Execute dynadot_create_cn_audit Initiate a Chinese (.CN) domain audit.
WRITE 51 tools
Write dynadot_add_backorder_request Place a backorder on an expiring domain. Write dynadot_add_ns Add a nameserver record. Write dynadot_create_contact Create a new contact record. Write dynadot_create_folder Create a new domain folder. Write dynadot_edit_contact Update an existing contact record. Write dynadot_lock_domain Lock a domain (prevent transfers). Write dynadot_register_ns Register a nameserver (host) with an IP. Write dynadot_restore Restore a deleted domain (within the redemption period). Write dynadot_set_clear_default_setting Reset a specific account-default setting. Write dynadot_set_clear_folder_setting Reset a specific setting on all domains in a folder. Write dynadot_set_contact_eu_setting Set .EU-specific contact data (residence country). Write dynadot_set_contact_lt_setting Set .LT-specific contact data (personal code). Write dynadot_set_contact_lv_setting Set .LV-specific contact data (registration number). Write dynadot_set_default_dns Set default DNS records for new domains. Pass main records (root domain) and/or subdomain records. Write dynadot_set_default_email_forward Set default email forwarding rules for new domains. Write dynadot_set_default_forwarding Set default HTTP forwarding for new domains. Write dynadot_set_default_hosting Set default hosting type for new domains. Write dynadot_set_default_ns Set default nameservers for new domains (up to 13). Write dynadot_set_default_parking Set default parking settings for new domains. Write dynadot_set_default_renew_option Set default auto-renewal option for new domains. Write dynadot_set_default_stealth Set default stealth forwarding for new domains. Write dynadot_set_default_whois Set default WHOIS contacts for new domains. Write dynadot_set_dns Replace DNS records for a domain. Pass main records (root domain) and/or subdomain records. Write dynadot_set_dnssec Set a DNSSEC DS record for a domain. Write dynadot_set_domain_forwarding Set HTTP forwarding for a domain. Write dynadot_set_domain_push_request Push a domain to another Dynadot account. Write dynadot_set_email_forwarding Configure email forwarding rules for a domain. Write dynadot_set_folder Move a domain to a folder. Write dynadot_set_folder_dns Apply DNS records to all domains in a folder. Write dynadot_set_folder_email_forward Apply email forwarding to all domains in a folder. Write dynadot_set_folder_forwarding Apply HTTP forwarding to all domains in a folder. Write dynadot_set_folder_hosting Apply a hosting type to all domains in a folder. Write dynadot_set_folder_name Rename a folder. Write dynadot_set_folder_ns Apply nameservers to all domains in a folder. Write dynadot_set_folder_parking Apply parking to all domains in a folder. Write dynadot_set_folder_renew_option Apply a renewal option to all domains in a folder. Write dynadot_set_folder_stealth Apply stealth forwarding to all domains in a folder. Write dynadot_set_folder_whois Apply WHOIS contacts to all domains in a folder. Write dynadot_set_for_sale List a domain you own for sale on the Dynadot marketplace. Write dynadot_set_hosting Set the hosting type for a domain. Write dynadot_set_note Add or update a private note on a domain. Write dynadot_set_ns Set the nameservers for a domain (up to 13). Write dynadot_set_ns_ip Update the IP for a nameserver. Write dynadot_set_parking Set parking for a domain. Write dynadot_set_privacy Configure WHOIS privacy for a domain. Write dynadot_set_renew_option Set the renewal option (donot, auto, reset) for a domain. Write dynadot_set_sedo_confirm_action Confirm a Sedo marketplace action. Write dynadot_set_stealth_forwarding Set stealth (frame) forwarding for a domain. Write dynadot_set_transfer_auth_code Submit or update the transfer authorization code on an order. Write dynadot_set_whois Set the WHOIS contacts (registrant/admin/tech/billing) for a domain. Write dynadot_transfer_in Initiate a transfer of a domain to Dynadot.
READ 35 tools
Read dynadot_account_info Get account profile and settings. Read dynadot_backorder_request_list List active backorders. Read dynadot_bulk_search Alias for Read dynadot_contact_list List all contacts in the account (paginated). Read dynadot_domain_appraisal Get an estimated value (appraisal) for a domain. Uses the v2 RESTful endpoint — Dynadot Read dynadot_domain_info Get full details for a single domain (settings, contacts, status). IDN auto-punycoded. Read dynadot_domain_list List domains in the account. Read dynadot_download_all_listings Export all marketplace listings as a downloadable file. Read dynadot_folder_list List domain folders. Read dynadot_get_account_balance Get the account credit balance. Read dynadot_get_auction_bids Get the bid history for an auction. NOTE: requires auction-API access. Read dynadot_get_auction_details Get details for a single auction. NOTE: requires auction-API access. Read dynadot_get_backorder_auction_details Get details for a backorder auction. Read dynadot_get_closed_auctions List completed auctions. NOTE: requires auction-API access. Read dynadot_get_closed_backorder_auctions List completed backorder auctions. Read dynadot_get_cn_audit_status Check the verification status of a CN audit. Read dynadot_get_contact Retrieve a single contact record by ID. Read dynadot_get_dns Retrieve current DNS records for a domain. Read dynadot_get_dnssec Get DNSSEC records for a domain. Read dynadot_get_domain_push_request List pending domain push requests for a domain. Read dynadot_get_expired_closeout_domains List expired closeout domains available for purchase (paginated). Read dynadot_get_listing_item Get details for a single marketplace listing (by listing ID, not domain name). Read dynadot_get_listings Browse the public Dynadot marketplace listings (paginated). Returns ALL listings, not your own — for your own Read dynadot_get_ns Retrieve nameserver details. Pass a hostname to get one, omit to list account servers. Read dynadot_get_open_auctions List active expired-domain auctions. NOTE: requires Dynadot to grant auction-API access on your account; other Read dynadot_get_open_backorder_auctions List active backorder auctions. NOTE: requires auction-API access. Read dynadot_get_order_status Get the status of a specific order. Read dynadot_get_transfer_auth_code Retrieve the authorization (EPP) code for transferring a domain away. Read dynadot_get_transfer_status Check the status of a transfer order. Read dynadot_is_processing Check whether an order is still processing. Read dynadot_list_coupons List available coupon codes. Read dynadot_order_list List the account Read dynadot_search Check availability of one or more domains. Pass a single name or up to 100. IDN names are auto-punycoded. Read dynadot_server_list List all nameservers in the account (paginated). Read dynadot_tld_price Get TLD pricing (registration, renewal, transfer, restore).
EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

Yaver 812 tools
paymentsadmin
Binance MCP Server 734 tools
paymentsadmin
GoHighLevel MCP Server 566 tools
paymentsadmin
Ruflo 486 tools
paymentsadmin
Claude Flow 454 tools
paymentsadmin
ServiceTitan MCP Server 454 tools
paymentsadmin
CloudStack MCP Server 442 tools
paymentsadmin
Serac 432 tools
paymentsadmin
FAQ

Questions about Dynadot

Can an AI agent move money through the Dynadot MCP server? +

Yes. The Dynadot server exposes 9 financial tools including dynadot_authorize_transfer_away, dynadot_bulk_register, dynadot_buy_expired_closeout_domain. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

Can an AI agent delete data through the Dynadot MCP server? +

Yes. The Dynadot server exposes 9 destructive tools including dynadot_cancel_transfer, dynadot_clear_dnssec, dynadot_clear_domain_setting. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Dynadot? +

The Dynadot server has 51 write tools including dynadot_add_backorder_request, dynadot_add_ns, dynadot_create_contact. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Dynadot.

How many tools does the Dynadot MCP server expose? +

105 tools across 4 categories: Destructive, Financial, Read, Write. 35 are read-only. 70 can modify, create, or delete data.

How do I enforce a policy on Dynadot? +

Register the Dynadot MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Dynadot tool call.

Deterministic rules across all 105 Dynadot tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON DYNADOT →

Instant setup, no code required.

105 Dynadot tools catalogued and risk-classified — across an index of 46,500+ MCP servers.

// WHERE THIS COMES FROM

These policies come from Dynadot's registry record.

The record behind this page: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.

Teams ship this data inside their own products. See what a licence covers →

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.