dynadot_set_dns

What dynadot_set_dns does on Dynadot

AI agents use dynadot_set_dns to create or update resources in Dynadot, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Dynadot environment.

Why dynadot_set_dns is rated Medium

Modifying DNS records is a write operation with significant blast radius: misconfigured DNS can redirect traffic, break email delivery, or disrupt services. However, it is reversible and does not permanently delete data (Destructive) nor move money (Financial). Severity is high because DNS misconfigurations can severely impact domain functionality and user access.

From the tool's definition Tool description explicitly states 'Replace DNS records for a domain' — this modifies DNS configuration data reversibly. The operation affects domain routing and service availability but is not destructive (records can be changed again) nor directly financial.

Risk signalsAdmin/system-level operation

The rule that runs dynadot_set_dns safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Dynadot, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For dynadot_set_dns, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "dynadot_set_dns": {
      "limits": [
        {
          "counter": "dynadot_set_dns_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about dynadot_set_dns