FAQ

Which DNS providers auto-configure records?

38 providers have a built-in adapter (Cloudflare, Route 53, Google Cloud DNS, Azure DNS, GoDaddy, Namecheap, and more), plus Domain Connect as a redirect-based, tokenless option, and a full parity census routing ~63 targets to their working mode. See DNS providers for the fleet and Provider setup for per-provider credential steps and eligibility gates.

How does a domain actually get configured?

Through one of four rails: the customer authorizes their DNS provider via OAuth (records written with a one-time token), a Domain Connect redirect, a scoped API token you pass once, or the guided-manual copy-paste flow. POST /v1/domains:check tells you which are available for a given domain.

Does it support apex domains as well as subdomains?

Yes — a connection's host is empty for the apex or the subdomain label otherwise. Apex support depends on the provider's capabilities (ALIAS/ANAME/CNAME flattening); POST /v1/domains:check returns cname_flattening and ns_support so you can steer the customer to the right setup.

Does it support wildcard domains?

POST /v1/domains:check returns a wildcard_support flag per detected provider. Whether you offer wildcard in your product depends on how you use that flag in your onboarding flow.

How long does DNS propagation usually take?

It depends on the TTL of any records being replaced and the customer's resolver/registrar — from minutes (a fresh record via a rail) to longer if a previous record had a long TTL. The connection sits in propagating until every desired record resolves; GET /v1/connections/{id} shows current status.

What happens if I revoke or delete an API key?

Revocation is immediate — a revoked key stops authenticating on its next request. Keys are never returned by list endpoints after creation; only metadata (last4, created_at, revoked_at) is visible.

Can a connection lose its "live" status?

The lifecycle is forward-only, so a live connection isn't demoted automatically. But Monitor detects when a live domain's records stop resolving and fires domain.record_missing, so you can react. See Offboarding.

Is there a sandbox / test mode?

Yes — API keys and applications carry an environment (production / staging / development), and keys are prefixed sk_test_ / sk_live_. make up runs the full stack locally (see the Quickstart).