curl --request POST \
--url https://dns.basaltic.sh/v1/zones/{zone_id}/records \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"name": "www.example.com",
"type": "A",
"values": [
{
"content": "203.0.113.10",
"disabled": false
}
],
"ttl": 300
}
'import requests
url = "https://dns.basaltic.sh/v1/zones/{zone_id}/records"
payload = {
"name": "www.example.com",
"type": "A",
"values": [
{
"content": "203.0.113.10",
"disabled": False
}
],
"ttl": 300
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
name: 'www.example.com',
type: 'A',
values: [{content: '203.0.113.10', disabled: false}],
ttl: 300
})
};
fetch('https://dns.basaltic.sh/v1/zones/{zone_id}/records', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://dns.basaltic.sh/v1/zones/{zone_id}/records",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'name' => 'www.example.com',
'type' => 'A',
'values' => [
[
'content' => '203.0.113.10',
'disabled' => false
]
],
'ttl' => 300
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://dns.basaltic.sh/v1/zones/{zone_id}/records"
payload := strings.NewReader("{\n \"name\": \"www.example.com\",\n \"type\": \"A\",\n \"values\": [\n {\n \"content\": \"203.0.113.10\",\n \"disabled\": false\n }\n ],\n \"ttl\": 300\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://dns.basaltic.sh/v1/zones/{zone_id}/records")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"name\": \"www.example.com\",\n \"type\": \"A\",\n \"values\": [\n {\n \"content\": \"203.0.113.10\",\n \"disabled\": false\n }\n ],\n \"ttl\": 300\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://dns.basaltic.sh/v1/zones/{zone_id}/records")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"name\": \"www.example.com\",\n \"type\": \"A\",\n \"values\": [\n {\n \"content\": \"203.0.113.10\",\n \"disabled\": false\n }\n ],\n \"ttl\": 300\n}"
response = http.request(request)
puts response.read_body{
"record": {
"id": "550e8400-e29b-41d4-a716-446655440000",
"crn": "crn:dns::my-account:zone/example.com/record/550e8400-e29b-41d4-a716-446655440000",
"name": "www.example.com",
"type": "A",
"ttl": 300,
"values": [
{
"content": "203.0.113.10",
"disabled": false
},
{
"content": "203.0.113.11",
"disabled": false
}
],
"managed": false
}
}{
"error": {
"code": "INVALID_INPUT",
"message": "Invalid request parameters",
"request_id": "550e8400-e29b-41d4-a716-446655440000"
}
}{
"error": {
"code": "UNAUTHORIZED",
"message": "Authentication required",
"request_id": "550e8400-e29b-41d4-a716-446655440000"
}
}{
"error": {
"code": "ACCESS_DENIED",
"message": "You don't have permission to perform this action",
"request_id": "550e8400-e29b-41d4-a716-446655440000"
}
}{
"error": {
"code": "NOT_FOUND",
"message": "Resource not found",
"request_id": "550e8400-e29b-41d4-a716-446655440000"
}
}{
"error": {
"code": "INVALID_INPUT",
"message": "Invalid request parameters",
"request_id": "550e8400-e29b-41d4-a716-446655440000",
"params": {
"instances": 2,
"pools": 0
}
}
}{
"error": {
"code": "IDEMPOTENCY_KEY_REUSED",
"message": "This Idempotency-Key was already used with a different request payload",
"request_id": "550e8400-e29b-41d4-a716-446655440000"
}
}{
"error": {
"code": "INTERNAL_ERROR",
"message": "An internal error occurred",
"request_id": "550e8400-e29b-41d4-a716-446655440000"
}
}Create record
Create a new record in the zone.
curl --request POST \
--url https://dns.basaltic.sh/v1/zones/{zone_id}/records \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"name": "www.example.com",
"type": "A",
"values": [
{
"content": "203.0.113.10",
"disabled": false
}
],
"ttl": 300
}
'import requests
url = "https://dns.basaltic.sh/v1/zones/{zone_id}/records"
payload = {
"name": "www.example.com",
"type": "A",
"values": [
{
"content": "203.0.113.10",
"disabled": False
}
],
"ttl": 300
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
name: 'www.example.com',
type: 'A',
values: [{content: '203.0.113.10', disabled: false}],
ttl: 300
})
};
fetch('https://dns.basaltic.sh/v1/zones/{zone_id}/records', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://dns.basaltic.sh/v1/zones/{zone_id}/records",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'name' => 'www.example.com',
'type' => 'A',
'values' => [
[
'content' => '203.0.113.10',
'disabled' => false
]
],
'ttl' => 300
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://dns.basaltic.sh/v1/zones/{zone_id}/records"
payload := strings.NewReader("{\n \"name\": \"www.example.com\",\n \"type\": \"A\",\n \"values\": [\n {\n \"content\": \"203.0.113.10\",\n \"disabled\": false\n }\n ],\n \"ttl\": 300\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://dns.basaltic.sh/v1/zones/{zone_id}/records")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"name\": \"www.example.com\",\n \"type\": \"A\",\n \"values\": [\n {\n \"content\": \"203.0.113.10\",\n \"disabled\": false\n }\n ],\n \"ttl\": 300\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://dns.basaltic.sh/v1/zones/{zone_id}/records")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"name\": \"www.example.com\",\n \"type\": \"A\",\n \"values\": [\n {\n \"content\": \"203.0.113.10\",\n \"disabled\": false\n }\n ],\n \"ttl\": 300\n}"
response = http.request(request)
puts response.read_body{
"record": {
"id": "550e8400-e29b-41d4-a716-446655440000",
"crn": "crn:dns::my-account:zone/example.com/record/550e8400-e29b-41d4-a716-446655440000",
"name": "www.example.com",
"type": "A",
"ttl": 300,
"values": [
{
"content": "203.0.113.10",
"disabled": false
},
{
"content": "203.0.113.11",
"disabled": false
}
],
"managed": false
}
}{
"error": {
"code": "INVALID_INPUT",
"message": "Invalid request parameters",
"request_id": "550e8400-e29b-41d4-a716-446655440000"
}
}{
"error": {
"code": "UNAUTHORIZED",
"message": "Authentication required",
"request_id": "550e8400-e29b-41d4-a716-446655440000"
}
}{
"error": {
"code": "ACCESS_DENIED",
"message": "You don't have permission to perform this action",
"request_id": "550e8400-e29b-41d4-a716-446655440000"
}
}{
"error": {
"code": "NOT_FOUND",
"message": "Resource not found",
"request_id": "550e8400-e29b-41d4-a716-446655440000"
}
}{
"error": {
"code": "INVALID_INPUT",
"message": "Invalid request parameters",
"request_id": "550e8400-e29b-41d4-a716-446655440000",
"params": {
"instances": 2,
"pools": 0
}
}
}{
"error": {
"code": "IDEMPOTENCY_KEY_REUSED",
"message": "This Idempotency-Key was already used with a different request payload",
"request_id": "550e8400-e29b-41d4-a716-446655440000"
}
}{
"error": {
"code": "INTERNAL_ERROR",
"message": "An internal error occurred",
"request_id": "550e8400-e29b-41d4-a716-446655440000"
}
}dns:CreateRecord. See DNS permissions for the full list, what each one covers, and an example policy.Authorizations
An OAuth 2.0 bearer token, sent as Authorization: Bearer <token>.
This is the recommended way to authenticate.
Get one by exchanging a service account's access key pair at
POST /v1/oauth/token with grant_type=client_credentials. It is the
standard client-credentials grant, so any OAuth-aware library will
obtain and refresh it for you.
curl -s -u "$KEY_ID:$SECRET" -d grant_type=client_credentials \
https://iam.basaltic.sh/v1/oauth/token
Tokens last an hour by default. The same access key pair is separately your AWS SigV4 credential for the S3-compatible object endpoint, which speaks nothing else.
Headers
Optional client-generated key that makes a create replay-safe. Retrying a request with the same key returns the original outcome verbatim instead of creating a duplicate resource. Reusing a key with a different request body is rejected (422); a request whose key is still being processed returns 409. Records are honored for 24 hours. Use a UUID or similarly unique token.
255Path Parameters
DNS Zone ID
Body
Record name (FQDN).
"www.example.com"
Curated subset of supported DNS record types. SOA and DNSSEC-managed types (DNSKEY, DS, NSEC*, RRSIG, …) are managed by the platform and not creatable through the API.
Every type here has a wire representation. ALIAS is not offered: it resolves only if the authoritative server flattens it to A/AAAA, and ours does not. Point a zone apex at a target with A/AAAA records carrying its addresses.
A, AAAA, AFSDB, APL, CAA, CERT, CNAME, CSYNC, DHCID, DNAME, EUI48, EUI64, HINFO, HTTPS, IPSECKEY, KX, L32, L64, LOC, LP, MX, NAPTR, NID, NS, OPENPGPKEY, PTR, RKEY, RP, SMIMEA, SPF, SRV, SSHFP, SVCB, TLSA, TXT, URI "A"
1Show child attributes
Show child attributes
[
{
"content": "203.0.113.10",
"disabled": false
}
]
x >= 0300
Response
Record created
Show child attributes
Show child attributes

