Dns MCP Server
DNS management for Alibaba Cloud using minimal RAM permissions directly via AccessKeys.
Data last scanned today · Reviewed today
Overview
This server provides a direct interface for managing Alibaba Cloud DNS records without requiring the broader IMS token generation process. It is designed to work with minimal RAM policies, allowing users to restrict AccessKey permissions strictly to necessary DNS record operations.
Our verdict
With a security score of 24/100, this tool carries a high risk level. It is community-maintained and has not undergone an editorial review, meaning users must be cautious regarding the handling of their AccessKeys. It is best suited for experienced developers who require granular permission controls and can manually verify the code before deployment.
- Supports fine-grained RAM policy restrictions for DNS record operations
- Requires zero direct dependencies for a smaller supply chain surface
- Includes clear documentation for implementing minimal permission policies
- High security risk due to community-maintained status
- Authentication methods have not yet been editorially reviewed
- Single-contributor project with no official vendor backing
Tools
| Tool | Description | Risk |
|---|---|---|
| list_records | 列出域名下所有解析 | low |
| add_record | 新增一条解析 | medium |
| update_record | 改一条已有解析 | medium |
| delete_record | 删一条解析 | high |
| set_records | 批量改 IP（按 RR 名匹配） | medium |
Compatibility
| Client | Local | Docker | Remote | Read-only |
|---|---|---|---|---|
| ChatGPT | ||||
| Claude Desktop | ||||
| Cursor | ||||
| VS Code | ||||
| Windsurf |
Frequently asked questions
›Why is this MCP server different from the official Alibaba Cloud one?
The official server uses a temporary token approach that requires broad permissions, whereas this server uses raw API keys directly to support granular, least-privilege RAM policies for specific DNS operations.
›What are the minimum permissions required for my Alibaba Cloud RAM user?
You can restrict the RAM policy to allow only specific Alidns actions like Describe, Add, Update, and Delete, and even scope the access to a single domain by setting the Resource attribute to your specific domain.
›What Python version is required?
The server requires Python version 3.10 or higher.
›How does the set_records tool handle non-existent records?
The set_records tool only updates existing records that match the provided subdomain names and does not automatically create new entries.
›Can I use this server for providers other than Alibaba Cloud?
The project is designed with a provider interface that allows for future support of providers like Cloudflare, DNSPod, or AWS Route53 by implementing the DNSProvider protocol.
›What environment variables are required for configuration?
You must provide ALIYUN_ACCESS_KEY_ID and ALIYUN_ACCESS_KEY_SECRET, though ALIBABA_CLOUD_ACCESS_KEY_ID and ALIBABA_CLOUD_ACCESS_KEY_SECRET are also accepted.
Badge
Maintain this server? Add the live badge to your README.