# DNScale

> DNScale is a managed authoritative DNS hosting platform with global Anycast distribution, DNSSEC support, and a developer-friendly REST API. EU-based with worldwide reach.

DNScale provides reliable DNS infrastructure for businesses of all sizes. Key capabilities include multi-region hosting (EU and Global), automatic failover, 14 DNS record types, DNSSEC signing, team collaboration with role-based access, the official DNScale CLI, and Terraform and DNSControl providers for Infrastructure as Code workflows.

API Base URL: https://api.dnscale.eu/v1
Support: support@email.dnscale.eu

## DNScale CLI

The official `dnscale` CLI manages zones and individual DNS record values, inspects DNSSEC, and reports usage from terminals, scripts, and CI. Version 1.0.0 is available.

- [CLI reference](https://dnscale.eu/docs/cli): Complete command syntax, API scopes, record input, profiles, and exit codes
- [CLI quickstart](https://dnscale.eu/learning/dnscale-cli-guide): Installation and a two-value TXT record workflow in a disposable zone
- [CLI source and issues](https://github.com/dnscaleou/dnscale-cli): Public source code, README, and examples
- [Version 1.0.0 downloads](https://github.com/dnscaleou/dnscale-cli/releases/tag/v1.0.0): Platform archives and release notes
- [All CLI releases](https://github.com/dnscaleou/dnscale-cli/releases): Release history and updates
- [SHA-256 checksums](https://github.com/dnscaleou/dnscale-cli/releases/download/v1.0.0/checksums.txt): Verify downloaded 1.0.0 archives before extracting
- [Homebrew tap](https://github.com/dnscaleou/homebrew-tap): Official Homebrew package repository
- [Homebrew formula](https://github.com/dnscaleou/homebrew-tap/blob/main/Formula/dnscale.rb): Package definition and platform checksums
- [CLI changelog](https://dnscale.eu/changelog#cli-1-0-0): Version 1.0.0 feature summary

### CLI installation and upgrades

On macOS or Linux:

```bash
brew install dnscaleou/tap/dnscale
dnscale --version
```

The Homebrew package includes Bash, Zsh, and Fish completions. Upgrade with `brew update` followed by `brew upgrade dnscale`; remove with `brew uninstall dnscale`.

Release archives support macOS Apple Silicon (darwin_arm64), macOS Intel (darwin_amd64), Linux ARM64 (linux_arm64), Linux AMD64 (linux_amd64), and Windows AMD64 (windows_amd64). Compare the archive's SHA-256 hash with `checksums.txt`, extract it, and add the directory containing `dnscale` or `dnscale.exe` to PATH. These binaries do not require Go.

To install from source with Go 1.25 or newer:

```bash
go install github.com/dnscaleou/dnscale-cli/cmd/dnscale@v1.0.0
dnscale --version
```

Add `GOBIN`, or the `bin` directory under `go env GOPATH` when `GOBIN` is unset, to PATH.

### CLI authentication and first commands

Create an API key in the DNScale dashboard with the scopes and zone access your commands need. Supply it through `DNSCALE_API_KEY` using your shell, secret manager, or CI secret. The CLI does not load `.env` files. The default API endpoint is `https://api.dnscale.eu/v1`.

With `DNSCALE_API_KEY` available, these commands read existing data:

```bash
dnscale zones list --all --json
dnscale records list example.com --all --json
dnscale dnssec status example.com --json
dnscale dnssec ds example.com --json
dnscale usage current --json
```

For a saved profile, `dnscale auth login --profile work` stores the supplied key in the OS keychain. Select it with `--profile work` on subsequent commands. Explicit profile selection uses its saved credentials and endpoint and ignores ambient API key/base URL variables. `dnscale auth status --profile work` reports local configuration without validating the key against the API. On headless systems without a supported keychain, use `DNSCALE_API_KEY` directly and omit `--profile`.

`ZONE` arguments accept a zone UUID or an exact domain name. Commands include `zones list/get/create`, `records list/get/create/update/delete`, `dnssec status/ds`, and `usage current/summary/zone`. DNSSEC inspection is read-only; zone deletion, zone imports, whole-RRset deletion, and DNSSEC changes are outside the CLI command set.

### CLI record input and automation

Record create/update accept flags or `--file PATH` containing one JSON object; `--file -` reads stdin. `--dry-run` performs local validation without credentials or network access:

```bash
dnscale records create example.com --name _cli --type TXT --content first-value --ttl 300 --dry-run --json
```

Dry-run returns `submitted: false` and `validation: "local_only"`; it does not check zone access, quota, server DNS rules, or API acceptance. Omitting `--dry-run` submits the write.

Record updates require a complete PUT request with name, type, and content. Name/type must match the selected record. Omitted or zero TTL selects the server default of 3600 seconds, and omitted disabled means false. Omitted/null comment preserves the existing comment; an empty string clears the DNScale-owned comment. TTL and comments apply to the entire name/type RRset; sibling values retain their content and disabled state. An update can change the opaque record ID: retain the returned `data.id` for subsequent commands. Deletion requires `records delete ZONE RECORD_ID --yes` and does not prompt.

Output is indented JSON by default; `--json` produces compact JSON. Success goes to stdout and errors to stderr. Help, version, and completion output are text. `--all` collects every list page before printing; it is not an atomic snapshot. Exit codes are 0 for success/local validation, 1 for API/protocol/output failure, 2 for invalid input/configuration, 3 for authentication/permission failure, 4 for rate limits, 5 for network failure/timeout, and 130 for interruption.

The default timeout is 30 seconds for the whole command, including zone resolution and pagination. Safe reads allow two retries by default; writes are never automatically retried. If a write times out, inspect current state before repeating it. A `PARTIAL_RECORD_UPDATE` error requires checking each affected region; regional updates are separate operations.

## API Documentation

- [API Overview](https://dnscale.eu/api/overview): REST API basics, base URLs, versioning, and response formats
- [Authentication](https://dnscale.eu/api/authentication): Bearer token authentication and API key scoping
- [Zones](https://dnscale.eu/api/zones): Create, list, update, and delete DNS zones
- [Records](https://dnscale.eu/api/records): Manage DNS records (A, AAAA, CNAME, MX, TXT, etc.)
- [DNSSEC](https://dnscale.eu/api/dnssec): DNSSEC key management, signing, and DS record retrieval
- [Users](https://dnscale.eu/api/users): Team member management and roles
- [Invitations](https://dnscale.eu/api/invitations): Invite users to your organization
- [Activity](https://dnscale.eu/api/activity): Audit logs and activity history
- [Usage](https://dnscale.eu/api/usage): Query usage statistics and metrics
- [Billing](https://dnscale.eu/api/billing): Subscription and billing information

## Learning Guides - DNS Fundamentals

- [What is DNS?](https://dnscale.eu/learning/what-is-dns): Introduction to the Domain Name System
- [What is a DNS Zone?](https://dnscale.eu/learning/what-is-a-dns-zone): Understanding DNS zones and delegation
- [DNS Server Types](https://dnscale.eu/learning/dns-server-types): Authoritative vs recursive DNS servers
- [DNS Record Types](https://dnscale.eu/learning/dns-record-types): Complete guide to all 14 supported record types
- [What is TTL?](https://dnscale.eu/learning/what-is-ttl): Time-to-live and DNS caching behavior
- [Domain Registrar vs DNS Hosting](https://dnscale.eu/learning/domain-registrar-vs-dns-hosting): Understanding the difference
- [DNS Delegation by Region](https://dnscale.eu/learning/dns-delegation-by-region): Multi-region DNS configuration

## Learning Guides - Record Types

- [A Records](https://dnscale.eu/learning/dns-a-record): IPv4 address mapping
- [AAAA Records](https://dnscale.eu/learning/dns-aaaa-record): IPv6 address mapping
- [CNAME Records](https://dnscale.eu/learning/dns-cname-record): Canonical name aliases
- [MX Records](https://dnscale.eu/learning/dns-mx-record): Mail exchange configuration
- [TXT Records](https://dnscale.eu/learning/dns-txt-record): Text records for SPF, DKIM, verification
- [NS Records](https://dnscale.eu/learning/dns-ns-record): Nameserver delegation
- [PTR Records](https://dnscale.eu/learning/dns-ptr-record): Reverse DNS lookups
- [SRV Records](https://dnscale.eu/learning/dns-srv-record): Service location records
- [CAA Records](https://dnscale.eu/learning/dns-caa-record): Certificate Authority Authorization
- [TLSA Records](https://dnscale.eu/learning/dns-tlsa-record): DANE TLS authentication
- [SSHFP Records](https://dnscale.eu/learning/what-is-an-sshfp-record): SSH fingerprint records
- [HTTPS Records](https://dnscale.eu/learning/what-is-an-https-record): HTTPS service binding
- [SVCB Records](https://dnscale.eu/learning/what-is-an-svcb-record): General service binding
- [ALIAS Records](https://dnscale.eu/learning/what-is-an-alias-record): Root domain CNAME alternative

## Learning Guides - Advanced Topics

- [Managing DNS with Terraform](https://dnscale.eu/learning/terraform-provider-guide): Infrastructure as Code for DNS
- [Managing DNS with DNSControl](https://dnscale.eu/learning/dnscontrol-guide): DNS as Code with DNSControl
- [Multi-Provider DNS with Terraform & DNSControl](https://dnscale.eu/learning/multi-provider-dns-deployment): Multi-provider DNS deployment
- [IPv6 vs IPv4](https://dnscale.eu/learning/ipv6-vs-ipv4): Dual-stack DNS configuration
- [SSL/TLS Certificates](https://dnscale.eu/learning/ssl-tls-certificates): DNS validation for certificates
- [Email Security with SPF, DKIM, and DMARC](https://dnscale.eu/learning/email-security-spf-dkim-dmarc): Email authentication DNS records
- [Global DNS Resolution Balancing](https://dnscale.eu/learning/global-dns-resolution-balancing): Load balancing and failover
- [Anycast DNS Network](https://dnscale.eu/learning/anycast-dns-network): What is an Anycast DNS network
- [Understanding DNS Query Usage](https://dnscale.eu/learning/understanding-dns-query-usage): Monitoring and analytics
- [Zone Import Methods](https://dnscale.eu/learning/zone-import-methods): Migrating DNS zones
- [What is My IP Address?](https://dnscale.eu/learning/what-is-my-ip-address): IP detection and DNS

## Learning Guides - Platform

- [Multi-User Accounts and Zone Access Control](https://dnscale.eu/learning/multi-user-accounts): Team management and permissions
- [Paid Plans vs Pay As You Go](https://dnscale.eu/learning/paid-plans-vs-pay-as-you-go): Choosing the right billing model

## Blog

- [Introducing the DNScale CLI](https://dnscale.eu/blog/cli-launch): Manage DNS from your terminal with Homebrew, platform downloads, and Go installation
- [Introducing the DNScale Terraform Provider](https://dnscale.eu/blog/terraform-provider-launch): DNS as Code announcement
- [DNScale Now Supports DNSControl](https://dnscale.eu/blog/dnscontrol-provider-launch): DNS as Code with DNSControl
- [Stop Email Spoofing: Secure Your Domain in 5 Minutes](https://dnscale.eu/blog/secure-your-email-spf-dkim-dmarc): SPF, DKIM, DMARC setup guide
- [Critical BIND 9 DNS Vulnerability Exposes 700 000+ Servers](https://dnscale.eu/blog/bind9-dns-vulnerability-2025): Security advisory
- [Global Cloudflare DNS Disruption](https://dnscale.eu/blog/cloudflare-dns-disruption): Incident analysis and internet reliability
- [Major Cloudflare Outage Highlights the Need for DNS Redundancy](https://dnscale.eu/blog/cloudflare-outage-2025): Service disruption lessons
- [Global DNS Propagation Delays Affect Major Websites](https://dnscale.eu/blog/global-dns-propagation-delays-2025): Understanding propagation
- [Microsoft 365 DNS Record Issue](https://dnscale.eu/blog/microsoft-365-dns-issue): Enterprise DNS incident lessons
- [What We Can Learn from the Recent Amazon AWS DNS Failure](https://dnscale.eu/blog/aws-dns-failure-lessons): Cloud DNS reliability

## Product

- [Pricing](https://dnscale.eu/pricing): Plans, features, and pricing in EUR
- [Features](https://dnscale.eu/features): Platform capabilities overview
- [Contact](https://dnscale.eu/contact): Contact and help resources

## Legal

- [Privacy Policy](https://dnscale.eu/privacy-policy): Data handling and GDPR compliance
- [Terms of Service](https://dnscale.eu/terms-of-service): Service agreement
- [Cookie Policy](https://dnscale.eu/cookie-policy): Cookie usage disclosure
- [Data Processing Agreement](https://dnscale.eu/dpa): GDPR processor terms and signed DPA request flow
- [Subprocessors](https://dnscale.eu/subprocessors): Public provider register for service-data processors

## External Resources

- [Concise LLM index](https://dnscale.eu/llms.txt): Shorter overview of DNScale documentation and developer tools
- [Terraform Provider](https://registry.terraform.io/providers/dnscaleou/dnscale/latest): HashiCorp Terraform Registry
- [GitHub](https://github.com/dnscaleou): Source code and issue tracking

---

Crawl guidance: Prefer sitemap at /sitemap.xml. Avoid private routes: /dashboard, /app, /auth
Last updated: 2026-10-01