curl -X POST "https://your-paneldns-domain.com/api/v1/zones/501/dnssec" \
-H "Authorization: Bearer YOUR_TOKEN" \
-H "Content-Type: application/json" \
-d '{"enable": true}'
{
"ok": true,
"data": {
"enabled": true,
"algorithm": 13,
"ds_records": [
{
"key_tag": 12345,
"algorithm": 13,
"digest_type": 2,
"digest": "ABCDEF1234567890ABCDEF1234567890ABCDEF1234567890ABCDEF1234567890"
}
],
"last_synced_at": "2026-06-05T11:05:00.000000Z",
"next_review_at": null
}
}
{
"ok": true,
"data": {
"enabled": false,
"algorithm": null,
"ds_records": [],
"last_synced_at": "2026-06-05T11:05:00.000000Z",
"next_review_at": null
}
}
{
"ok": false,
"error": "DNSSEC is not supported by this DNS provider.",
"code": 422
}
DNSSEC
Toggle DNSSEC
Enable or disable DNSSEC signing for a zone. Requires zones:write scope.
POST
/
api
/
v1
/
zones
/
{id}
/
dnssec
curl -X POST "https://your-paneldns-domain.com/api/v1/zones/501/dnssec" \
-H "Authorization: Bearer YOUR_TOKEN" \
-H "Content-Type: application/json" \
-d '{"enable": true}'
{
"ok": true,
"data": {
"enabled": true,
"algorithm": 13,
"ds_records": [
{
"key_tag": 12345,
"algorithm": 13,
"digest_type": 2,
"digest": "ABCDEF1234567890ABCDEF1234567890ABCDEF1234567890ABCDEF1234567890"
}
],
"last_synced_at": "2026-06-05T11:05:00.000000Z",
"next_review_at": null
}
}
{
"ok": true,
"data": {
"enabled": false,
"algorithm": null,
"ds_records": [],
"last_synced_at": "2026-06-05T11:05:00.000000Z",
"next_review_at": null
}
}
{
"ok": false,
"error": "DNSSEC is not supported by this DNS provider.",
"code": 422
}
Enables or disables DNSSEC on the provider for this zone. When enabling, the provider generates a key-signing key (KSK) and zone-signing key (ZSK). The returned
ds_records must be added at your domain registrar to complete the chain of trust.
Disabling DNSSEC removes the signing keys on the provider. Remove the DS record(s) at your registrar before disabling to avoid SERVFAIL during the TTL drain period.
integer
required
Zone ID.
boolean
required
true to enable DNSSEC, false to disable.curl -X POST "https://your-paneldns-domain.com/api/v1/zones/501/dnssec" \
-H "Authorization: Bearer YOUR_TOKEN" \
-H "Content-Type: application/json" \
-d '{"enable": true}'
{
"ok": true,
"data": {
"enabled": true,
"algorithm": 13,
"ds_records": [
{
"key_tag": 12345,
"algorithm": 13,
"digest_type": 2,
"digest": "ABCDEF1234567890ABCDEF1234567890ABCDEF1234567890ABCDEF1234567890"
}
],
"last_synced_at": "2026-06-05T11:05:00.000000Z",
"next_review_at": null
}
}
{
"ok": true,
"data": {
"enabled": false,
"algorithm": null,
"ds_records": [],
"last_synced_at": "2026-06-05T11:05:00.000000Z",
"next_review_at": null
}
}
{
"ok": false,
"error": "DNSSEC is not supported by this DNS provider.",
"code": 422
}