List DNS records
const url = 'https://api.nsin.ir/domains/example.com/records/';const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
try { const response = await fetch(url, options); const data = await response.json(); console.log(data);} catch (error) { console.error(error);}curl --request GET \ --url https://api.nsin.ir/domains/example.com/records/ \ --header 'Authorization: Bearer <token>'All records of the domain, newest first.
Proxied records may carry origin_rules — origin route or origin pool
rules that override where that record’s traffic actually goes, so the
effective origin is not the record’s destination. Routes are listed
before pools, mirroring edge precedence.
On an external-DNS domain every proxied record also carries
edge_target (what to publish in your own zone so the name reaches
NSIN) and the stored verdict of the last edge check (edge_status,
edge_via, edge_detail, edge_checked_at) — see the Record schema.
Authorizations
Section titled “Authorizations ”Parameters
Section titled “ Parameters ”Path Parameters
Section titled “Path Parameters ”The domain name (for example example.com) — not a numeric id.
Example
example.comResponses
Section titled “ Responses ”Record list.
object
Record name relative to the domain. @ is the apex.
The fully-qualified name, with trailing dot.
The record’s value. For a proxied record this is the origin the
edge connects to, and the published DNS answer is the NSIN proxy IP
instead — see dns_content.
What is actually published in DNS. Equals the proxy IP for proxied records.
TTL in seconds.
Route this hostname through the NSIN edge. Only A, AAAA, CNAME
and ANAME may be proxied.
Challenge visitors before passing them to the origin.
False for records NSIN manages on your behalf.
The platform feature that owns this record, or empty for a record
you created. email_routing marks the MX, SPF and DKIM rows Email
Routing publishes; they are removed by disabling routing, never
through the record endpoints (which refuse them while locked).
Protocol the edge uses to reach the origin of a proxied record.
Https— TLS toport(443 when the port is unset or out of range).Http— plain HTTP toport(80 when unset or out of range).Auto— HTTPS on 443 first, falling back to plain HTTP. The port is always 443.Default— accepted on input, and so are an empty or unrecognised value, but stored asAutowith port 443: a record never reads back asDefault.
Origin port for proxied records: 443 for Auto, otherwise as set (default 443 for Https, 80 for Http).
Overrides the Host header (and SNI) sent to the origin.
Which name a proxied CNAME/ANAME sends to its origin as the Host
header (and SNI) when host_header is empty: empty — the record’s
own hostname (the default); target — the hostname it points at.
The gateway this record was created for, or null for a record you
made. A gateway record is not editable here; rename or remove it
through the gateway endpoints.
Gateway records only: a JSON array, as a string, of the other
hostnames the gateway’s service links to. The edge serves them
under /_nsin/<host>/ on the gateway hostname.
Gateway records only — whether the edge rewrites URLs in responses to go through the gateway.
Include this record in uptime monitoring.
How long an edge node waits for the origin to start responding before returning 504, in seconds. Default 60, maximum 1800 (30 minutes). Only applies to proxied records.
Only meaningful for MX.
Free-form note.
Always null — deleted records are never returned.
External-DNS domains, proxied records only. Whether the name
resolves to NSIN’s edge, as last checked: ok — every address it
resolves to is ours; miss — it resolves elsewhere, only partly to
us, or not at all; error — the first lookup failed and nothing is
known yet. Absent until the first check, and always absent on a
managed-DNS domain.
How an ok record reaches NSIN: through the CNAME target
(cname), by publishing our address directly (a), or proxy —
DNS points at another CDN or proxy, but that service forwards to
NSIN and the edge is serving the host (judged from the last 24h of
request logs). A CNAME keeps working when our addresses change; an
A record does not.
What the name actually resolves to, for display.
Absent when nothing overrides this record’s origin. Routes are listed before pools.
An enabled origin rule that overrides where a proxied record’s traffic
goes, meaning the effective origin is not the record’s destination.
object
The rule’s optional label. Absent when the rule is unnamed.
True when the rule applies to every proxied record of the domain.
The rule is evaluated but not enforced.
Only on a proxied record of an external-DNS domain.
object
For a subdomain: the hostname to CNAME it to.
For the apex: the hostname to point an ANAME/ALIAS (flattened CNAME) at.
The A addresses — the fallback when no hostname applies.
Example
[ { "name": "www", "original_name": "www.example.com.", "type": "A", "scheme": "Http", "host_header_mode": "", "timeout": 60, "edge_status": "ok", "edge_via": "cname", "origin_rules": [ { "type": "origin_route" } ], "edge_target": { "cname": "edge.nsin.ir", "alias": "edge.nsin.ir" } }]Missing, malformed, revoked or expired API key. (A valid key whose
account has been deactivated gets 403 account is inactive instead.)
The single error shape used by every endpoint.
object
Human-readable description of what went wrong.
Examples
{ "error": "invalid API key"}No such domain, or it is not visible to this account. Domains you cannot access are reported as not found rather than forbidden.
The single error shape used by every endpoint.
object
Human-readable description of what went wrong.
Example
{ "error": "read-only API key"}The key exceeded its request budget (300 requests per minute by default).
The single error shape used by every endpoint.
object
Human-readable description of what went wrong.
Examples
{ "error": "rate limit exceeded"}