Official
Reach the whole Cloudflare API from an agent — DNS records, Workers, R2, and the Registrar beta — through one hosted Code Mode server.
cloudflare, edge, workers, dns
Porkbun
At-cost registration and full DNS control from an agent — read-only until you explicitly turn writes on.
Quick answer
What it does
Wraps the Porkbun API: `domains_check_availability` and `domains_check_bulk`, `domains_create` (register), `domains_update_nameservers`, the `dns_*` record family, `dnssec_*`, glue records, URL forwarding, SSL retrieval, plus higher-level helpers that make common changes idempotent.
Best for
- Read-only DNS inspection with no risk of a write
- Declarative DNS (`dns_batch_apply`, `dns_upsert`)
- At-cost registration behind a double opt-in
- DNSSEC and glue-record management
Not for
- Workflows requiring official vendor support
- Portfolios spread across several registrars
Source: top-mcps.com/mcp/porkbun — verified Sep 2026
Setup recipe
Pick your client, then follow the three steps.
- 1
Install
claude_desktop_config.jsonjson{ "mcpServers": { "porkbun": { "command": "npx", "args": [ "-y", "porkbun-mcp@latest" ], "env": { "PORKBUN_API_KEY": "${PORKBUN_API_KEY}", "PORKBUN_SECRET_KEY": "${PORKBUN_SECRET_KEY}", "PORKBUN_GET_MUDDY": "${PORKBUN_GET_MUDDY}" } } } }Paste under mcpServers. Fully quit and reopen Claude after editing.
CLI or .mcp.jsonshell# export PORKBUN_API_KEY=pk1_your_key # export PORKBUN_SECRET_KEY=sk1_your_secret # export PORKBUN_GET_MUDDY=false claude mcp add porkbun -- npx -y porkbun-mcp@latestRun from your repo. Commit .mcp.json to share with your team.
.cursor/mcp.jsonjson{ "mcpServers": { "porkbun": { "command": "npx", "args": [ "-y", "porkbun-mcp@latest" ], "env": { "PORKBUN_API_KEY": "${PORKBUN_API_KEY}", "PORKBUN_SECRET_KEY": "${PORKBUN_SECRET_KEY}", "PORKBUN_GET_MUDDY": "${PORKBUN_GET_MUDDY}" } } } }Global path: ~/.cursor/mcp.json. Reload window after editing.
.vscode/mcp.jsonjsonc{ "servers": { "porkbun": { "command": "npx", "args": [ "-y", "porkbun-mcp@latest" ], "env": { "PORKBUN_API_KEY": "${PORKBUN_API_KEY}", "PORKBUN_SECRET_KEY": "${PORKBUN_SECRET_KEY}", "PORKBUN_GET_MUDDY": "${PORKBUN_GET_MUDDY}" } } } }VS Code uses the "servers" key (not "mcpServers").
~/.codeium/windsurf/mcp_config.jsonjson{ "mcpServers": { "porkbun": { "command": "npx", "args": [ "-y", "porkbun-mcp@latest" ], "env": { "PORKBUN_API_KEY": "${PORKBUN_API_KEY}", "PORKBUN_SECRET_KEY": "${PORKBUN_SECRET_KEY}", "PORKBUN_GET_MUDDY": "${PORKBUN_GET_MUDDY}" } } } }Open via Cascade → hammer icon → Configure.
cline_mcp_settings.jsonjson{ "mcpServers": { "porkbun": { "command": "npx", "args": [ "-y", "porkbun-mcp@latest" ], "env": { "PORKBUN_API_KEY": "${PORKBUN_API_KEY}", "PORKBUN_SECRET_KEY": "${PORKBUN_SECRET_KEY}", "PORKBUN_GET_MUDDY": "${PORKBUN_GET_MUDDY}" } } } }Open via the Cline sidebar → MCP Servers → Edit.
~/.continue/config.jsonjson{ "experimental": { "modelContextProtocolServers": [ { "transport": { "type": "stdio", "command": "npx", "args": [ "-y", "porkbun-mcp@latest" ], "env": { "PORKBUN_API_KEY": "${PORKBUN_API_KEY}", "PORKBUN_SECRET_KEY": "${PORKBUN_SECRET_KEY}", "PORKBUN_GET_MUDDY": "${PORKBUN_GET_MUDDY}" } } } ] } }Continue uses modelContextProtocolServers with a transport block.
~/.codex/config.tomlshell# ~/.codex/config.toml [mcp_servers.porkbun] command = "npx" args = [ "-y", "porkbun-mcp@latest", ] env = { PORKBUN_API_KEY = "${PORKBUN_API_KEY}", PORKBUN_SECRET_KEY = "${PORKBUN_SECRET_KEY}", PORKBUN_GET_MUDDY = "${PORKBUN_GET_MUDDY}" }Codex uses TOML. Each server is a [mcp_servers.<name>] subtable.
~/.config/zed/settings.jsonjsonc{ "context_servers": { "porkbun": { "command": { "path": "npx", "args": [ "-y", "porkbun-mcp@latest" ] }, "env": { "PORKBUN_API_KEY": "${PORKBUN_API_KEY}", "PORKBUN_SECRET_KEY": "${PORKBUN_SECRET_KEY}", "PORKBUN_GET_MUDDY": "${PORKBUN_GET_MUDDY}" } } } }Zed calls them "context_servers". Settings live-reload on save.
ChatGPT → Apps directorynonePorkbun doesn't ship a hosted HTTPS endpoint today. ChatGPT supports remote MCP servers only — to use this server in ChatGPT you'll need to deploy it to a public HTTPS URL first (e.g. via Cloudflare Workers or Vercel) or wait for an official remote build.
- 2
Set required secrets
Set
PORKBUN_API_KEY,PORKBUN_SECRET_KEY,PORKBUN_GET_MUDDYin your shell environment before launching your MCP client. - 3
Try a minimum working prompt
Minimum working prompt pending verification. Try any prompt from the MCP’s README once installed.
Tools & permissions
Showing 12 of 40 tools the server reported. The rest are real, just not listed here.
| Tool | Description | Args | Side effects |
|---|---|---|---|
domains_check_availability | Check whether one domain is available, with price. | — | Network |
domains_check_bulk | Check a list of domains in one call. | — | Network |
domains_create | Register a domain. Needs write mode plus --enable-domain-create. Spends money. | — | Write |
domains_update_nameservers | Set a domain's NS delegation. | — | Write |
dns_list | List every DNS record on a domain. | — | Read |
dns_create | Create one DNS record. | — | Write |
dns_upsert | Create or update a record matched by selector — idempotent on retry. | — | Write |
dns_batch_apply | Apply a full desired-record set to a zone. | — | Write |
domain_cutover_web | Move a domain's web records to a new target in one step. | — | Write |
dnssec_create | Add a DNSSEC DS record (key tag, algorithm, digest). | — | Write |
domain_health_check | Report on a domain's configuration health. | — | Network |
ssl_retrieve | Retrieve the SSL certificate bundle Porkbun issues for a domain. | — | Read |
Security & scope
- Access scope
- Read-only
- Sandbox
- No sandbox, but read-only is the default start-up mode and scenario tools dry-run unless told otherwise.
- Gotchas
- A `tools/list` probe returns all 40 tools whether or not write mode is on, so the tool count tells you nothing about what the server will actually do. Read the flags, not the list.
- Two flags gate spending: `--get-muddy` (plus `PORKBUN_GET_MUDDY=true`) enables mutating tools at all, and `--enable-domain-create` is needed on top before `domains_create` will register and charge.
- API access must be enabled per domain in the Porkbun panel. Account-level keys are not enough — a domain with API access off reads as "not in your account".
- Third-party wrapper holding full Porkbun API credentials, not a scoped token.
Agent prompt pack
— copy into Claude, Cursor, or ChatGPT.Paste into Claude, Cursor, or ChatGPT. Edit the [brackets] before sending.
Recommend the best MCP servers for [task: e.g. domains work] in [client: Claude]. Constraints: - Prefer tools that are [official | open-source | read-only] — pick what matters for my use case. - Exclude MCPs that require [e.g. a paid plan, OAuth-only flows, remote-only transport]. - Return at most 3 picks, ranked. For each pick include: 1. One-sentence rationale. 2. The ready-to-paste install snippet for my client. 3. Any required secrets I need to create before installing. Cross-check the top-mcps.com listing: https://top-mcps.com/top-mcps-for-domains
Compare Porkbun against a real alternative. Swap the second MCP in [brackets] if you want a different match.
Compare Porkbun MCP vs [Cloudflare MCP] for the following job: [describe the job, e.g. "let an agent create GitHub issues on bug triage"]. Judge them on: - Setup time and complexity (what a new user hits first). - Auth model (none / API key / OAuth 2.1) and credential risk. - Transport (stdio / Streamable HTTP / SSE) and where the server runs. - Required secrets and the blast radius if they leak. - Operational risk in an unattended agent loop. - Which one is "good enough" for a weekend prototype vs. production. End with one sentence: which should I pick for my scenario, which is: [my scenario]. References: - https://top-mcps.com/mcp/porkbun - top-mcps.com listing for Cloudflare
Asks the agent to install and verify. Works inside Claude Code, Cursor Agent, Codex CLI.
Install the Porkbun MCP server for my [client: Claude] at the default config path for that client. Use the exact install snippet published at https://top-mcps.com/mcp/porkbun (fetch https://top-mcps.com/mcp/porkbun.json for the canonical server.json if you can read URLs). Before finishing: 1. Create the required secrets (PORKBUN_API_KEY, PORKBUN_SECRET_KEY, PORKBUN_GET_MUDDY) and put them in the appropriate env block — do not hard-code them. 2. Restart or reload the client so it picks up the new server. 3. Verify the server is connected (green / running state) and at least one tool is listed. 4. If anything fails, read the client's MCP logs and report the exact error — do not silently retry. Confirm when done and list the tools the server now exposes.
Frequently asked questions
What changed
— 2 updates tracked.Refreshed install snippets and fact sheet; verified for 2026.
Initial directory listing.
More Domains MCPs
Other tools in the same category worth evaluating.
Official
Register, transfer and manage Name.com domains and DNS from an agent — the official server, sandboxed by default.
name-com, domains, registrar, dns
Official
Deploy from files or Git, buy and attach domains, edit DNS, and debug deployments on Vercel — the official remote MCP, over OAuth.
vercel, hosting, deployment, domains
Compared with Porkbun
Side-by-side breakdowns for the choices people most often weigh against this MCP.
Exploring Top MCPs for Domains? See all Domains MCPs →