Be the first to get access to new connectors. Get early access →
ConnectorBay Early access

Hetzner Cloud DNS (BYOK) — connector documentation

  • MCP endpoint: https://byok-hetzner-cloud-dns.connectorbay.com/mcp
  • REST API: POST https://byok-hetzner-cloud-dns.connectorbay.com/v1/tools/{tool_name}, described by the OpenAPI 3.1 spec at https://byok-hetzner-cloud-dns.connectorbay.com/openapi.json
  • Transport: Streamable HTTP, stateless, MCP specification 2025-06-18 or later
  • Authentication: your own Hetzner Cloud DNS Cloud project API token (read-only is enough), sent in the X-Upstream-Key header of every request (never stored, logged or cached)
  • Health: https://byok-hetzner-cloud-dns.connectorbay.com/health · Tool schemas: https://byok-hetzner-cloud-dns.connectorbay.com/tools.json
  • Publisher: Unify Dynamics LLC · connectorbay.com/byok-hetzner-cloud-dns · agent@connectorbay.com

What Hetzner Cloud DNS (BYOK) is for

Hetzner Cloud DNS (BYOK) lets an AI assistant read your own Hetzner Cloud DNS data through the Hetzner Cloud DNS API with a key you supply (Cloud project API token (read-only is enough)). Read-only: 5 tools (list_zones, get_zone, list_rrsets, get_rrset, list_zone_actions). The BYOK key travels with each request, is used for that one call only and is never stored, logged or cached; it is only ever sent to api.hetzner.cloud. Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Hetzner Cloud DNS. Hetzner Cloud DNS and its logos are trademarks of their owners and are used only to say which service the connector works with.

Ask your assistant things like:

  • "Which DNS zones do I host with Hetzner and are they delegated correctly?"
  • "Is example.com delegated to the Hetzner nameservers?"
  • "What DNS records does example.com have at Hetzner?"
  • "What are the MX records of example.com at Hetzner?"
  • "Did the last DNS changes on my Hetzner zones finish?"

What it does

  • list_zones: List DNS zones with status, mode (primary or secondary), default TTL, record count, delegation status and nameservers.
  • get_zone: Get one DNS zone by id or name with status, TTL, record count, nameservers and delegation check result.
  • list_rrsets: List the record sets of a primary zone with name, type, TTL and record values (filter by name or type).
  • get_rrset: Get one record set of a primary zone by name and type, with its TTL and record values.
  • list_zone_actions: List recent DNS zone actions (imports, nameserver changes, record changes) with command, status, progress and errors.

BYOK key

You bring your own Hetzner Cloud DNS Cloud project API token (read-only is enough) (https://console.hetzner.cloud/). Your assistant sends it in the X-Upstream-Key header with each request. ConnectorBay uses it for that one call only: it is never stored, logged or cached, never shown in an answer, and it is only sent to api.hetzner.cloud over https, with no redirects followed. Create a key with the fewest permissions the tools need (read-only if the provider offers it), and revoke it at the provider whenever you like.

Data sources

Live from the Hetzner Cloud DNS API (api.hetzner.cloud) with a BYOK key; documentation: https://docs.hetzner.cloud/reference/cloud#zones. Endpoints checked against that documentation on 2026-10-16.

What it is not

Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Hetzner Cloud DNS. Hetzner Cloud DNS and its logos are trademarks of their owners and are used only to say which service the connector works with. It is read-only: it never creates, changes, sends or deletes anything in your Hetzner Cloud DNS account.

Built for: Worldwide. Languages: English.