Import hosts from your DNS provider

On the domain page, click Connect provider, choose your provider, and paste the API credentials. We validate them with a live request — if the provider rejects them, you'll know immediately.

Once connected, every record name in your zone becomes a monitored host (wildcards and zone metadata like SOA records are skipped). After the initial import, the connection re-syncs daily to pick up hosts you've created at the provider since. You can also trigger an immediate sync with Sync now on the domain's settings page.

We import host names, not record values. The actual records are resolved against your authoritative nameservers like every other monitoring check, so alerts always reflect what the real DNS says — not what the provider's dashboard says.

Connect the domain exactly as it exists at the provider — provider APIs serve whole zones, so a subdomain added as its own OneDollarDNS domain (like api.example.com) can't be synced. Connect example.com instead.

Keys are encrypted at rest and used exclusively to read DNS records — once saved, they are never displayed again, anywhere. A key is stored once at the account level and shared by every domain you connect it to, so rotating it in one place updates all of them. Manage your keys under DNS Providers in the app.

We recommend creating credentials with the narrowest scope your provider supports: read-only, and limited to a single zone where the provider allows it. Disconnecting a domain keeps the saved key; deleting the key under DNS Providers removes it (and its connections) immediately.

If the provider rejects our request — a revoked token, a removed IP allowlist entry, a zone that's no longer on the account — or requests keep failing even after retries, the connection switches to an Error state: you receive a single email explaining the failure, the status chip on the domain page turns red, and automatic daily syncing pauses.

To recover: if the key is still valid (say, the failure was a temporarily missing allowlist entry), Sync now on the domain's settings page retries and reactivates the connection on success. If the key is dead, rotate it under DNS Providers — we verify the new key with the provider before saving, and it reactivates every domain using it.

Disconnecting never touches your hosts — everything already imported stays monitored. You only lose the automatic import of new hostnames.