DNS and settings tools

DNS and domain settings tools apply the same validation, registrar rules, and team permissions as the Marque dashboard.

list_dns_records

Returns the canonical DNS records for an accessible Marque-managed domain.

Scope: dns.read

{
  "domain": "example.com"
}

change_dns_records

Applies explicit add, remove, and update operations. Each record uses name, type, value, ttl, and optional prio fields. Updates contain a from record and a to record.

Scope: dns.write
Delegated capability: dns.records.write

{
  "domain": "example.com",
  "add": [
    {
      "name": "status",
      "type": "TXT",
      "value": "ready",
      "ttl": 300
    }
  ]
}

DNS mutations may affect live services. Review the proposed operations and record values before allowing an agent to apply them.

update_domain_settings

Changes one or more of autoRenew, whoisPrivacy, nameServers, and dnssec.

Scope: domains.settings.write

{
  "domain": "example.com",
  "dnssec": true
}

Auto-renewal and WHOIS privacy are owner-only. A delegated nameserver change always requires dns.nameservers.write. Restoring Marque nameservers or switching to external nameservers also requires dns.dnssec.write, because the operation changes DNSSEC state.

Changing only the DNSSEC setting requires dns.dnssec.write.

An empty nameServers list restores Marque nameservers.

configure_atproto_handle

Configures or removes an AT Protocol handle backed by managed DNS.

Scope: domains.settings.write

{
  "domain": "example.com",
  "handle": "alice.example.com",
  "did": "did:plc:example"
}

Set remove to true to remove the configured handle. When omitted, handle defaults to the domain and did defaults to the authenticated DID.