Skip to content
DNSmigrator
betaDNS betaCDN and edgeSetup guide checked 2026-09-27

Bunny DNS

Bunny API key setup: reveal and copy the single account-level API key used by bunny.net's DNS Zone API.

On this page

Bunny API key permissions

Credential type
Account API key
Preview access
Account API key — full account access, with no scopes
Apply access
Account API key — full account access, with no scopes
API endpoint
DNSMigrator uses the provider's fixed API endpoint.

Additional access

Storage, Stream and database keys are different credentials and do not work with the account DNS API.

DNSControl id

creds.json TYPE
{
  "TYPE": "BUNNY_DNS"
}

Create credentials

Reveal and copy the single account-level API key used by bunny.net's DNS Zone API.

Access you'll grant

Preview

Account API key — full account access, with no scopes

Apply

Account API key — full account access, with no scopes

Storage, Stream and database keys are different credentials and do not work with the account DNS API.

Before you start

  • A bunny.net account with access to the DNS zones.
  • Acceptance that the account API key has full account access; bunny.net does not offer a read-only account key.

Setup steps

0 of 4 done

  1. Open the account API key

    Sign in to the bunny.net dashboard and open Account → API Key.

    Open the bunny.net account API key

  2. Reveal the key

    Use the eye icon to reveal the hidden account key, or the copy icon to copy it. The same account-level key can be viewed again later.

  3. Confirm the key type

    Use the account API Key, not a Storage Zone password, Stream library key or database key. Only the account key authenticates DNS Zone requests.

    API headerAccessKey

  4. Paste the key

    Paste the complete value into Account API key here without adding AccessKey: or quotes.

Troubleshooting

bunny.net rejects the key

Verify that you copied the account API key. Storage Zone passwords and Stream or database keys cannot authenticate the account DNS API.

A previously working key stops working

Regenerating the account key immediately invalidates the old value. Copy the current key from the dashboard and reconnect.

You cannot make the connection read-only

This is a bunny.net limitation: the single account API key has full account access and has no scope controls.

Official documentation

Guide checked against the official documentation on .

Credential fields

FieldRequirementWhere to find it
Account API keyapiKeyRequiredThe full account-level key shown under Account → API Key; paste the value only.

Capabilities

Create zones
Yes
List zones
Yes
DNSSEC
Managed through the API
Minimum TTL
60 seconds
Apex CNAME
Supported through flattening
Read only
No

Record types

  • A
  • AAAA
  • CNAME
  • MX
  • TXT
  • NS
  • SRV
  • CAA
  • PTR
  • HTTPS
  • SVCB
  • TLSA

Caveats

  • Pull Zone, Script and Flatten records, and disabled records, aren't migrated. Redirect records are read as URL redirects to recreate by hand.
  • Records that use smart routing (latency or geolocation) or CDN acceleration are flagged and never changed by us.
  • An apex CNAME is flattened by Bunny, so it can point at any hostname.

Troubleshooting

bunny.net rejects the key
Verify that you copied the account API key. Storage Zone passwords and Stream or database keys cannot authenticate the account DNS API.
A previously working key stops working
Regenerating the account key immediately invalidates the old value. Copy the current key from the dashboard and reconnect.
You cannot make the connection read-only
This is a bunny.net limitation: the single account API key has full account access and has no scope controls.

Related links

Bunny DNS migration overviewMarketing overview and provider differences.Connect a providerHow connection checks and permissions work.Cloudflare → BunnyRoute 53 → BunnyAzure DNS → BunnyCloud DNS → Bunny