Skip to content
DNSmigrator
betaDNS betaDNS hostingSetup guide checked 2026-09-27

DNS Made Easy

DNS Made Easy API key setup: generate the account API key pair under Account Information; API access requires Business / DNS-25 or above and only the primary user can see the keys.

On this page

DNS Made Easy API key permissions

Credential type
API key and secret key
Preview access
Account API key + secret key (full Managed DNS access)
Apply access
Account API key + secret key (full Managed DNS access)
API endpoint
DNSMigrator uses the provider's fixed API endpoint.

Additional access

DNS Made Easy exposes the account key pair to the primary user and does not provide separate read-only and write scopes for that pair. Its Corporate Access Control List is documented as a user sign-in control, not an API-key source-IP setting.

DNSControl id

creds.json TYPE
{
  "TYPE": "DNSMADEEASY"
}

Create credentials

Generate the account API key pair under Account Information; API access requires Business / DNS-25 or above and only the primary user can see the keys.

Access you'll grant

Preview

Account API key + secret key (full Managed DNS access)

Apply

Account API key + secret key (full Managed DNS access)

DNS Made Easy exposes the account key pair to the primary user and does not provide separate read-only and write scopes for that pair. Its Corporate Access Control List is documented as a user sign-in control, not an API-key source-IP setting.

Before you start

  • A Business / DNS-25 membership or above; Small Business / DNS-5 does not include API access.
  • Access as the primary user for the DNS Made Easy account.

Setup steps

0 of 6 done

  1. Open Account Information

    Sign in to the DNS Made Easy control panel and select Config → Account Information.

    Open DNS Made Easy

  2. Check that API access is available

    Confirm the account is on Business / DNS-25 or above. The API key section is not available on Small Business / DNS-5.

  3. Generate the API credentials

    Below the account details, use the checkbox in the API keys section to generate credentials. If the account already has credentials, DNS Made Easy displays them in the same location.

  4. Copy both keys

    Copy the value labeled API key into API key, and copy its matching secret into Secret key. Requests are signed with both values, so a pair from different generations will fail.

  5. Choose production or sandbox

    Leave Use the sandbox API off for production. Turn it on only for credentials created in a separate account at sandbox.dnsmadeeasy.com; sandbox and production accounts have different keys and data.

    Open the DNS Made Easy sandbox

  6. Check access

    Paste the matching values, select the correct environment, and check access. DNSMigrator signs requests locally with HMAC-SHA1 and never sends the secret key as a plain header.

Troubleshooting

The API key section is missing

Sign in as the primary account user and confirm the membership is Business / DNS-25 or above. Sub-users cannot view the account API keys.

DNS Made Easy rejected the key pair

Copy the API key and its matching secret again. Also verify that Use the sandbox API matches the account where the keys were generated.

Signed requests are rejected intermittently

DNS Made Easy includes the current HTTP date in each signature. Correct the clock on the system making the request, then check access again.

Rate limit exceeded

Wait for the rolling API window to recover. DNSMigrator retries rate-limited requests, but a large account may still need more time.

Official documentation

Guide checked against the official documentation on .

Credential fields

FieldRequirementWhere to find it
API keyapiKeyRequiredThe API key shown under Config → Account Information in the primary user's account.
Secret keysecretKeyRequiredThe secret key paired with the API key under Config → Account Information; do not mix keys from different generations.
Use the sandbox APIsandboxOptionalOff for cp.dnsmadeeasy.com credentials. Turn on only for keys from the separate sandbox.dnsmadeeasy.com account.

Capabilities

Create zones
Yes
List zones
Yes
DNSSEC
Not available through this connection
Minimum TTL
60 seconds
Apex CNAME
No
Read only
No

Record types

  • A
  • AAAA
  • CNAME
  • MX
  • TXT
  • NS
  • SRV
  • CAA
  • PTR
  • SPF
  • ALIAS

DNS Made Easy-only types

  • URL
  • URL301
  • FRAME

These records need translation or review when you move to another provider.

Caveats

  • The API allows 150 requests per 5 minutes per key, so large zones can take several minutes to apply.
  • Only records in the DEFAULT Global Traffic Director location are read and changed.
  • System NS records are managed by DNS Made Easy; HTTP redirects (HTTPRED) map to URL, URL301 and FRAME records.

Troubleshooting

The API key section is missing
Sign in as the primary account user and confirm the membership is Business / DNS-25 or above. Sub-users cannot view the account API keys.
DNS Made Easy rejected the key pair
Copy the API key and its matching secret again. Also verify that Use the sandbox API matches the account where the keys were generated.
Signed requests are rejected intermittently
DNS Made Easy includes the current HTTP date in each signature. Correct the clock on the system making the request, then check access again.
Rate limit exceeded
Wait for the rolling API window to recover. DNSMigrator retries rate-limited requests, but a large account may still need more time.

Related links

DNS Made Easy migration overviewMarketing overview and provider differences.Connect a providerHow connection checks and permissions work.Cloudflare → DNS Made EasyRoute 53 → DNS Made EasyAzure DNS → DNS Made EasyCloud DNS → DNS Made Easy