Skip to content
DNSmigrator
betaDNS betaRegistrar betaRegistrarSetup guide checked 2026-09-27

hosting.de

hosting.de API key setup: create a hosting.de API key with rights to list and update DNS zones, domains, nameservers, and DNSSEC keys.

On this page

hosting.de API key permissions

Credential type
API key
Preview access
dns.zoneConfigsFind, dns.recordsFind, domain.domainsFind, and domain.domainInfo
Apply access
dns.recordsUpdate, optional dns.zoneCreate/dns.zoneUpdate, domain.domainUpdate, and domain.dnsSecKeyModify
API endpoint
DNSMigrator uses the provider's fixed API endpoint.

Additional access

hosting.de keys can have their own rights. Check access calls dns.zoneConfigsFind only, so it does not prove domain or write access.

DNSControl id

creds.json TYPE
{
  "TYPE": "HOSTINGDE"
}

Create credentials

Create a hosting.de API key with rights to list and update DNS zones, domains, nameservers, and DNSSEC keys.

Access you'll grant

Preview

dns.zoneConfigsFind, dns.recordsFind, domain.domainsFind, and domain.domainInfo

Apply

dns.recordsUpdate, optional dns.zoneCreate/dns.zoneUpdate, domain.domainUpdate, and domain.dnsSecKeyModify

hosting.de keys can have their own rights. Check access calls dns.zoneConfigsFind only, so it does not prove domain or write access.

Before you start

  • A hosting.de account that can generate API keys and assign their rights.
  • Authority over the target sub-account when its resources are managed through request delegation.

Setup steps

0 of 5 done

  1. Open the API-key page

    Sign in to the hosting.de web control panel and open the account's API keys area. The public API reference confirms keys are generated in the panel, but hosting.de does not publish the current menu path.

    Open hosting.de

  2. Create a dedicated key

    Generate a key for DNSMigrator and give it only the operations below. Add dns.zoneCreate only when DNSMigrator should create a missing destination zone.

    Previewdns.zoneConfigsFind, dns.recordsFind, domain.domainsFind, domain.domainInfo
    Applydns.recordsUpdate, dns.zoneUpdate, domain.domainUpdate, domain.dnsSecKeyModify
    Create zones (optional)dns.zoneCreate

  3. Copy the API key

    Copy the generated value and paste it into API key. hosting.de calls this request value authToken in its API documentation.

  4. Find the sub-account ID

    Skip this when the zones and domains belong to your own account. For delegated resources, copy the managed sub-account's account ID and paste it into Sub-account ID; hosting.de sends it as ownerAccountId and validates access as that sub-account.

    Read hosting.de request delegation

  5. Check the connection

    Submit API key and, when needed, Sub-account ID. A successful check should list a zone; it does not test record, domain, nameserver, or DNSSEC writes.

Troubleshooting

hosting.de reports an invalid API key (including error 10109)

Copy the full current key. If it was replaced or revoked in the control panel, create a new connection value.

No zones or domains appear

Remove an incorrect Sub-account ID, or enter the ID of the sub-account that actually owns the resources. Delegated requests use that account's access rights.

Preview works but apply is not allowed

The key has listing rights but not the matching update operation. Add recordsUpdate/domainUpdate and dnsSecKeyModify as needed.

The zone is temporarily blocked

hosting.de processes changes asynchronously. Wait for the existing job to finish, then retry.

Official documentation

Guide checked against the official documentation on .

Credential fields

FieldRequirementWhere to find it
API keyauthTokenRequiredThe API key generated in the hosting.de web control panel; the API calls it authToken.
Sub-account IDownerAccountIdOptionalOptional ID of the sub-account that owns the resources. Leave blank to act as your own account.

Capabilities

Create zones
Yes
List zones
Yes
DNSSEC
Managed through the API
Minimum TTL
60 seconds
Apex CNAME
No
Read only
No

Record types

  • A
  • AAAA
  • CNAME
  • MX
  • TXT
  • NS
  • SRV
  • CAA
  • PTR
  • ALIAS
  • TLSA
  • SSHFP
  • DS
  • CERT
  • OPENPGPKEY

Caveats

  • Record changes are processed asynchronously; while a zone is blocked by a running job we retry automatically.
  • TTLs must be between 60 seconds and one year.
  • Automatic DNSSEC publishes keys to the registry only for domains registered at hosting.de.

Troubleshooting

hosting.de reports an invalid API key (including error 10109)
Copy the full current key. If it was replaced or revoked in the control panel, create a new connection value.
No zones or domains appear
Remove an incorrect Sub-account ID, or enter the ID of the sub-account that actually owns the resources. Delegated requests use that account's access rights.
Preview works but apply is not allowed
The key has listing rights but not the matching update operation. Add recordsUpdate/domainUpdate and dnsSecKeyModify as needed.
The zone is temporarily blocked
hosting.de processes changes asynchronously. Wait for the existing job to finish, then retry.

Related links

hosting.de migration overviewMarketing overview and provider differences.Connect a providerHow connection checks and permissions work.Cloudflare → hosting.deRoute 53 → hosting.deAzure DNS → hosting.deCloud DNS → hosting.de