Skip to content
betaDNS betaRegistrarSetup guide checked 2026-09-27

Joker.com

Joker API key setup: create a dedicated DMAPI API key in My Profile; use username and password only when an API key is unavailable.

On this page

Joker API key permissions

Credential type
DMAPI API key or account username and password
Preview access
A DMAPI API key restricted to read only.
Apply access
A DMAPI API key that allows modifications only (non-cost-producing changes).
API endpoint
DNSMigrator uses the provider's fixed API endpoint.

Additional access

Joker documents read-only and modifications-only API keys. DNSMigrator needs dns-zone-list and dns-zone-get for every run; apply additionally calls dns-zone-put, which overwrites the complete zone after merging changes. Full cost-producing account access is not needed.

DNSControl id

creds.json TYPE
{
  "TYPE": "JOKER"
}

Create credentials

Create a dedicated DMAPI API key in My Profile; use username and password only when an API key is unavailable.

Access you'll grant

Preview

A DMAPI API key restricted to read only.

Apply

A DMAPI API key that allows modifications only (non-cost-producing changes).

Joker documents read-only and modifications-only API keys. DNSMigrator needs dns-zone-list and dns-zone-get for every run; apply additionally calls dns-zone-put, which overwrites the complete zone after merging changes. Full cost-producing account access is not needed.

Before you start

  • A Joker.com reseller account with DMAPI access.
  • The domains must be managed and served by Joker.com nameservers to appear in dns-zone-list.

Setup steps

0 of 5 done

  1. Open My Profile

    Sign in to Joker.com, open My Profile, and find Manage Joker.com API access keys.

  2. Create a dedicated API key

    Create a separate key for DNSMigrator instead of sharing your Joker.com password. For preview only, restrict it to read only. To apply DNS changes, choose the option that allows modifications only and cannot produce costs.

    Previewread only
    Applymodifications only
  3. Copy the API key

    Copy the generated key and paste it into DMAPI API key. Leave Username and Password empty when using a key.

  4. Use account credentials only as a fallback

    If you cannot create an API key, leave DMAPI API key empty and enter the reseller account email in Username and its password in Password. Do not fill both authentication methods.

  5. Check the visible zones

    Check access and confirm the expected domains appear. Joker's dns-zone-list returns only zones using Joker.com nameservers.

Troubleshooting

Joker login fails

Use one authentication method: an API key by itself, or both username and password. Confirm the account has reseller DMAPI access.

The zone list is empty or a domain is missing

dns-zone-list only returns domains managed on Joker.com nameservers. Confirm the domain's nameserver service in Joker before reconnecting.

Preview works but apply is denied

Replace the read-only key with one that allows modifications-only access. DNSMigrator must read the current complete zone and then call dns-zone-put.

A low TTL changes during apply

DNSMigrator currently raises non-NAPTR TTLs below 300 seconds even though Joker's newer FAQ says 60 seconds is accepted. Review the preview before applying.

Official documentation

Guide checked against the official documentation on .

Credential fields

FieldRequirementWhere to find it
DMAPI API keyapiKeyOptionalRecommended: the key from My Profile → Manage Joker.com API access keys. Use read only for preview or modifications only for apply.
UsernameusernameOptionalOptional fallback: the Joker.com reseller username, normally the account email. Leave empty when using an API key.
PasswordpasswordOptionalOptional fallback: the password for the reseller username. Leave empty when using an API key.

Capabilities

Create zones
Yes
List zones
Yes
DNSSEC
Not available through this connection
Minimum TTL
300 seconds
Apex CNAME
No
Read only
No

Record types

  • A
  • AAAA
  • CNAME
  • MX
  • TXT
  • NS
  • SRV
  • CAA
  • NAPTR

Joker-only types

  • URL

These records need translation or review when you move to another provider.

Caveats

  • Joker replaces the whole zone on every write, so we read, merge and write it; URL, frame, mail-forward and DynDNS entries we don't change are kept as they are.
  • TTLs must be at least 300 seconds (NAPTR excepted), and apex NS records are managed by Joker.
  • TXT values can't contain backslashes or unpaired double quotes.

Troubleshooting

Joker login fails
Use one authentication method: an API key by itself, or both username and password. Confirm the account has reseller DMAPI access.
The zone list is empty or a domain is missing
dns-zone-list only returns domains managed on Joker.com nameservers. Confirm the domain's nameserver service in Joker before reconnecting.
Preview works but apply is denied
Replace the read-only key with one that allows modifications-only access. DNSMigrator must read the current complete zone and then call dns-zone-put.
A low TTL changes during apply
DNSMigrator currently raises non-NAPTR TTLs below 300 seconds even though Joker's newer FAQ says 60 seconds is accepted. Review the preview before applying.