Skip to content
betaDNS betaDNS hostingSetup guide checked 2026-09-27

LuaDNS

LuaDNS API key setup: enable LuaDNS API access, create a global or single-zone key, and pair it with the email address used for the account.

On this page

LuaDNS API key permissions

Credential type
Account email and API key
Preview access
Global or single-zone API key (read and write)
Apply access
Global or single-zone API key (read and write)
API endpoint
DNSMigrator uses the provider's fixed API endpoint.

Additional access

LuaDNS keys do not have a read-only mode. Restrict the key to one zone when the connection does not need account-wide access.

DNSControl id

creds.json TYPE
{
  "TYPE": "LUADNS"
}

Create credentials

Enable LuaDNS API access, create a global or single-zone key, and pair it with the email address used for the account.

Access you'll grant

Preview

Global or single-zone API key (read and write)

Apply

Global or single-zone API key (read and write)

LuaDNS keys do not have a read-only mode. Restrict the key to one zone when the connection does not need account-wide access.

Before you start

  • A LuaDNS account with the target zones.
  • API access is available on every current package, including Free, but it is disabled by default.

Setup steps

0 of 6 done

  1. Enable API access

    Open Settings in LuaDNS and enable API access. The API rejects credentials while this account setting is off.

  2. Open API Keys

    Open the API Keys page and create a new key for DNSMigrator.

  3. Restrict the key to one zone

    Choose a single-zone key for one migration, or a global key only when this connection must reach all account zones. Either choice can read and write its allowed zones.

  4. Copy the API key

    Copy the generated value and store it securely. Use the key as the password for LuaDNS API authentication.

  5. Enter the account email

    Enter the exact email address associated with the API key in Account email, and paste the key into API key. LuaDNS uses the email as the HTTP Basic Authentication username.

  6. Check access

    Check access. If you created a single-zone key, confirm the selected zone is the one you intend to migrate.

Troubleshooting

LuaDNS rejected the email or API key

Confirm API access is enabled in Settings, then re-enter the exact account email and its matching key.

The expected zone is missing

The key may be restricted to another zone. Create a key for the correct zone or, only when needed, a global key.

A Free-plan migration is rejected

The Free package includes API access but has a 30-record account limit and a 300-second minimum TTL. Reduce the record count or upgrade before applying.

Official documentation

Guide checked against the official documentation on .

Credential fields

FieldRequirementWhere to find it
Account emailemailRequiredThe email address for the LuaDNS account that created the API key; it is the API username.
API keyapiKeyRequiredThe value generated on the LuaDNS API Keys page; it is the API password.

Capabilities

Create zones
Yes
List zones
Yes
DNSSEC
Managed in the provider console
Minimum TTL
60 seconds
Apex CNAME
No
Read only
No

Record types

  • A
  • AAAA
  • CNAME
  • MX
  • TXT
  • NS
  • SRV
  • CAA
  • ALIAS
  • PTR
  • HTTPS
  • OPENPGPKEY
  • SSHFP
  • TLSA

Caveats

  • FORWARD (email forwarding), REDIRECT (web redirect) and FAILOVER records are LuaDNS features that are not read or written; recreate them in the dashboard.
  • The free plan enforces a 300-second minimum TTL and a 30-record limit; paid plans allow 60 seconds.
  • If the account uses LuaDNS Git integration, the next git build replaces API-made changes unless the zone file covers them with an ignore() rule.

Troubleshooting

LuaDNS rejected the email or API key
Confirm API access is enabled in Settings, then re-enter the exact account email and its matching key.
The expected zone is missing
The key may be restricted to another zone. Create a key for the correct zone or, only when needed, a global key.
A Free-plan migration is rejected
The Free package includes API access but has a 30-record account limit and a 300-second minimum TTL. Reduce the record count or upgrade before applying.