Command Reference

Every command, subcommand, and flag.

Global flags

Flag	Description
--version	Show CLI version
--help	Show help for any command

Auth

Command	Description
onedns login [--api-key KEY]	Save API key and authenticate
onedns logout	Remove saved credentials
onedns whoami	Show current authentication status

API Keys

Command	Description
onedns api-keys list	List API keys on your account
onedns api-keys create --name NAME [--expires DAYS]	Create a new API key
onedns api-keys revoke KEY_ID	Revoke an API key

Zones

Command	Description
onedns zones list	List all DNS zones
onedns zones get ZONE	Get zone details (JSON)
onedns zones create DOMAIN [--provider PROVIDER]	Create a new zone
onedns zones delete ZONE	Delete a zone (prompts for confirmation)
onedns zones verify ZONE	Check NS delegation
onedns zones sync ZONE	Force sync to provider
onedns zones export ZONE [-o FILE]	Export zone as BIND zone file
onedns zones import ZONE -f FILE [--format bind\|dnsscienced]	Import records from zone file
onedns zones history ZONE	View change history for a zone

Records

Command	Description
onedns records list ZONE [--type TYPE]	List DNS records, optionally filtered by type
onedns records create ZONE --type TYPE --name NAME --content VALUE [--ttl N] [--priority N] [--proxied]	Create a record
onedns records update ZONE RECORD_ID [--type] [--name] [--content] [--ttl] [--proxied]	Update a record
onedns records delete ZONE RECORD_ID	Delete a record
onedns records set ZONE --type TYPE --name NAME --content VALUE [--ttl N]	Create or update (upsert) a record

DNSSEC

Command	Description
onedns dnssec enable ZONE	Enable DNSSEC for a zone
onedns dnssec status ZONE	Show DNSSEC status
onedns dnssec get-ds ZONE	Get DS records for registrar setup

Zone Transfers

Command	Description
onedns transfers list ZONE	List transfer configurations
onedns transfers pull ZONE --primary IP:PORT [--tsig-key NAME]	Configure AXFR pull from primary
onedns transfers push ZONE --secondary IP:PORT [--tsig-key NAME]	Configure NOTIFY to secondary

Analytics

Command	Description
onedns analytics ZONE [--days N]	Query analytics for a zone (default: 7 days)

Threat Intel

Command	Description
onedns intel reputation ZONE --domain DOMAIN	Domain reputation and risk score
onedns intel passive-dns ZONE --domain DOMAIN	Historical DNS observations
onedns intel malware ZONE	Malware and C2 association check
onedns intel subdomains ZONE --domain DOMAIN	Known subdomain threat intel
onedns intel summary ZONE [--days N]	Aggregated zone threat summary

DNS Firewall

Command	Description
onedns firewall rules list ZONE	List per-zone DNS firewall rules
onedns firewall rules add ZONE --domain DOMAIN --action ACTION	Add a firewall rule
onedns firewall rules delete ZONE RULE_ID	Remove a firewall rule
onedns firewall stats ZONE [--days N]	WAF traffic and block statistics

ThreatScript

Command	Description
onedns script push FILE [--id ID] [--name NAME]	Upload and load a .star ThreatScript
onedns script delete SCRIPT_ID	Remove a loaded ThreatScript
onedns script stats	Show firewall and script execution stats

DNS Server

Command	Description
onedns server status	Server health and status
onedns server stats	Query statistics
onedns server metrics	Prometheus metrics (text format)
onedns server reload	Reload config without restart
onedns server license	License information

Cache

Command	Description
onedns cache stats	Hit rate and statistics
onedns cache flush [--domain DOMAIN] [--type TYPE] [--exact]	Flush cache entries
onedns cache lookup DOMAIN [--type TYPE]	Look up a cached entry
onedns cache prefetch DOMAIN [--type TYPE]	Warm the cache for a domain

Domains

Command	Description
onedns domains list	List registered domains
onedns domains check DOMAIN	Check availability and price
onedns domains nameservers DOMAIN --ns NS1 --ns NS2	Update nameservers
onedns domains auth-code DOMAIN	Get EPP auth code for transfer out

Rate Limiting

Command	Description
onedns ratelimit get	Show rate limit settings
onedns ratelimit set [--qps N] [--burst N] [--enabled true\|false]	Configure rate limits

Supported record types

A AAAA CNAME MX TXT NS PTR SRV CAA TLSA SSHFP NAPTR HTTPS SVCB SMIMEA CERT HINFO IPSECKEY OPENPGPKEY URI EUI48 EUI64 CDS CDNSKEY ZONEMD CSYNC RP AFSDB KX DHCID APL LOC DS DNSKEY

Firewall rule actions

Action	Behavior
allow	Permit the query (skip further rule evaluation)
block	Return REFUSED
nxdomain	Return NXDOMAIN (domain does not exist)
drop	Silently drop — no response sent to client
rewrite	Rewrite query to a different domain
redirect	Forward to a different upstream resolver