How to Keep an AI Agent Safe on Your Porkbun Account

Letting an AI assistant manage domains is powerful; a few settings keep it safe.

  • Set a monthly limit in API Access. It caps what assistants and API keys buy and, separately, how much credit they add (by card, auto top-up, Link or USDC). If you have not set one, it is $100 a month for each.
  • Limit the connection to certain domains with Allowed domains on its key.
  • Limit what it can do. When you connect it, or later in the key's settings under Permissions, choose Manage, but no purchases so it can change settings but never buy anything or add credit, or Read-only. The no-purchases endpoint (https://mcp.porkbun.com/mcp/no-purchases) only offers those two.
  • Let it rehearse. Purchases and risky changes support a dry run, and assistants ask before anything that changes or deletes something.
  • Check before big changes. Ask it to preflight a domain before changing nameservers or moving to Cloudflare.
  • Undo DNS mistakes. Porkbun keeps restore points of your DNS zone; ask the assistant to compare and restore an earlier version.
  • Disconnect any time by disabling the connection's key in API Access.
Did this answer your question? Thanks for the feedback There was a problem submitting your feedback. Please try again later.