How to Keep an AI Agent Safe on Your Porkbun Account
Letting an AI assistant manage domains is powerful; a few settings keep it safe.
- Set a monthly API spend limit in API Access, so purchases cannot exceed what you intend.
- Limit the connection to certain domains with Allowed domains on its key.
- Use the no-purchases endpoint (
https://mcp.porkbun.com/mcp/no-purchases) if the assistant should never spend money. - Let it rehearse. Purchases and risky changes support a dry run, and assistants ask before anything that changes or deletes something.
- Check before big changes. Ask it to preflight a domain before changing nameservers or moving to Cloudflare.
- Undo DNS mistakes. Porkbun keeps restore points of your DNS zone; ask the assistant to compare and restore an earlier version.
- Disconnect any time by disabling the connection's key in API Access.