| Method | Path | Summary | Auth |
|---|---|---|---|
| GET | /v1/dns/platform-config | Read the installation-wide DNS configuration (节点管理 > DNS配置, platform administrator) | Session |
| PUT | /v1/dns/platform-config | Save the installation-wide DNS configuration and synchronise every tenant copy | Session |
| POST | /v1/dns/platform-config/{kind} | Start 记录修复 (repair) or 清除CDN无关解析 (cleanup) as background jobs | Session |
| GET | /v1/dns/platform-zones | List the CNAME domains (CNAME域名) | Session |
| POST | /v1/dns/platform-zones | Add a CNAME domain (copied into every tenant; the first is the default allocation zone) | Session |
| PATCH | /v1/dns/platform-zones/{id} | Edit a CNAME domain; renaming one with allocated CNAMEs is refused (dns_zone_in_use) | Session |
| DELETE | /v1/dns/platform-zones/{id} | Delete a CNAME domain and its tenant copies; refused while sites use it (dns_zone_in_use) | Session |
| GET | /v1/dns/providers | List DNS provider configurations | Session |
| POST | /v1/dns/providers | Store an encrypted DNS provider configuration | Session |
| PATCH | /v1/dns/providers/{id} | Update provider metadata or replace encrypted credentials | Session |
| DELETE | /v1/dns/providers/{id} | Delete an unreferenced DNS provider configuration | Session |
| POST | /v1/dns/providers/{id}/verify | Verify a DNS provider credential against its upstream API | Session |
| GET | /v1/dns/records | List structured records in a zone | Session |
| POST | /v1/dns/records | Create a validated draft DNS record | Session |
| PATCH | /v1/dns/records/{id} | Update a validated draft DNS record | Session |
| DELETE | /v1/dns/records/{id} | Delete a draft DNS record | Session |
| GET | /v1/dns/settings | Read the DNS settings for the active tenant scope | Session |
| PATCH | /v1/dns/settings | Update the compatibility DNS TTL with compare-and-swap semantics | Session |
| GET | /v1/dns/settings/operations/{operation_id} | Read a DNS DNS operation status | Session |
| POST | /v1/dns/settings/{kind} | Enqueue record repair or CDN-unrelated record cleanup | Session |
| GET | /v1/dns/zones | List DNS zones | Session |
| POST | /v1/dns/zones | Create a draft DNS zone | Session |
| DELETE | /v1/dns/zones/{id} | Delete an unreferenced draft DNS zone | Session |
Contract file：api/openapi/v1/control.yaml api/openapi/v1/dns-acme.yaml