Providers / Porkbun
Domains and DNS
Porkbun domains, keys and logins
What every Porkbun credential a founder holds does, whether it expires, and what tends to break. Each fact links to Porkbun's own docs.
At a glance
| Credential | Expiry | Permissions |
|---|---|---|
| Porkbun dashboard login | Not documented | – |
| API key and secret API key (v3) | Not documented | Can be scoped |
Each credential
Porkbun dashboard login
- Not documented
Dashboard login. Manages API keys at porkbun.com/account/api. Password/2FA policy not confirmed in sources.
API key and secret API key (v3)
- Not documented
- Can be scoped
Key pair (apikey + secretapikey), sent in the JSON body or as X-API-Key / X-Secret-API-Key headers. Secret is shown only once at creation. Keys can be restricted to a source IP allowlist (IPv4/IPv6, CIDR) and to scopes (permission groups such as dns, domains, purchase). Keys can be revoked via /apikey/revoke or the dashboard; no key lifetime is stated. /ping verifies credentials.
What usually goes wrong
- Secret API key is returned only once; a lost secret requires creating a new key pair
- IP-restricted key fails from any server outside the allowlist
- Scope-restricted key fails on endpoints outside its scopes
- Renewal fails with INSUFFICIENT_FUNDS when prepaid credit is empty
Renewals and billing
- Domain registrations. /domain/listAll returns autoRenew (integer flag) and supports expiresAfter/expiresBefore filters (v3.65). The domain.expiring webhook fires 60/30/5 days before expiry.
API purchases are paid from prepaid account credit (v3.36 changelog); /domain/renew also accepts payWith card. Renewals via API are blocked until 30 days after the last registration or renewal (RENEWAL_TOO_SOON).
Where to find it in Porkbun
What Porkbun's docs don't say
We couldn't confirm these from official docs, so don't rely on them either way:
- Whether API keys have any expiry or maximum lifetime
- Scope-to-endpoint mapping for hosting, email, purchase and account (dns and read confirmed)
- Renewal prices and default auto-renew setting for new domains
- Whether the llms-full IP restriction feature applies to every key or only some account types
Rotating or replacing a Porkbun key
The steps are the same for most providers: make the new key, deploy it everywhere the old one is used, check it works, then revoke the old one. Our guides walk through it:
Sources
- porkbun.com/llms-full.txt
- porkbun.com/llms/api-key-management
- kb.porkbun.com/article/45-how-to-renew-domain-name
- porkbun.com/llms/dns
- porkbun.com/api/json/v3/documentation
Related providers
Keep track of every Porkbun key
StackHangar stores your Porkbun keys in an encrypted vault, grouped by the product they belong to, warns you before they expire, and walks you through rotating them. We can't read your secrets.