RELAYS · DNS · OBSERVABILITY · ON-CALL

DNS thattypesitself.

One record in five seconds. Tab, tab, tab, enter.

Start for free →See the DNS editor
▸
TYPE
A
tab ⇥
NAME
api
tab ⇥
CONTENT
142.93.18.201
tab ⇥
TTL
1h
api.example.com  →  142.93.18.201
Type to edit · tab to next · enter to save
✓ Written to zone · signing with DNSSEC
◆ Propagated to 30 self-hosted anycast nodes
tabnextentersave
30anycast regions
12msp50 latency
99.99%uptime SLA
∞records
◆ Typed once
Every segment is a typed input
TYPE validates against 13 RRSET types. NAME is a subdomain regex. CONTENT switches validators by type — IPv4 for A, IPv6 for AAAA, target for CNAME. TTL accepts 1h, 5m, 300 — anything sane.
◆ @platform
Preset smart-paste
Type @vercel as the record type. Relays injects the four records Vercel expects. Same for @fly, @netlify, @cloudflare-pages, @workers, @github-pages, @railway.
◆ DNSSEC on by default
Signed before it leaves the editor
Every zone is signed with ECDSA P-256 or RSA 2048. Key rollover is automatic. You never see a DS record unless you want to.
02 · Anycast · 30 Regions

Live in 4.2 seconds.

Press enter here and it’s resolving in Tokyo, Frankfurt, and São Paulo before you blink.

30 anycast regions · 6 continents · ~12ms p50 · self-hosted BGP
02 · Domain Registration · ONE Runtime

Your agent bought it.
Relays set it up.

Domain search, registration, and zone config — exposed to agents as MCP tools with real spending capabilities.

👤 cheetahONE, what are some ideas for a domain name for my data anomaly-detection startup?
◆ ONE · L1fe AIdriftsense · edgeskew · outliar · anomolab · kairoskew — want me to check them all through Relays?
👤 cheetahYes — I want driftsense.io if it’s under $80.
⚙ ONE → mcp · relays · domain_search
{ query: "driftsense.io" }
→ available · $49.00/yr · wholesale · 3.2s
◆ ONE · L1fe AIAvailable at $49/yr. Shall I register now?
👤 cheetahDo it. Put auto-renew on HOLD.
⚙ ONE → mcp · relays · domain_register
{ "driftsense.io", dnssec: true, auto_renew: "hold" }
→ registered · DS published · ns1.relays.one
⚙ ONE → mcp · relays · dns_create_record
{ @vercel → api.driftsense.io }
→ 4 records · 30/30 nodes @ 3.8s
◆ ONE · L1fe AIDone. driftsense.io is registered, DNSSEC-signed, pointed at Vercel, and propagated globally.
driftsense.io
receipt · drf_7kx9
StatusREGISTERED
First charge$49.00
Renews2027-04-11 (hold)
Nameserversns1 · ns2 · relays.one
DNSSECSIGNED
Records4 / @vercel preset
Propagation30/30 REGIONS · 3.8s
03 · DNS.Clinic MCP · Claude Code

Claude checks.
Relays answers.

dns.clinic is an MCP server bundled with every Relays account. Your agents get 74 real DNS tools — check propagation, audit SPF/DKIM/DMARC, validate MX, query NS delegation — without writing a single line of integration code.

claude — fish — 118×32
Claude Code v2.1.97Opus 4.6 (1M context) with high effort · Claude Max/Users/cheetahagency/relays
Opus 4.6 (1M context) │ cheetahagency● high · /effort
◆ MCP TOOL CATALOG · dns.clinic
dns_check_propagationmcp

8-resolver global propagation sweep

dns_resolve_allmcp

Every RRSET for a domain, in one call

dns_audit_spfmcp

Lookup depth, include chains, void lookups

dns_audit_dkimmcp

Selector discovery + key length check

dns_audit_dmarcmcp

Policy parse + alignment warnings

dns_tracemcp

Recursive trace from root → authoritative

dns_diff_zonemcp

Compare live answers to the zone file

dns_validate_dnssecmcp

Full chain-of-trust validation

dns_whoismcp

Registrar · expiry · transfer lock

dns_get_mx_topologymcp

Receiver infrastructure fingerprint

dns_caa_reportmcp

Which CAs are allowed to issue

dns_ns_delegation_checkmcp

Parent-child NS set match

Claude Code™ is a trademark of Anthropic, Inc. Relays integrates with Claude Code as a DNS tooling layer for autonomous agent workflows. No affiliation or endorsement implied.

04 · SSL · Automatic Certificates

Wildcards,
auto-renewed.

Every zone gets a managed wildcard cert. Relays runs ACME against Let’s Encrypt and ZeroSSL, solves DNS-01 in-house, and ships the cert to all thirty anycast edges before your deploy hook finishes.

ACME v2 client (RFC 8555)
DNS-01 · HTTP-01 · TLS-ALPN-01
ECDSA P-256 and RSA 2048
Dual-CA fallback (LE ⇄ ZeroSSL)
mTLS certs · CT log watch · RFC 5280 revocation
api.example.com
Wildcard · *.example.com · + 4 SANs
ACME order created00:00.02
DNS-01 challenge placed on _acme-challenge00:00.41
Let’s Encrypt validating TXT record00:01.12
Challenge accepted · CSR signed00:02.38
Certificate issued · RSA 2048 / ECDSA P-25600:02.94
Distributed to 30 anycast edge nodes00:03.51
Automatic renewal scheduled · 60 daysQUEUED
05 · Observability · 30 Regions

Sub-second detection.
Pages that match your brand.

Probes in all 30 anycast regions. Multi-region quorum to kill false positives. Incident rooms, on-call rotations, and status pages your customers will actually trust.

sea
sjc
lax
dfw
ord
atl
ewr
mia
hnl
mex
sao
scl
lhr
man
ams
cdg
fra
mad
sto
tlv
jnb
del
bom
blr
sgp
icn
itm
nrt
syd
mel
relays
anycast
INCIDENT · INC-4410
api.example.com failing in Singapore
• 4 of 30 regions failing
• paging primary · @mira
• status page updated · degraded
• runbook auto-attached · rb-42
06 · Status Pages

Pages your customers
actually trust.

Custom domain, branding, dark mode, SSO gating, component subscriptions, and a 90-day uptime sparkline that updates every thirty seconds.

status.example.com
Example, Inc.
All systems operational
◆ 90-day uptime · 99.996%
APIOPERATIONAL
DashboardOPERATIONAL
AuthenticationOPERATIONAL
WebhooksOPERATIONAL
Image CDNOPERATIONAL
07 · On-Call · Rotations

Rotations,
not vibes.

Primary, secondary, weekend, follow-the-sun, holiday overrides, and swap requests. Relays knows who's actually holding the pager.

ON-CALL · PRIMARY
Mira Sato
iad · +1 ••• ••• ••42 · slack: @mira
ACK SLA · 2 min
ROTATION · next 7 days
  • TUE 11Mira Satoprimary
  • WED 12Mira Satoprimary
  • THU 13Ivan K.primary
  • FRI 14Ivan K.secondary
  • SAT 15Aisha M.weekend
  • SUN 16Aisha M.weekend
  • MON 17Ravi P.primary
ESCALATION POLICY · ep_prod
Primary → 5 min no-ack → Secondary → 5 min no-ack → Engineering manager → 5 min no-ack → VP of Eng.
30
probe regions
Multi-region quorum · any / majority / count / all
9
target types
HTTP · TCP · UDP · DNS · ICMP · SSL · keyword · heartbeat · playwright
8
alert channels
Slack · PagerDuty · Teams · Telegram · email · SMS · webhook · voice
∞
incident history
p50 / p95 / p99 forever · PromQL · exportable
06 · REST · SDKs · WebSocket · MCP

Every action.
An API call.

142 REST endpoints. WebSocket stream for every mutation. MCP server for every agent. Idempotency keys on everything that writes. OpenAPI 3.1 published every release.

curltypescriptpythonrust
curl — relays
# Create an A record, signed and propagated in one call
curl -X POST https://api.relays.one/v1/zones/example.com/records \
-H "X-API-Key: $RELAYS_KEY" \
-H "Content-Type: application/json" \
-d '{
"type": "A",
"name": "api",
"content": "142.93.18.201",
"ttl": 3600,
"dnssec": true,
"wait_for_propagation": true
}'
 
# → 201 created · 30/30 regions · 3.8s
◇ NO CREDIT CARD · SELF-HOST OR CLOUD

Your DNS should move
at the speed of thought.

Five free domains. Ten thousand records. Every feature. Forever.

Start for free →★ Star on GitHub