Connect, list and inspect your registrar accounts (Spaceship, Dynadot, Webnic, NiceNIC, GName, …).
Secrets never come back. Responses NEVER include password, token, tokenTtl or proxyPassword. The values you POST are stored encrypted server-side and used only when bridge-sdk talks to the registrar on your behalf. To rotate a credential, delete and re-create the provider — there is no "show me my secret" endpoint.
Per-registrar field cheat sheet (call GET /providers/auth-config for the authoritative schema):
| Registrar | Required fields | Notes |
|---|---|---|
| Spaceship | token, password | token = api-key, password = api-secret |
| Dynadot | token | Single API key |
| Webnic | login, password | API username + password |
| NiceNIC | login, token, level | level = reseller tier (1, 2, or 3) — required |
| GName | login, token | login = appid, token = appkey |
| DomainNameAPI | login, token | login = reseller id |
| NicNames | token | Single API key |
One active per type at a time. If you already have an active provider of the same type, the new one is inserted with isActive: false. Flip the existing one off in the panel if you want the new one to take over.
Statuses are cached. GET /providers/statuses returns whatever the worker last wrote — typical lag is a few minutes. Don't poll this endpoint to trigger a live balance check; the worker controls the refresh cadence to stay inside each registrar's rate limit.
Disconnect doesn't delete domains. DELETE /providers/{id} drops the credentials and invalidates the status snapshot. Domains owned through this provider remain in the local DB — Most never deletes them at the registrar — but renew / nameserver / auth-info calls for those domains will fail until you reconnect the same registrar.
List provider accounts
Registrar accounts connected to your Most account.
Credentials are never returned
password, token, tokenTtl and proxyPassword are stripped from every response. proxyLogin is kept so you can tell which proxy account an provider uses, but never the secret.
Proxies
Each account can route its registrar traffic through its own proxy — several registrars whitelist by IP, so a shared egress address is not workable at scale. The relevant fields are:
| Field | Meaning |
|---|---|
useProxy | Whether traffic for this account is proxied. |
proxyType | HTTP, HTTPS or SOCKS5. |
proxy | host:port. |
proxyLogin | Proxy username (the password is never returned). |
metadata.proxyline | Present when the proxy is leased automatically: country, dateEnd (lease expiry), autoRenew, proxyId, assignedAt. |
Other fields
| Field | Meaning |
|---|---|
rateLimit | Requests per second Most will send to this account. |
isActive | false marks a search-only account: it still answers availability lookups but is skipped when placing orders. |
allowNegativeBalance / negativeBalanceLimit | Whether ordering may continue past a zero balance, and how far. |
level | Ordering preference; lower is tried first. |
_count.domains | Domains currently held on the account. |
List provider accounts › Responses
Connected registrar accounts
Connect a provider account
Connect a new registrar account. The required body fields depend on the registrar type — call GET /providers/auth-config first to discover the per-type field schema.
Quick reference:
DYNADOT—tokenWEBNIC—login+passwordNICENIC—login+token(+level: 1/2/3 reseller tier)SPACESHIP—token(api-key) +password(api-secret)GNAME—login(appid) +token(appkey)DOMAINNAMEAPI—login+tokenNICNAMES—token
If you already have an active provider of the same type, the new one is inserted in disabled state (isActive: false) — flip the existing one off if you want the new one to take over. The response NEVER echoes back the secrets you sent. A background health-check is queued so the status cache populates without waiting for the next periodic sweep.
Connect a provider account › Request Body
nameHuman-readable label for this provider account (shown in your dashboard).
typeRegistrar type.
authTypeAuth scheme used by this registrar. Mirrors what GET /providers/auth-config returns for the type — pick the value listed there.
loginUsername / app id / reseller id — depending on registrar. See GET /providers/auth-config.
passwordPassword / api-secret — depending on registrar. Stored encrypted; never echoed back.
tokenAPI token / api-key / appkey — depending on registrar. Stored encrypted; never echoed back.
tokenTtlOptional token TTL (seconds). Used by OAuth-style registrars that issue short-lived tokens; null otherwise.
useProxyRoute all API traffic for this provider through a proxy.
proxyTypeRequired when useProxy: true.
proxyProxy address in host:port form.
proxyLoginOptional proxy username.
proxyPasswordOptional proxy password. Never echoed back.
rateLimitMaximum concurrent in-flight requests this provider will accept before bridge-sdk throttles. Defaults to 1 (safest); raise for accounts with looser registrar limits.
allowNegativeBalanceWhether the worker may attempt orders even when the registrar reports a negative or zero balance. Most registrars reject such orders anyway — leave false unless you have a registrar that explicitly supports it.
negativeBalanceLimitFloor (signed) on the registrar balance below which orders are blocked. Only consulted when allowNegativeBalance is true.
levelReseller tier level. Required for NICENIC (1, 2, or 3); ignored for every other provider type.
Connect a provider account › Responses
Provider created
Provider auth field schema
Returns the per-provider-type field schema describing which credential fields each registrar expects on connect. Use this to drive a form-builder UI or to sanity-check a POST /providers payload before sending it.
Provider auth field schema › Responses
Field configs per provider type
Account health + balance
The worker's most recent health snapshot per account, keyed by provider id. Refreshed roughly every 5 minutes — treat balances as recent, not live.
| Field | Meaning |
|---|---|
accountAvailability | Could we authenticate and talk to the registrar? false here is what makes domain writes fail with 409. |
proxyAvailability | Whether the account's proxy responded (null when it uses none). |
orderAvailability | Whether the account can currently place orders (null = not determined). |
accountBalance | Balance as reported by the registrar, e.g. "347.5 USD". |
totalSpent / totalDeposits | Lifetime figures where the registrar exposes them. |
error | Registrar-side error from the last check, null when healthy. |
checkedAt | When that snapshot was taken. |
A null entry means no check has run yet for that account — unknown, not broken. Domains on an account whose accountAvailability is false are readable but every write is refused; see registrar.available on GET /domains.
Account health + balance › Responses
Health snapshots
Disconnect a provider
Removes the provider account from your dashboard. The on-disk credentials are dropped and the Redis status snapshot is invalidated.
Domains owned through this provider remain in the local DB (Most does not delete domains at the registrar). Until you reconnect the same registrar, renew / nameserver / auth-info calls for those domains will fail.
path Parameters
idProvider id.
Disconnect a provider › Responses
Deleted
Update an account (rotate token, change proxy)
Change credentials or connection settings in place. Send only the fields you want changed — anything omitted is left untouched.
Use this to rotate an API token or repoint a proxy without deleting the account: deleting and re-adding would orphan every domain that references it.
Credentials
| Field | Notes |
|---|---|
token | API key, for key-based registrars. |
login / password | For registrars that authenticate with a user. |
tokenTtl | Token lifetime in seconds, where the registrar issues short-lived tokens. |
Secrets are write-only — they can be set here but are never returned, so the response is the same public shape as GET /providers/{id}. Send null to clear one.
Proxy
| Field | Notes |
|---|---|
useProxy | Turn proxying on or off. Setting it to false clears the proxy fields. |
proxyType | HTTP, HTTPS or SOCKS5. |
proxy | host:port. |
proxyLogin / proxyPassword | Proxy credentials; the password is never echoed back. |
Changing the proxy changes the egress IP the registrar sees. Registrars that authorise by IP will reject calls until the new address is whitelisted on their side — the account's accountAvailability in /providers/statuses is how you confirm it recovered.
Behaviour
| Field | Notes |
|---|---|
isActive | false keeps the account for availability lookups but excludes it from order placement. |
rateLimit | Requests per second Most sends to this account. |
allowNegativeBalance / negativeBalanceLimit | Whether ordering continues past zero balance, and how far. |
level | Ordering preference, lower first (NiceNIC reseller tier 1–3). |
path Parameters
idProvider id.
Update an account (rotate token, change proxy) › Request Body
nametokenloginpasswordtokenTtluseProxyproxyTypeproxyproxyLoginproxyPasswordrateLimitallowNegativeBalancenegativeBalanceLimitisActivelevelUpdate an account (rotate token, change proxy) › Responses
Updated account (secrets omitted)