Cerberius AgentsHelp
Sign in
More in Access to your live system

GoDaddy

Connect GoDaddy so the agent can see a client's DNS records and propose the exact records to add or change, such as the SPF and DKIM records email needs.

In the appPlatformSettingsDomains and websitesGoDaddy

Connect GoDaddy so the agent can see the DNS records of a client's domains. When a problem comes down to a missing or wrong record, such as email that needs an SPF or DKIM record, the agent proposes the exact record. Nothing changes until a person approves it.

Connect it#

  1. 1

    At GoDaddy, open developer.godaddy.com/keys and create a Production key. Copy the key and its secret.

  2. 2

    Here, go to Settings › Domains and websites. Click Connect a domain host (or Connect another, if Cloudflare is already there), and choose GoDaddy.

  3. 3

    Under Key, click Add GoDaddy key… and paste the key, a colon, then the secret: KEY:SECRET.

  4. 4

    Under Domains, list the domains this platform may use, one per line. Click Save, then Check connection. It shows how many records each domain has.

  5. 5

    To let the agent propose changes, switch on DNS changes under Settings › Approved changes.

One key opens every domain in the account

A GoDaddy key reaches every domain in its GoDaddy account. Cerberius Agents only ever reads or changes the domains you list under Domains. Any other domain is refused, even if the agent asks for it.

What the agent sees#

At the start of each run, the agent gets the current records of the platform's domains. It never gets the key.

A record at GoDaddy only counts if the domain's name servers are GoDaddy's. The agent checks that first. If the domain's DNS is run somewhere else, it says where the change must be made instead of proposing it.

Changes#

A DNS change shows on the ticket as Change DNS at GoDaddy, with each record listed:

What it saysWhat happens
Add a recordThe record is added next to the ones already there. If the same record is already there, nothing changes.
Set a recordEvery record of that type and name becomes exactly the values listed.
Remove every recordEvery record of that type and name is removed.

Click Review and approve to see each record. To change one first, click Edit before approving. See Allowing changes.

When a person approves it:

  1. Cerberius Agents reads the records it touches. If one can't be read, nothing changes.
  2. It makes the records in order, and stops at the first one GoDaddy refuses. The ticket says what was there before and what was done.
  3. The agent checks the result and drafts the reply to the requester.

Only A, AAAA, CNAME, MX and TXT records can change. Name server (NS) and SOA records never change, because they decide who runs the domain.

Values only the provider can make

Some values come from another service, such as the DKIM key Google Workspace generates. The agent asks for it in the ticket, and proposes the record once a person has pasted it.

With your own runner#

When the agent runs on your own runner, the GoDaddy key is kept by you, like your other keys. The domains stay in these settings.

  • Save the domains first. Then choose how the key is kept: Scrambled for your runner (type it as KEY:SECRET: your browser scrambles it so only your runner can unscramble it) or In your store (named godaddy-key). See Two ways to keep your keys.
  • Your runner reads the domains' records for each run and gives them to the agent. Check connection is made by your runner too.
  • Approved changes are made by your runner, once its own rules allow them. List the domains there as well: your runner uses the key only for the domains in both lists (see Microsoft 365, Google and domains).
  • Your runner sends the key only to GoDaddy's API, whatever it is asked. It needs version 0.8.0 or later.

Related#