Connected applications
Preview
Connected applications are currently available to selected accounts only.
An AI assistant that speaks the Model Context Protocol (MCP), such as Claude or ChatGPT, can work on your ITSH account for you: change DNS records, set up mailboxes and forwards, and keep your domain contacts current. You connect it once, choose what it may do, and see every change it made under Account > Connected applications in the portal.
It does what it is told, including by what it reads
An assistant takes instructions from the text in front of it, and some of that text comes from your account: a TXT record, a forward target, a vacation reply, a contact's address. The tools that return such text tell the assistant to treat it as data and never as an instruction, but that is a request to the model, not a guarantee. Grant only the permissions the task needs and pick a short expiry.
What an application can do
| Area | What the tools do | Details |
|---|---|---|
| DNS | List, add, change and delete records of domains on ITSH nameservers | DNS tools |
| Mailboxes, forwards, vacation replies, the catch-all and the mail DNS records | Email tools | |
| Domain contacts | List, add and change contacts, verify their email address or phone number | Contact tools |
| Account and domains | Read your account details, your domains and your subscriptions | Permissions |
| Domain prices | Look up TLD prices and check whether a domain is free | Without an account |
| The connection | Show its own permissions and expiry, and disconnect itself | Managing connections |
An application only sees the tools its permissions cover. The domain, DNS and email tools also stay hidden until your account holds a domain.
What it cannot do
It never sees a password. No tool returns or accepts a mailbox password or any other credential. Where you need to set one, the application hands you a link to the right page in the portal, where you set it yourself while signed in. A mailbox an application creates cannot be used until you have done that.
It does not read your mail. No tool reads the messages in a mailbox. A forward, though, sends every future message wherever it points, which is why setting up a forward outside your domains sends you an email (see Email tools).
It cannot change what only the portal changes. Mailing lists, shared mailboxes, the name and address of a domain's owner or admin contact, and your default contacts are refused with a link to the page where you change them yourself. Nameservers, transfers, web hosting, Kubernetes, VServers and object storage have no tools at all.
It cannot do more than you can. A permission narrows what your own account may do. It never widens it.
Without an account
https://mcp.itsh.dev/mcp/public needs no account and no sign-in, and offers three tools. The same three are part of every connection.
| Tool | What it does |
|---|---|
domain_tld_catalogue | Lists the TLDs ITSH sells, with registration, renewal and transfer prices |
domain_tld_price | Prices up to 10 named TLDs per call |
domain_search | Checks whether domains are free and what they cost, live at the registry. It reserves and buys nothing, and takes 10 calls a minute per caller |
Without an account, at most 4 tool calls run at once per caller; a further one receives calls_in_flight.
What's next
- Connecting an application for the URL and the consent screen
- Permissions for what each one allows
- Managing connections for the activity log and disconnecting