Porkbun + your AI sidekick. Bring your indie portfolio.
Authwright is the MCP server for Porkbun — DNS, SSL, renewals, bulk operations, defensive registrations — driven from Claude, Cursor, or ChatGPT. Built for the multi-TLD side-project owner who's been waiting for tools that fit the way they actually work.
Early access · Porkbun ingest in development
A real Porkbun implementation. Direct to the API. Free SSL handled, free WHOIS privacy respected.
list ghost domains across my portfolio34 Porkbun domains scanned7 flagged: no DNS, no traffic, $312/yrlet them lapse · keep .dev and .appauto-renew off · 5 domains
- GoDaddy
- NamecheapEarly
- Cloudflare
- PorkbunEarly
- Route 53Early
THE SIDE-PROJECT TAX
You bought a great domain Tuesday night. Now what?
You found a .dev you actually like, you bought it, you got the obligatory dopamine hit, and now it's been twelve weeks and you haven't pointed it at anything. Multiply by twenty. You also forgot which side project you registered acme-tools.xyz for. And you have an old .io that's renewing at $90 next month and you can't remember if it's still doing anything useful.
The Porkbun dashboard is fine. It's just not the place you want to think about this. You want to ask your editor "what did I do with the .dev?" and have a real answer.
“A domain you forgot about is a domain you're paying for. Indefinitely.”
42 TOOLS, ONE MCP SESSION
Your Porkbun portfolio, callable from your editor.
42 MCP tools wired to the Porkbun API, callable from Claude or Cursor.
inventory()Every domain across TLDs with expiry, renewal cost, and a 0-100 health score.ghost_domains()Identify domains: registered, parked, no DNS, no traffic, still being paid for. Flag them for review.bulk_renew()By expiry window or by tag, with exact Porkbun renewal pricing surfaced upfront.dns_diff()Edit DNS records with diff preview and rollback snapshot.ssl_track()Porkbun's free Let's Encrypt SSL is auto-issued — but the health check tells you when something's off.defensive()Defensive registrations across the TLDs Porkbun excels at (.dev, .app, .io, .xyz, the long tail).email_auth()And, if you want, set up email auth in one call.
You stay in your editor. The Porkbun dashboard becomes the place you visit twice a year.
MCP, not SaaS
If your team lives in Claude, Cursor, or ChatGPT, this is the tool your stack was missing.
Every other DMARC vendor shipped a web dashboard in 2019 and never looked up. Authwright is built as a Model Context Protocol server — which means it's callable directly from the AI environments your operators already use.
A tech in Cursor can resolve a deliverability ticket without opening a browser tab. A founder in Claude can onboard a new client domain in a single prompt.
This is not a wrapper around someone else's API. It's a first-class MCP server designed for the way technical teams actually work in 2026.
> Set up DMARC on acme.com with a reject policy. Lookup calling email_auth_wizard... [ok] diagnose - score 32/100 [ok] propose - 4 changes (SPF, DKIM, DMARC, MTA-STS) [ok] apply - GoDaddy adapter, snapshot saved [ok] host - mta-sts.acme.com live [ok] propagation - 8/8 resolvers [ok] re-diagnose - score 94/100 Email EasyPass complete in 47s.
What makes it different
Four things you can't ask the dashboard.
- 01PAYING_FOR
"What am I paying for, and why?"
portfolio_analysis returns every domain with renewal cost, last DNS edit, current traffic state (parked vs. active), and an explicit ghost-domain flag for ones that look forgotten.
- 02MULTI_TLD
Multi-TLD pricing surfaced upfront.
Renewal costs vary wildly by TLD. The bulk renewal tool tells you total cost before it executes. No surprises on the credit card.
- 03SSL_VIS
Free SSL state visibility.
Porkbun's free Let's Encrypt SSL is one of the best perks in the business — but it can go stale or fail to renew. The health check surfaces every cert state, every domain, in one read.
- 04REGISTRAR
Every registrar, one tool surface.
The day you move a domain to Cloudflare or back, the same call signature works. Multi-TLD, multi-registrar, one MCP session.
Pricing
Priced for the way indie owners actually work.
Per-account pricing, not per-seat. Same tools, same pricing, every registrar.
Free public audit
Not ready to sign up? Audit a domain in 30 seconds.
Drop any domain into our free checker. We'll show you the current DMARC posture, SPF lookup count, DKIM selector status, MTA-STS presence, and a grade against the current Gmail and Yahoo requirements. No login. No email gate. No upsell pop-up.
FAQ
Questions Porkbun owners actually ask.
Technically accurate against the broker's capability matrix. If something is unsupported: today, we say so here.
- A Porkbun API key + secret from porkbun.com/account/api. Authwright handles the IP-allowlist requirement transparently during onboarding.
- Porkbun doesn't expose API-level provisioning for the free SSL — it's automatic per domain. Authwright reads state, surfaces it in the health check, and returns unsupported: for issuance/revocation. If you need API-managed certs, use the Cloudflare path.
- Yes. Search, check availability, get suggestions, and purchase — all wired. The bulk path lets you queue up a defensive set in a single call.
- DNS records (including NS) are full read/write. Hosting product config is roadmap.
- Live from the Porkbun pricing API at the time of call. bulk_renew_domains returns total cost before it executes — you confirm, then it runs.
- Same tool. One MCP session, same call signatures across all five supported registrars.
- Porkbun privacy is on by default for most TLDs. Authwright reads its state and flags any domain where privacy is off (e.g., TLDs that don't support it). No action needed for the default case.
Q1What API credentials do I need?
Q2Porkbun's SSL is auto-provisioned via Let's Encrypt. Can Authwright issue or revoke certs?
Q3Can Authwright purchase new domains on Porkbun?
Q4What about Porkbun's hosting / glue records / nameserver features?
Q5Multi-TLD pricing varies a lot. Where does the renewal cost come from?
Q6I have a few domains on Porkbun and a few on Cloudflare. Same tool?
Q7WHOIS privacy — anything to set up?
Early access
Get early access to Authwright for Porkbun.
Porkbun portal ingest is in development. Join the waitlist and we'll reach out the day it ships.