@apteva/integrations 0.3.62 → 0.15.3

package/src/apps/porkbun.json

@@ -1,85 +1,98 @@
 {
   "slug": "porkbun",
   "name": "Porkbun",
-  "description": "Porkbun domain registrar - register domains, manage DNS records, SSL certificates, and domain forwarding",
-  "logo": "https://www.google.com/s2/favicons?domain=porkbun.com&sz=128",
+  "description": "Porkbun domain registrar \u2014 register and manage domains, DNS records, nameservers, URL forwarding, glue records, and SSL certificates. Authenticates via X-API-Key + X-Secret-API-Key headers.",
+  "logo": "https://porkbun.com/static/img/favicon-32x32.png",
   "categories": [
     "dns",
     "domains",
     "registrar",
     "porkbun"
   ],
-  "base_url": "https://api.porkbun.com/api",
+  "base_url": "https://api.porkbun.com/api/json/v3",
   "auth": {
     "types": [
-      "bearer"
+      "api_key"
     ],
     "headers": {
-      "Authorization": "Bearer {{token}}"
+      "X-API-Key": "{{api_key}}",
+      "X-Secret-API-Key": "{{secret_api_key}}",
+      "Content-Type": "application/json"
     },
     "credential_fields": [
       {
-        "name": "apikey",
-        "label": "Apikey",
-        "description": "Porkbun API key (generate at porkbun.com/account/api)"
+        "name": "api_key",
+        "label": "API Key",
+        "description": "Porkbun API key (starts with 'pk1_'). Generate at https://porkbun.com/account/api. Must be enabled per-domain unless you tick 'Enable API Access' on each domain in your control panel.",
+        "required": true,
+        "type": "password"
       },
       {
-        "name": "secretapikey",
-        "label": "Secretapikey",
-        "description": "Porkbun secret API key (generated alongside the API key)"
+        "name": "secret_api_key",
+        "label": "Secret API Key",
+        "description": "Porkbun secret API key (starts with 'sk1_'), generated alongside the API key.",
+        "required": true,
+        "type": "password"
       }
     ]
   },
   "tools": [
     {
       "name": "ping",
-      "description": "Test your Porkbun API credentials. Returns your public IP if authentication succeeds.",
-      "method": "POST",
-      "path": "/json/v3/ping",
+      "description": "Test API credentials and return the caller's public IP. Returns { status, yourIp, credentialsValid }. Use this to verify credentials are working before making other calls.",
+      "method": "GET",
+      "path": "/ping",
       "input_schema": {
         "type": "object",
         "properties": {}
       }
     },
     {
-      "name": "check_availability",
-      "description": "Check if a domain name is available for registration. Returns pricing and availability status.",
-      "method": "POST",
-      "path": "/json/v3/domain/checkDomain/{domain}",
+      "name": "get_pricing",
+      "description": "Public domain pricing across all TLDs Porkbun sells. No credentials required, but cheapest to call once and cache \u2014 pricing rarely changes intra-day. Returns a map of TLD \u2192 { registration, renewal, transfer } prices.",
+      "method": "GET",
+      "path": "/pricing/get",
       "input_schema": {
         "type": "object",
-        "properties": {
-          "domain": {
-            "type": "string",
-            "description": "The domain name to check (e.g. 'example.com')"
-          }
-        },
-        "required": [
-          "domain"
-        ]
+        "properties": {}
       }
     },
     {
       "name": "list_domains",
-      "description": "List all domains in your Porkbun account with their status, expiration dates, and settings.",
+      "description": "Paginated list of all domains in the account, ordered by expiration date ascending. Returns up to 1000 per page; paginate by incrementing 'start' by 1000. Empty domains array means you've reached the end.",
       "method": "POST",
-      "path": "/json/v3/domain/listAll",
+      "path": "/domain/listAll",
       "input_schema": {
         "type": "object",
-        "properties": {}
+        "properties": {
+          "start": {
+            "type": "integer",
+            "description": "Pagination offset (multiples of 1000)",
+            "default": 0
+          },
+          "includeLabels": {
+            "type": "string",
+            "enum": [
+              "yes",
+              "no"
+            ],
+            "description": "Include user-defined labels in the response",
+            "default": "no"
+          }
+        }
       }
     },
     {
-      "name": "get_domain",
-      "description": "Retrieve detailed information about a specific domain including status, expiration, auto-renew, and WHOIS privacy settings.",
+      "name": "check_availability",
+      "description": "Check whether a domain is available for registration and return its price. Counts against your daily availability-check quota.",
       "method": "POST",
-      "path": "/json/v3/domain/retrieve/{domain}",
+      "path": "/domain/checkDomain/{domain}",
       "input_schema": {
         "type": "object",
         "properties": {
           "domain": {
             "type": "string",
-            "description": "The domain name to retrieve (e.g. 'example.com')"
+            "description": "Fully-qualified domain name to check (e.g. example.com)"
           }
         },
         "required": [
@@ -89,57 +102,61 @@
     },
     {
       "name": "register_domain",
-      "description": "Register a new domain name. IMPORTANT: You MUST first call porkbun-check-availability to get the domain's price, then pass that price as the 'cost' parameter (in pennies). Example flow: 1) check availability → get pricing, 2) register with cost. agreeToTerms must be 'yes'.",
+      "description": "Register a new domain. \u26a0\ufe0f This SPENDS REAL MONEY against your account balance. The price is whatever get_pricing currently returns for the TLD. Make sure to confirm with the user before calling.",
       "method": "POST",
-      "path": "/json/v3/domain/create/{domain}",
+      "path": "/domain/create/{domain}",
       "input_schema": {
         "type": "object",
         "properties": {
           "domain": {
-            "type": "string",
-            "description": "The domain name to register (e.g. 'example.com')"
+            "type": "string"
           },
-          "cost": {
+          "years": {
             "type": "integer",
-            "description": "REQUIRED. Cost in pennies as an integer. Get this from porkbun-check-availability response. Example: 958 for $9.58. The cost MUST exactly match what Porkbun expects for the domain's minimum duration."
+            "description": "Number of years to register (1-10)",
+            "default": 1
           },
-          "agreeToTerms": {
+          "coupon": {
             "type": "string",
-            "description": "REQUIRED. Must be 'yes' to agree to Porkbun's terms of service, privacy policy, and auto-renewal conditions.",
-            "default": "yes"
+            "description": "Optional coupon code"
           },
-          "years": {
-            "type": "integer",
-            "description": "Number of years to register the domain for (1-10)",
-            "default": 1
+          "renewAuto": {
+            "type": "string",
+            "enum": [
+              "yes",
+              "no"
+            ],
+            "description": "Enable auto-renewal",
+            "default": "yes"
           },
-          "autorenew": {
-            "type": "integer",
-            "description": "Enable auto-renewal: 1 for yes, 0 for no",
-            "default": 1
+          "whoisPrivacy": {
+            "type": "string",
+            "enum": [
+              "yes",
+              "no"
+            ],
+            "description": "Enable WHOIS privacy (free with all Porkbun registrations)",
+            "default": "yes"
           }
         },
         "required": [
-          "domain",
-          "cost"
+          "domain"
         ]
       }
     },
     {
       "name": "renew_domain",
-      "description": "Renew an existing domain registration for additional years.",
+      "description": "Renew a domain for the specified number of years. \u26a0\ufe0f Spends account balance.",
       "method": "POST",
-      "path": "/json/v3/domain/renew/{domain}",
+      "path": "/domain/renew/{domain}",
       "input_schema": {
         "type": "object",
         "properties": {
           "domain": {
-            "type": "string",
-            "description": "The domain name to renew (e.g. 'example.com')"
+            "type": "string"
           },
           "years": {
             "type": "integer",
-            "description": "Number of years to renew for (1-10)",
             "default": 1
           }
         },
@@ -149,16 +166,89 @@
       }
     },
     {
-      "name": "get_nameservers",
-      "description": "Retrieve the nameservers currently configured for a domain.",
+      "name": "transfer_domain",
+      "description": "Initiate a domain transfer in to Porkbun. \u26a0\ufe0f Spends account balance (transfer price).",
+      "method": "POST",
+      "path": "/domain/transfer/{domain}",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "domain": {
+            "type": "string"
+          },
+          "authcode": {
+            "type": "string",
+            "description": "EPP/auth code from the losing registrar"
+          }
+        },
+        "required": [
+          "domain",
+          "authcode"
+        ]
+      }
+    },
+    {
+      "name": "get_transfer_status",
+      "description": "Status of a single in-progress domain transfer.",
+      "method": "GET",
+      "path": "/domain/getTransfer/{domain}",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "domain": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "domain"
+        ]
+      }
+    },
+    {
+      "name": "list_transfers",
+      "description": "List all active domain transfers on the account.",
+      "method": "GET",
+      "path": "/domain/listTransfers",
+      "input_schema": {
+        "type": "object",
+        "properties": {}
+      }
+    },
+    {
+      "name": "update_auto_renew",
+      "description": "Enable or disable auto-renewal for a domain.",
       "method": "POST",
-      "path": "/json/v3/domain/getNs/{domain}",
+      "path": "/domain/updateAutoRenew/{domain}",
       "input_schema": {
         "type": "object",
         "properties": {
           "domain": {
+            "type": "string"
+          },
+          "renewAuto": {
             "type": "string",
-            "description": "The domain name to get nameservers for (e.g. 'example.com')"
+            "enum": [
+              "yes",
+              "no"
+            ]
+          }
+        },
+        "required": [
+          "domain",
+          "renewAuto"
+        ]
+      }
+    },
+    {
+      "name": "get_nameservers",
+      "description": "Get the authoritative nameservers currently set on a domain.",
+      "method": "GET",
+      "path": "/domain/getNs/{domain}",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "domain": {
+            "type": "string"
           }
         },
         "required": [
@@ -168,22 +258,21 @@
     },
     {
       "name": "update_nameservers",
-      "description": "Update the nameservers for a domain. Provide an array of nameserver hostnames.",
+      "description": "Replace a domain's nameservers with the supplied list (1-13 entries). Setting nameservers to anything other than Porkbun's DNS effectively disables DNS-record management for that domain.",
       "method": "POST",
-      "path": "/json/v3/domain/updateNs/{domain}",
+      "path": "/domain/updateNs/{domain}",
       "input_schema": {
         "type": "object",
         "properties": {
           "domain": {
-            "type": "string",
-            "description": "The domain name to update nameservers for (e.g. 'example.com')"
+            "type": "string"
           },
           "ns": {
             "type": "array",
             "items": {
               "type": "string"
             },
-            "description": "Array of nameserver hostnames (e.g. ['ns1.example.com', 'ns2.example.com'])"
+            "description": "Nameserver hostnames (e.g. ['ns1.example.com', 'ns2.example.com'])"
           }
         },
         "required": [
@@ -193,16 +282,111 @@
       }
     },
     {
-      "name": "list_dns_records",
-      "description": "Retrieve all DNS records for a domain. Returns record IDs, types, names, content, TTL, and priorities.",
+      "name": "get_glue_records",
+      "description": "List all glue records (in-bailiwick A/AAAA records published in the parent zone) for a domain.",
+      "method": "GET",
+      "path": "/domain/getGlue/{domain}",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "domain": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "domain"
+        ]
+      }
+    },
+    {
+      "name": "create_glue_record",
+      "description": "Create a glue record on a subdomain (required when running your own nameservers like ns1.example.com from inside example.com).",
       "method": "POST",
-      "path": "/json/v3/dns/retrieve/{domain}",
+      "path": "/domain/createGlue/{domain}/{subdomain}",
       "input_schema": {
         "type": "object",
         "properties": {
           "domain": {
+            "type": "string"
+          },
+          "subdomain": {
             "type": "string",
-            "description": "The domain name to list DNS records for (e.g. 'example.com')"
+            "description": "Subdomain only (e.g. 'ns1' for ns1.example.com)"
+          },
+          "ips": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "description": "IPv4 and/or IPv6 addresses for the glue record"
+          }
+        },
+        "required": [
+          "domain",
+          "subdomain",
+          "ips"
+        ]
+      }
+    },
+    {
+      "name": "update_glue_record",
+      "description": "Update the IPs on an existing glue record.",
+      "method": "POST",
+      "path": "/domain/updateGlue/{domain}/{subdomain}",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "domain": {
+            "type": "string"
+          },
+          "subdomain": {
+            "type": "string"
+          },
+          "ips": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          }
+        },
+        "required": [
+          "domain",
+          "subdomain",
+          "ips"
+        ]
+      }
+    },
+    {
+      "name": "delete_glue_record",
+      "description": "Delete a glue record.",
+      "method": "POST",
+      "path": "/domain/deleteGlue/{domain}/{subdomain}",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "domain": {
+            "type": "string"
+          },
+          "subdomain": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "domain",
+          "subdomain"
+        ]
+      }
+    },
+    {
+      "name": "list_dns_records",
+      "description": "Retrieve all DNS records for a domain. Returns an array of records each with id, name (FQDN), type, content, ttl, prio, notes.",
+      "method": "GET",
+      "path": "/dns/retrieve/{domain}",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "domain": {
+            "type": "string"
           }
         },
         "required": [
@@ -210,52 +394,115 @@
         ]
       }
     },
+    {
+      "name": "get_dns_record",
+      "description": "Retrieve a single DNS record by its numeric record ID.",
+      "method": "GET",
+      "path": "/dns/retrieve/{domain}/{id}",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "domain": {
+            "type": "string"
+          },
+          "id": {
+            "type": "string",
+            "description": "DNS record ID (returned by list_dns_records)"
+          }
+        },
+        "required": [
+          "domain",
+          "id"
+        ]
+      }
+    },
+    {
+      "name": "list_dns_records_by_type",
+      "description": "Retrieve DNS records filtered by name and type. Useful for fetching e.g. all MX records or the A record for a specific subdomain without paging through all records.",
+      "method": "GET",
+      "path": "/dns/retrieveByNameType/{domain}/{type}/{subdomain}",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "domain": {
+            "type": "string"
+          },
+          "type": {
+            "type": "string",
+            "enum": [
+              "A",
+              "AAAA",
+              "MX",
+              "CNAME",
+              "ALIAS",
+              "TXT",
+              "NS",
+              "SRV",
+              "TLSA",
+              "CAA",
+              "HTTPS",
+              "SVCB"
+            ]
+          },
+          "subdomain": {
+            "type": "string",
+            "description": "Subdomain part only ('' for root, 'www' for www.example.com)"
+          }
+        },
+        "required": [
+          "domain",
+          "type"
+        ]
+      }
+    },
     {
       "name": "create_dns_record",
-      "description": "Create a new DNS record for a domain. Supports A, AAAA, CNAME, MX, TXT, SRV, NS, ALIAS, CAA, HTTPS, SVCB, and TLSA record types.",
+      "description": "Create a new DNS record. Returns { status, id }. To create a record at the apex (root), set name to ''.",
       "method": "POST",
-      "path": "/json/v3/dns/create/{domain}",
+      "path": "/dns/create/{domain}",
       "input_schema": {
         "type": "object",
         "properties": {
           "domain": {
-            "type": "string",
-            "description": "The domain name to create the record for (e.g. 'example.com')"
+            "type": "string"
           },
           "name": {
             "type": "string",
-            "description": "The subdomain for the record (e.g. 'www', 'mail'). Leave empty or use '' for the root domain."
+            "description": "Subdomain only (e.g. 'www', 'mail'). Use '' for the apex record. Do NOT include the parent domain."
           },
           "type": {
             "type": "string",
-            "description": "DNS record type",
             "enum": [
               "A",
               "AAAA",
-              "CNAME",
               "MX",
+              "CNAME",
+              "ALIAS",
               "TXT",
-              "SRV",
               "NS",
-              "ALIAS",
+              "SRV",
+              "TLSA",
               "CAA",
               "HTTPS",
-              "SVCB",
-              "TLSA"
+              "SVCB"
             ]
           },
           "content": {
             "type": "string",
-            "description": "The value/content of the DNS record (e.g. IP address, hostname, text value)"
+            "description": "Record value (IP for A/AAAA, target hostname for CNAME/MX, text for TXT, etc.)"
           },
           "ttl": {
-            "type": "integer",
-            "description": "Time to live in seconds (default: 600)",
-            "default": 600
+            "type": "string",
+            "description": "TTL in seconds (minimum 600)",
+            "default": "600"
           },
-          "priority": {
-            "type": "integer",
-            "description": "Priority for MX and SRV records (lower = higher priority)"
+          "prio": {
+            "type": "string",
+            "description": "Priority \u2014 required for MX and SRV records"
+          },
+          "notes": {
+            "type": "string",
+            "description": "Free-form internal note (not published)"
           }
         },
         "required": [
@@ -266,60 +513,106 @@
       }
     },
     {
-      "name": "update_dns_record",
-      "description": "Update an existing DNS record by its record ID. Use porkbun-list-dns-records to find record IDs.",
+      "name": "edit_dns_record",
+      "description": "Replace a DNS record's contents by ID. Same fields as create_dns_record.",
       "method": "POST",
-      "path": "/json/v3/dns/edit/{domain}/{recordId}",
+      "path": "/dns/edit/{domain}/{id}",
       "input_schema": {
         "type": "object",
         "properties": {
           "domain": {
-            "type": "string",
-            "description": "The domain name the record belongs to (e.g. 'example.com')"
+            "type": "string"
           },
-          "recordId": {
-            "type": "string",
-            "description": "The ID of the DNS record to update (from list-dns-records)"
+          "id": {
+            "type": "string"
           },
           "name": {
-            "type": "string",
-            "description": "The subdomain for the record (e.g. 'www', 'mail'). Leave empty for root domain."
+            "type": "string"
           },
           "type": {
             "type": "string",
-            "description": "DNS record type",
             "enum": [
               "A",
               "AAAA",
-              "CNAME",
               "MX",
+              "CNAME",
+              "ALIAS",
               "TXT",
-              "SRV",
               "NS",
-              "ALIAS",
+              "SRV",
+              "TLSA",
               "CAA",
               "HTTPS",
-              "SVCB",
-              "TLSA"
+              "SVCB"
             ]
           },
           "content": {
+            "type": "string"
+          },
+          "ttl": {
+            "type": "string"
+          },
+          "prio": {
+            "type": "string"
+          },
+          "notes": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "domain",
+          "id",
+          "type",
+          "content"
+        ]
+      }
+    },
+    {
+      "name": "edit_dns_records_by_type",
+      "description": "Replace ALL records matching a given (subdomain, type) tuple with the supplied content. Useful for atomically swapping e.g. all A records for www.",
+      "method": "POST",
+      "path": "/dns/editByNameType/{domain}/{type}/{subdomain}",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "domain": {
+            "type": "string"
+          },
+          "type": {
             "type": "string",
-            "description": "The value/content of the DNS record"
+            "enum": [
+              "A",
+              "AAAA",
+              "MX",
+              "CNAME",
+              "ALIAS",
+              "TXT",
+              "NS",
+              "SRV",
+              "TLSA",
+              "CAA",
+              "HTTPS",
+              "SVCB"
+            ]
+          },
+          "subdomain": {
+            "type": "string"
+          },
+          "content": {
+            "type": "string"
           },
           "ttl": {
-            "type": "integer",
-            "description": "Time to live in seconds",
-            "default": 600
+            "type": "string"
           },
-          "priority": {
-            "type": "integer",
-            "description": "Priority for MX and SRV records"
+          "prio": {
+            "type": "string"
+          },
+          "notes": {
+            "type": "string"
           }
         },
         "required": [
           "domain",
-          "recordId",
           "type",
           "content"
         ]
@@ -327,48 +620,152 @@
     },
     {
       "name": "delete_dns_record",
-      "description": "Delete a DNS record by its record ID. Use porkbun-list-dns-records to find record IDs.",
+      "description": "Delete a single DNS record by ID. Cannot be undone.",
       "method": "POST",
-      "path": "/json/v3/dns/delete/{domain}/{recordId}",
+      "path": "/dns/delete/{domain}/{id}",
       "input_schema": {
         "type": "object",
         "properties": {
           "domain": {
-            "type": "string",
-            "description": "The domain name the record belongs to (e.g. 'example.com')"
+            "type": "string"
           },
-          "recordId": {
-            "type": "string",
-            "description": "The ID of the DNS record to delete (from list-dns-records)"
+          "id": {
+            "type": "string"
           }
         },
         "required": [
           "domain",
-          "recordId"
+          "id"
         ]
       }
     },
     {
-      "name": "get_pricing",
-      "description": "Get pricing information for all available TLDs. No authentication required. Returns registration, renewal, and transfer prices.",
+      "name": "delete_dns_records_by_type",
+      "description": "Delete ALL records matching a given (subdomain, type) tuple. Cannot be undone.",
       "method": "POST",
-      "path": "/json/v3/pricing/get",
+      "path": "/dns/deleteByNameType/{domain}/{type}/{subdomain}",
       "input_schema": {
         "type": "object",
-        "properties": {}
+        "properties": {
+          "domain": {
+            "type": "string"
+          },
+          "type": {
+            "type": "string",
+            "enum": [
+              "A",
+              "AAAA",
+              "MX",
+              "CNAME",
+              "ALIAS",
+              "TXT",
+              "NS",
+              "SRV",
+              "TLSA",
+              "CAA",
+              "HTTPS",
+              "SVCB"
+            ]
+          },
+          "subdomain": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "domain",
+          "type"
+        ]
+      }
+    },
+    {
+      "name": "get_dnssec_records",
+      "description": "Retrieve DNSSEC records (DS records) published at the registry for the domain.",
+      "method": "GET",
+      "path": "/dns/getDnssecRecords/{domain}",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "domain": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "domain"
+        ]
       }
     },
     {
-      "name": "enable_whois_privacy",
-      "description": "Enable WHOIS privacy protection for a domain to hide personal information from public WHOIS lookups.",
+      "name": "create_dnssec_record",
+      "description": "Add a DNSSEC DS record at the registry. The four fields (keyTag, alg, digestType, digest) come from your authoritative DNS provider.",
       "method": "POST",
-      "path": "/json/v3/domain/enableWhoisPrivacy/{domain}",
+      "path": "/dns/createDnssecRecord/{domain}",
       "input_schema": {
         "type": "object",
         "properties": {
           "domain": {
+            "type": "string"
+          },
+          "keyTag": {
+            "type": "string",
+            "description": "DNSKEY key tag (decimal)"
+          },
+          "alg": {
+            "type": "string",
+            "description": "Algorithm number (e.g. 13 for ECDSAP256SHA256)"
+          },
+          "digestType": {
+            "type": "string",
+            "description": "Digest type (1=SHA1, 2=SHA256, 4=SHA384)"
+          },
+          "digest": {
             "type": "string",
-            "description": "The domain name to enable WHOIS privacy for (e.g. 'example.com')"
+            "description": "Hex-encoded digest"
+          },
+          "maxSigLife": {
+            "type": "string",
+            "description": "Optional max signature lifetime in seconds"
+          }
+        },
+        "required": [
+          "domain",
+          "keyTag",
+          "alg",
+          "digestType",
+          "digest"
+        ]
+      }
+    },
+    {
+      "name": "delete_dnssec_record",
+      "description": "Remove a DNSSEC DS record by its keyTag.",
+      "method": "POST",
+      "path": "/dns/deleteDnssecRecord/{domain}/{keytag}",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "domain": {
+            "type": "string"
+          },
+          "keytag": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "domain",
+          "keytag"
+        ]
+      }
+    },
+    {
+      "name": "list_url_forwards",
+      "description": "List all URL-forwarding rules for a domain.",
+      "method": "GET",
+      "path": "/domain/getUrlForwarding/{domain}",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "domain": {
+            "type": "string"
           }
         },
         "required": [
@@ -378,40 +775,107 @@
     },
     {
       "name": "add_url_forward",
-      "description": "Add URL forwarding for a domain or subdomain. Supports temporary (302) and permanent (301) redirects, as well as masked forwarding.",
+      "description": "Add a URL-forwarding rule from a (sub)domain on this domain to a destination URL.",
       "method": "POST",
-      "path": "/json/v3/domain/addUrlForward/{domain}",
+      "path": "/domain/addUrlForward/{domain}",
       "input_schema": {
         "type": "object",
         "properties": {
           "domain": {
-            "type": "string",
-            "description": "The domain name to add forwarding to (e.g. 'example.com')"
+            "type": "string"
           },
           "subdomain": {
             "type": "string",
-            "description": "The subdomain to forward (e.g. 'www'). Leave empty for the root domain."
+            "description": "Subdomain to forward from ('' for the apex)"
           },
-          "forwardUrl": {
+          "location": {
             "type": "string",
-            "description": "The destination URL to forward to (e.g. 'https://destination.com')"
+            "description": "Destination URL"
           },
-          "forwardType": {
+          "type": {
             "type": "string",
-            "description": "Type of forwarding: 'temporary' (302), 'permanent' (301), or 'masked' (iframe)",
             "enum": [
               "temporary",
-              "permanent",
-              "masked"
-            ]
+              "permanent"
+            ],
+            "description": "302 (temporary) or 301 (permanent)"
+          },
+          "includePath": {
+            "type": "string",
+            "enum": [
+              "yes",
+              "no"
+            ],
+            "description": "Append the source request path to the destination"
+          },
+          "wildcard": {
+            "type": "string",
+            "enum": [
+              "yes",
+              "no"
+            ],
+            "description": "Apply to all subdomains under the target"
           }
         },
         "required": [
           "domain",
-          "forwardUrl",
-          "forwardType"
+          "location",
+          "type",
+          "includePath",
+          "wildcard"
         ]
       }
+    },
+    {
+      "name": "delete_url_forward",
+      "description": "Delete a URL-forwarding rule by its numeric ID.",
+      "method": "POST",
+      "path": "/domain/deleteUrlForward/{domain}/{id}",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "domain": {
+            "type": "string"
+          },
+          "id": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "domain",
+          "id"
+        ]
+      }
+    },
+    {
+      "name": "retrieve_ssl",
+      "description": "Retrieve the SSL bundle (certificate chain + private key) for a domain that uses Porkbun-managed DNS. Free Let's Encrypt cert auto-issued by Porkbun. Returns { intermediatecertificate, certificatechain, privatekey, publickey }.",
+      "method": "GET",
+      "path": "/ssl/retrieve/{domain}",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "domain": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "domain"
+        ]
+      }
+    },
+    {
+      "name": "get_account_balance",
+      "description": "Current account balance (in USD by default). Use before register_domain / renew_domain to verify funds.",
+      "method": "GET",
+      "path": "/account/balance",
+      "input_schema": {
+        "type": "object",
+        "properties": {}
+      }
     }
-  ]
-}
+  ],
+  "health_check": {
+    "tool": "ping"
+  }
+}