API documentation
Use reliable, low-latency endpoints in your applications.
Public utilities
Small dependable endpoints that need no account: time, address, country, exchange rates and hashes.
GET /v1/public/time
GET /v1/public/timestamp
GET /v1/public/ip
GET /v1/public/geo
GET /v1/public/fx
GET /v1/public/hash
Account
Who a token belongs to, and what it is allowed to do.
GET /v1/account/me
GET /v1/account/sessions
POST /v1/account/sessions/revoke
POST /v1/account/sessions/revoke-all
POST /v1/account/profile
DNS
Claim a domain, prove you control it, then manage its records.
GET /v1/dns/zones
POST /v1/dns/zones
GET /v1/dns/zones/{zone}
POST /v1/dns/zones/{zone}/verify
DELETE /v1/dns/zones/{zone}
GET /v1/dns/zones/{zone}/records
POST /v1/dns/zones/{zone}/records
GET /v1/dns/zones/{zone}/records/{id}
PATCH /v1/dns/zones/{zone}/records/{id}
DELETE /v1/dns/zones/{zone}/records/{id}
Credentials
The private credential store behind the credentials tool.
GET /v1/cred
POST /v1/cred
Files
Personal file storage: list, upload, edit, share and delete.
GET /v1/files
GET /v1/files/{id}
GET /v1/files/download
POST /v1/files/upload
POST /v1/files/update
POST /v1/files/rename
POST /v1/files/delete
POST /v1/files/upload-chunk
POST /v1/files/upload-finalize
CDN
Edge caching and traffic for the files you share.
GET /v1/cdn/stats
POST /v1/cdn/config
POST /v1/cdn/purge
SMS forwarder
Messages relayed from your phone, and the keys that let it in.
GET /v1/sms/messages
GET /v1/sms/keys
POST /v1/sms/keys
DELETE /v1/sms/keys
Static sites
Upload a zip, serve a site.
GET /v1/sites
POST /v1/sites/deploy
POST /v1/sites/delete
Deployments
The form, webhook and shortlink endpoints you have deployed.
GET /v1/deployments
POST /v1/deployments/toggle
POST /v1/deployments/delete
Domains
Your domain portfolio and its registration data.
GET /v1/domains
POST /v1/domains/whois-sync
Packages
Publish releases and read back their versions and download counts.
GET /v1/packages
GET /v1/packages/{slug}
POST /v1/packages/publish
POST /v1/packages/update
POST /v1/packages/delete
WHOIS
Registration data for a domain, cached and shared with the domain tools.
GET /v1/whois
Getting started
Public utility endpoints such as time, IP address and exchange rates are free and require no authentication.
The DNS Management API at /v1 requires a Bearer token from Account → API keys. A token can access only its owner’s verified zones.
Public endpoint
fetch('https://api.c.nf/v1/public/time')
.then(response => response.json())
.then(data => console.log(data.data.iso8601));
Authenticated DNS v1 endpoint
fetch('https://api.c.nf/v1/dns/zones', {
headers: { 'Authorization': 'Bearer cnf_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx' }
})
.then(r => r.json())
.then(data => console.log(data.data.zones));
For AI agents
Point an agent at /v1/ai for a brief written to be pasted straight into a prompt, or at /v1/ai?format=json for the same endpoints as tool definitions. /v1/openapi.json is the full OpenAPI 3.1 contract, and /llms.txt is the crawler map. All four are generated from the same route table as this page, so none of them can describe an endpoint that does not exist.