Quickstart

To use our domain management API, you need to register an account with deSEC. Here’s a quick intro how to get started:

Obtain a Captcha and solve it:
```
curl -X POST https://desec.io/api/v1/captcha/
```
Note down the captcha ID from the response body, and figure out the solution from the challenge field. It’s a base64-encoded PNG image which you can display by directing your browser to the URL data:image/png;base64,<challenge>, after replacing <challenge> with the value of the challenge response field

curl https://desec.io/api/v1/auth/ \
    --header "Content-Type: application/json" --data @- <<EOF
    {
      "email": "youremailaddress@example.com",
      "password": "yourpassword",
      "captcha": {
        "id": "00010203-0405-0607-0809-0a0b0c0d0e0f",
        "solution": "12H45"
      }
    }
EOF

Before activating your account, we need to verify your email address. To that end, we will send you an email, containing a validation link of the form https://desec.io/api/v1/v/activate-account/<code>/. To confirm your address and activate your account, simply click the link.

Log In:
```
curl https://desec.io/api/v1/auth/login/ \
    --header "Content-Type: application/json" --data @- <<< \
    '{"email": "youremailaddress@example.com", "password": "yourpassword"}'
```
The response body will contain a token secret which is used to authenticate requests to the DNS management endpoints as demonstrated in the next step.

Note that tokens created by the login endpoint have limited validity (see the max_age and max_unused_period fields in the response). To create a long-lived API token, please refer to Manage Tokens.

Create a DNS zone:

curl https://desec.io/api/v1/domains/ \
    --header "Authorization: Token {secret}" \
    --header "Content-Type: application/json" --data @- <<< \
    '{"name": "example.com"}'

Yay! Keep browsing the Domain Management section of the docs to see how to continue.