---
title: "Return domain's DS record"
method: GET
path: "/fetch_ds_records_for_domains"
tags: ["DNS", "Domain Management"]
---

# Return domain's DS record

`GET /fetch_ds_records_for_domains`

This function fetches a domain's Delegation of Signing (DS) record.

**Note:**

Only servers that run PowerDNS can use DNSSEC. If you call this function on a server that doesn't use PowerDNS, you will receive an error.

## Query parameters

- `domain` string, domain, required

## Response `200`

HTTP Request was successful.

- object
  - `data` object
    - `domains` object[] — An array of objects that contains information about each domain.
      - `domain` string, domain — The domain name.
      - `ds_records` object — An object that contains domain's DS records. **Note:** If the domain does **not** have a DS record, this function returns an empty object.
        - `keys` object — An object containing the DS keys on the requested domain.
        - `nsec_details` object — An object with of the domain's [Next Secure Record](https://tools.ietf.org/html/rfc4470) (NSEC) information. **Note:** If the domain uses NSEC semantics, only the `nsec_version` return appears in this object.
          - `nsec3_hash_algo_desc` string — description of the NSEC3 key's algorithm.
          - `nsec3_hash_algo_num` integer — The DNSSEC ([Domain Name Security Extensions](https://en.wikipedia.org/wiki/Domain_Name_System_Security_Extensions)) Digest Algorithm Number.
          - `nsec3_iterations` integer — The number of times that the system rehashes the first hash operation.
          - `nsec3_narrow` 0 | 1 — Whether NSEC3 will operate in Narrow or Inclusive mode. **Note:** For more information about these modes, read [PowerDNS's DNSSEC documentation](https://doc.powerdns.com/authoritative/dnssec/intro.html). * `1` - Narrow mode. * `0` - Inclusive mode.
          - `nsec3_opt_out` 0 | 1 — Whether NSEC3 will create records for all delegations or only for secure delegations. * `1` - Create records for all delegations. * `0` - Create records **only** for secure delegations.
          - `nsec3_salt` string — The salt value that PowerDNS uses in the hashes. **Note:** For more information about salt values, read [RFC 5155](https://tools.ietf.org/html/rfc5155#section-3.1.5).
          - `nsec_version` 'NSEC' | 'NSEC3' — Whether the domain uses NSEC or NSEC3 ([Next Secure Record version 3](https://tools.ietf.org/html/rfc5155)) DNSSEC semantics.
  - `metadata` object
    - `command` string — The method name called.
    - `reason` string — The reason the API function failed when the `metadata.result` field is `0`. This field may display a success message when a function succeeds.
    - `result` 0 | 1 — * `1` - Success. * `0` - Failed. Check the `reason` field for more details.
    - `version` integer — The version of the API function.

---

[API](https://skmtc.net/cpanel/apis/whm-api.md) · [All operations](https://skmtc.net/cpanel/apis/whm-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/cpanel/whm-api/revisions/3da41671c02c/schema)