Prerequisites
API requirements and setup for each supported registrar
Prerequisites for Domain Collective
Before you can start using Domain Collective, you'll need to enable API access with your domain registrar. This guide explains the requirements for each supported registrar.
Overview
Domain Collective connects to your registrar using official APIs. Each registrar has different requirements for API access:
| Registrar | API Type | Authentication | Special Requirements |
|---|---|---|---|
| GoDaddy | REST API | API Key + Secret | Production API access |
| Namecheap | XML API | API Key + Username | IP whitelisting required |
| Gandi | REST API | Personal Access Token | Token expires after 1 year |
No minimum domain requirements! Unlike some services, Domain Collective works with any number of domains - even just one.
GoDaddy API Setup
Requirements
- Active GoDaddy account
- At least one domain (no minimum requirement)
- Production API access
How to Get API Credentials
-
Visit GoDaddy Developer Portal
- Go to developer.godaddy.com
- Sign in with your GoDaddy account
-
Create API Keys
- Click "API Keys" in the navigation
- Click "Create New API Key"
- Name your key (e.g., "Domain Collective")
- Select Production environment
- Click "Next"
-
Save Your Credentials
- API Key: Copy and save securely
- API Secret: Copy immediately (shown only once!)
- Customer ID: Found in your GoDaddy account settings
Important: The API Secret is only shown once. Save it immediately in a secure location!
Testing Access
You can test your GoDaddy API access using:
- OTE (test) environment with customer ID:
1234 - Production environment with your actual customer ID
Namecheap API Setup
Requirements
- Active Namecheap account
- At least one domain (no minimum requirement)
- Static IP address for whitelisting
How to Enable API Access
-
Enable API in Account
- Log into your Namecheap account
- Go to Profile → Tools → API Access
- Click "Enable API Access"
-
Whitelist Your IP
- Find your IP address (visit whatismyip.com)
- Add your IP to the whitelist in API settings
- Save the changes
-
Get Your Credentials
- Username: Your Namecheap username
- API Key: Found in API Access Management page
- Save both securely
Sandbox Available: Namecheap offers a sandbox environment at sandbox.namecheap.com for testing.
Common Issues
- IP not whitelisted: Most common error - ensure your current IP is in the whitelist
- API not enabled: Check that API access is enabled in your account
- Wrong username: Use your account username, not email
Gandi API Setup
Requirements
- Active Gandi account
- At least one domain (no minimum requirement)
- Personal Access Token (PAT)
How to Create a Personal Access Token
-
Access Account Settings
- Log into your Gandi account
- Click on your username (top right)
- Select "User settings" or "Security"
-
Create Personal Access Token
- Navigate to "Security" → "Personal Access Tokens"
- Click "Create a token"
- Name your token (e.g., "Domain Collective")
- Set expiration (max 1 year)
- Select required scopes:
domain:read- View domainsdomain:write- Manage domainsdns:read- View DNS recordsdns:write- Manage DNS records
-
Save Your Token
- Copy the generated token immediately
- Store it securely
- The token won't be shown again!
Token Expiry: Gandi PATs expire after a maximum of 1 year. You'll need to generate a new token before expiry to maintain access.
Token Management
- You can have multiple active tokens
- Tokens can be revoked anytime from your account
- Set a reminder for token renewal before expiry
Security Best Practices
Protecting Your Credentials
-
Never share API credentials
- Treat them like passwords
- Don't commit to git repositories
- Don't share in emails or messages
-
Use strong authentication
- Enable 2FA on your registrar accounts
- Use unique passwords for each service
-
Monitor API usage
- Check API logs in your registrar dashboard
- Look for unexpected activity
-
Rotate credentials regularly
- Update API keys periodically
- Remove old/unused API keys
Domain Collective Security
Domain Collective protects your credentials by:
- Encrypting all credentials before storage
- Using HTTPS for all API communications
- Never logging sensitive data
- Isolating user data in the database
Verification Checklist
Before adding an integration, verify:
GoDaddy
- API Key obtained from developer portal
- API Secret saved securely
- Customer ID noted
- Production environment selected
Namecheap
- API access enabled in account
- Current IP address whitelisted
- Username and API Key saved
- Test with sandbox if needed
Gandi
- Personal Access Token created
- Required scopes selected
- Token saved securely
- Expiry date noted for renewal
Troubleshooting
"Invalid Credentials" Error
- Double-check API key/secret/token
- Ensure no extra spaces when pasting
- Verify production vs test environment
"Unauthorized" Error
- Check IP whitelisting (Namecheap)
- Verify API access is enabled
- Ensure token hasn't expired (Gandi)
"No Domains Found"
- Verify domains exist in account
- Check API scopes/permissions
- Try manual sync after waiting
Getting Help
If you're having trouble setting up API access:
-
Check registrar documentation
-
Contact registrar support
- They can help enable API access
- Verify account permissions
-
Reach out to us
- Email: support@collective.domains
- Include error messages (without credentials!)
Once you have your API credentials, you're ready to add your first integration →