Skip to main content

EdgeDNS Guides

Long-form tutorials on DNS, email security, and MCP integration — plus an auto-generated guide for every one of the 110+ EdgeDNS API endpoints. Each guide explains why it matters and how to call it from Claude, ChatGPT, or Gemini.

Featured guides

Hand-written tutorials covering the most common DNS, email security, and AI integration tasks.

Email Security9 min read

How to Check Your DMARC Record

If you have ever wondered why some emails land in the inbox and others end up in spam, you have run into the world of email authentication. DMARC is the rulebook that ties it all together. This guide explains it without jargon, shows you how to check yours, and walks you through rolling it out safely.

Read guide →

DNS Records9 min read

DNS Propagation Explained: Why Changes Aren't Instant

Ever changed a DNS record and then refreshed your browser, hoping to see the change instantly — but it took hours? That's DNS propagation. This guide explains why it happens, how to check on it, and how to make it as fast as possible next time.

Read guide →

Email Security10 min read

SPF Record Setup Guide: From Zero to Protected

If you send any email at all from a domain you own, you should have an SPF record. This guide explains what SPF is in plain language, walks you through setting one up step by step, and warns you about the gotchas before you hit them.

Read guide →

MCP & AI7 min read

MCP for DNS: How to Talk to Your Domains

Imagine asking Claude, "hey, is my email setup working correctly?" — and getting a real, accurate answer back, instantly. That's what the EdgeDNS MCP server does. This guide explains what MCP is, why it's a big deal, and how to connect it in about a minute.

Read guide →

Website Security11 min read

How to Detect Subdomain Takeover (Before an Attacker Does)

A subdomain takeover is the vulnerability almost every big brand has at some point: a forgotten CNAME points at a deprovisioned SaaS service, an attacker registers that service's free name, and suddenly they're serving content at a real subdomain of the real brand — with a valid HTTPS certificate. This guide shows you how to find these before anyone else does. Start free on EdgeDNS — 200 requests/month, no credit card required.

Read guide →

Email Security10 min read

Can Someone Spoof Emails From My Domain? (A Practical Guide)

If you send email from your own domain, "can someone spoof me?" is the single most important question to answer honestly — and most security checkers fudge it. This guide explains why a flat average of SPF, DKIM, and DMARC grades hides the real risk, what a true spoofability score looks like, and how to measure yours without the hand-waving. Start free on EdgeDNS — 200 requests/month, no credit card required.

Read guide →

Threat Intelligence10 min read

How to Find Fake Domains Impersonating Your Brand

Somebody registered `acme-support.com` yesterday. Somebody else registered `acmе.com` — with a Cyrillic `е` that looks identical to the Latin one in every major font. Both are shadow domains: lookalikes of your brand, registered days or weeks before the phishing campaign that will use them. This guide shows you how to find them before the campaign launches. Start free on EdgeDNS — 200 requests/month, no credit card required.

Read guide →

DNS Records11 min read

DNSSEC cryptographic verification: what we actually verify

DNSSEC is supposed to give you a cryptographic guarantee that a DNS answer is authentic. Most tools that claim to "check DNSSEC" don't actually verify any cryptography — they trust the recursive resolver's AD bit and call it a day. EdgeDNS reconstructs the canonical signed RRset and runs the math locally. Here's what that means, why the difference matters, and how to read what comes back.

Read guide →

DNS Records9 min read

A single-call DNS health audit

Auditing the health of a DNS zone usually means orchestrating seven separate calls — DNSSEC, CAA, AXFR, NSEC3, open-resolver, SOA, subdomain-exposure — then aggregating the results yourself. The zone-hygiene composite endpoint runs nine independent DNS health checks in one request and returns a weighted score with a letter grade. Here's the walkthrough, with the standards each check is grounded in.

Read guide →

Threat Intelligence10 min read

Fast-flux vs CDN: how to tell them apart

Fast-flux DNS — the IP-rotation technique used by botnets to keep phishing and malware infrastructure online — looks identical to a CDN at the surface. Both rotate IPs, both use short TTLs, both serve different addresses to different users. The signal that actually separates them is ASN diversity. This guide walks through the detection model, why naive checks produce false positives, and how the EdgeDNS fast-flux endpoint resolves the ambiguity.

Read guide →

SEO & Content11 min read

Deep Technical SEO Audits: Beyond the 200 OK

Modern technical SEO audits have outgrown the checklist most teams still run. A 200 OK is not a successful audit. Titles truncate in pixels, not characters. Hreflang quietly breaks the moment one return-link goes missing. Robots.txt now means something different to Googlebot, GPTBot, and ClaudeBot. This guide walks through the deeper checks that distinguish a real technical audit from a surface scan — and shows the one-call API workflow that runs them all.

Read guide →

Email Security8 min read

SPF Void Lookups: Why Your SPF Quietly Fails at Gmail

Everyone in email knows about the 10-DNS-lookup limit on SPF records. Almost nobody knows there is a second limit — two void lookups — and that Google and Microsoft enforce it. If your SPF record points at an include that resolves to NXDOMAIN, your authentication is silently failing at the biggest mailbox providers in the world. This guide explains the void-lookup limit, shows you how to detect it, and walks through the fix.

Read guide →

Email Security7 min read

DMARC External Reporting: How to Audit Your rua= Destinations

If your DMARC `rua=` tag sends reports to a third-party vendor, that vendor has to publish a special authorization record on their side — otherwise mailbox providers silently drop your reports. Most teams do not know this exists. Here is what RFC 7489 §7.1 actually requires, why it gets missed, and how to audit your destinations programmatically.

Read guide →

Browse 110 endpoint guides by category

Every public EdgeDNS endpoint has a dedicated guide explaining what it does, why it matters, and how to call it from REST or from your AI assistant via MCP.

Compliance

WCAG accessibility, GDPR privacy, and regulatory compliance audits

4 guides

Put Knowledge Into Action

Every guide is backed by real API endpoints you can test right now. Try our free tools or connect Claude, ChatGPT, or Gemini via MCP.