API reference

Relays

DNS: zones and records.

Operations: 13
Base path: https://os.one.ml/api/v1/relays
Scopes: relays:read relays:write
API keys: 13 refused to API keys
SDK: genesis.call('relays_getEnrollment', …) · helpers under genesis.relays
CLI: genesis relays
MCP: 10 tools; the other 3 through genesis_call

Operations

Operation	Endpoint	API key
Read enrollment for the current verified human Genesis selection	GET`/genesis/enrollment`	API keys refused
Explicitly activate an empty Relays account; read status after an unconfirmed result	POST`/genesis/enrollment`	API keys refused
List DNS zones for the tenant	GET`/zones`	API keys refused
Create a DNS zone	POST`/zones`	API keys refused
Get zone details	GET`/zones/{zone}`	API keys refused
Delete a zone and all its records	DELETE`/zones/{zone}`	API keys refused
Update zone settings (type, SOA)	PATCH`/zones/{zone}`	API keys refused
Read owned DNSSEC status; unavailable public key details return 503	GET`/zones/{zone}/dnssec`	API keys refused
List records in a zone	GET`/zones/{zone}/records`	API keys refused
Create one record, or up to 100 with {records:[...]}	POST`/zones/{zone}/records`	API keys refused
Get a record	GET`/zones/{zone}/records/{recordId}`	API keys refused
Delete a record	DELETE`/zones/{zone}/records/{recordId}`	API keys refused
Update a record	PATCH`/zones/{zone}/records/{recordId}`	API keys refused

Genesis

Read enrollment for the current verified human Genesis selection

GET/v1/relays/genesis/enrollment

relays:readAPI keys refusedrelays_getEnrollment

Responses

200Actual enrollment status; no provisioning
Response fields
- state"ready" | "not_enrolled"required
- organizationIdstringrequired
  pattern ^o_[A-Za-z0-9_-]{1,128}$
- projectIdstringrequired
  pattern ^pr_[A-Za-z0-9_-]{1,128}$
- workspaceIdstringrequired
  pattern ^w_[A-Za-z0-9_-]{1,128}$
- resourceEnvironment"sandbox"required
400Enrollment was rejected or unconfirmed; read status before another explicit POST
401Enrollment was rejected or unconfirmed; read status before another explicit POST
403Enrollment was rejected or unconfirmed; read status before another explicit POST
404Enrollment was rejected or unconfirmed; read status before another explicit POST
409Enrollment was rejected or unconfirmed; read status before another explicit POST
503Enrollment was rejected or unconfirmed; read status before another explicit POST
4xx 5xxThe error envelope.

curl "https://os.one.ml/api/v1/relays/genesis/enrollment" \
  -H "Authorization: Bearer $GENESIS_API_KEY"

import { Genesis } from '@lifesi/genesis'

const genesis = new Genesis({ apiKey: process.env.GENESIS_API_KEY })
const result = await genesis.call('relays_getEnrollment')

{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "relays_getEnrollment",
    "arguments": {}
  }
}

Explicitly activate an empty Relays account; read status after an unconfirmed result

POST/v1/relays/genesis/enrollment

relays:writeAPI keys refusedrelays_enroll

Responses

200Exact mapping already exists; created false
Response fields
- state"ready"required
- organizationIdstringrequired
  pattern ^o_[A-Za-z0-9_-]{1,128}$
- projectIdstringrequired
  pattern ^pr_[A-Za-z0-9_-]{1,128}$
- workspaceIdstringrequired
  pattern ^w_[A-Za-z0-9_-]{1,128}$
- resourceEnvironment"sandbox"required
- createdbooleanrequired
201Empty account created; created true
Response fields
- state"ready"required
- organizationIdstringrequired
  pattern ^o_[A-Za-z0-9_-]{1,128}$
- projectIdstringrequired
  pattern ^pr_[A-Za-z0-9_-]{1,128}$
- workspaceIdstringrequired
  pattern ^w_[A-Za-z0-9_-]{1,128}$
- resourceEnvironment"sandbox"required
- createdbooleanrequired
400Enrollment was rejected or unconfirmed; read status before another explicit POST
401Enrollment was rejected or unconfirmed; read status before another explicit POST
403Enrollment was rejected or unconfirmed; read status before another explicit POST
404Enrollment was rejected or unconfirmed; read status before another explicit POST
409Enrollment was rejected or unconfirmed; read status before another explicit POST
503Enrollment was rejected or unconfirmed; read status before another explicit POST
4xx 5xxThe error envelope.

curl -X POST "https://os.one.ml/api/v1/relays/genesis/enrollment" \
  -H "Authorization: Bearer $GENESIS_API_KEY"

import { Genesis } from '@lifesi/genesis'

const genesis = new Genesis({ apiKey: process.env.GENESIS_API_KEY })
const result = await genesis.call('relays_enroll')

{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "relays_enroll",
    "arguments": {}
  }
}

Zones

List DNS zones for the tenant

GET/v1/relays/zones

relays:readAPI keys refusedrelays_listZones

Parameters

pagequery · integer
limitquery · integer
searchquery · string

Responses

200Zones
Response fields
- zonesobject[]
- zones[].[].idinteger
- zones[].[].namestring
- zones[].[].type"NATIVE" | "MASTER" | "SLAVE"
- zones[].[].record_countinteger
- zones[].[].dnssec_enabledboolean
- zones[].[].statusstring
- zones[].[].serialinteger
- zones[].[].nameserversstring[]
- zones[].[].soaobject
- zones[].[].created_atstring
- zones[].[].updated_atstring
- metaobject
- meta.pageinteger
- meta.per_pageinteger
- meta.totalinteger
- meta.total_pagesinteger
401Error
4xx 5xxThe error envelope.

curl "https://os.one.ml/api/v1/relays/zones" \
  -H "Authorization: Bearer $GENESIS_API_KEY"

import { Genesis } from '@lifesi/genesis'

const genesis = new Genesis({ apiKey: process.env.GENESIS_API_KEY })
const result = await genesis.call('relays_listZones')

{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "relays_listZones",
    "arguments": {}
  }
}

Create a DNS zone

POST/v1/relays/zones

relays:writeAPI keys refusedrelays_createZone

Request body application/json

namestringrequired
max length 253
type"NATIVE" | "MASTER" | "SLAVE"
default "NATIVE"
create_default_recordsboolean
default true

Responses

201Created
Response fields
- idinteger
- namestring
- type"NATIVE" | "MASTER" | "SLAVE"
- record_countinteger
- dnssec_enabledboolean
- statusstring
- serialinteger
- nameserversstring[]
- soaobject
- created_atstring
- updated_atstring
400Error
401Error
4xx 5xxThe error envelope.

curl -X POST "https://os.one.ml/api/v1/relays/zones" \
  -H "Authorization: Bearer $GENESIS_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "string"
  }'

import { Genesis } from '@lifesi/genesis'

const genesis = new Genesis({ apiKey: process.env.GENESIS_API_KEY })
const result = await genesis.call('relays_createZone', {
  body: {
    name: 'string',
  },
})

{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "relays_createZone",
    "arguments": {
      "body": {
        "name": "string"
      }
    }
  }
}

Get zone details

GET/v1/relays/zones/{zone}

relays:readAPI keys refusedrelays_getZone

Parameters

zonepath · stringrequired

Responses

200Zone
Response fields
- idinteger
- namestring
- type"NATIVE" | "MASTER" | "SLAVE"
- record_countinteger
- dnssec_enabledboolean
- statusstring
- serialinteger
- nameserversstring[]
- soaobject
- created_atstring
- updated_atstring
404Error
4xx 5xxThe error envelope.

curl "https://os.one.ml/api/v1/relays/zones/$ZONE" \
  -H "Authorization: Bearer $GENESIS_API_KEY"

import { Genesis } from '@lifesi/genesis'

const genesis = new Genesis({ apiKey: process.env.GENESIS_API_KEY })
const result = await genesis.call('relays_getZone', {
  zone: '<zone>',
})

{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "relays_getZone",
    "arguments": {
      "zone": "<zone>"
    }
  }
}

Delete a zone and all its records

DELETE/v1/relays/zones/{zone}

relays:writeAPI keys refusedrelays_deleteZone

Parameters

zonepath · stringrequired

Responses

200Deleted
Response fields
- successboolean
- messagestring
404Error
4xx 5xxThe error envelope.

curl -X DELETE "https://os.one.ml/api/v1/relays/zones/$ZONE" \
  -H "Authorization: Bearer $GENESIS_API_KEY"

import { Genesis } from '@lifesi/genesis'

const genesis = new Genesis({ apiKey: process.env.GENESIS_API_KEY })
const result = await genesis.call('relays_deleteZone', {
  zone: '<zone>',
})

{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "genesis_call",
    "arguments": {
      "operation": "relays_deleteZone",
      "arguments": {
        "zone": "<zone>"
      }
    }
  }
}

Update zone settings (type, SOA)

PATCH/v1/relays/zones/{zone}

relays:writeAPI keys refusedrelays_updateZone

Parameters

zonepath · stringrequired

Request body application/json

type"NATIVE" | "MASTER" | "SLAVE"
soaobject
soa.primary_nsstring
soa.hostmasterstring (email)
soa.refreshinteger
min 60
soa.retryinteger
min 60
soa.expireinteger
min 3600
soa.ttlinteger
min 60

Responses

200Updated
Response fields
- idinteger
- namestring
- type"NATIVE" | "MASTER" | "SLAVE"
- record_countinteger
- dnssec_enabledboolean
- statusstring
- serialinteger
- nameserversstring[]
- soaobject
- created_atstring
- updated_atstring
404Error
4xx 5xxThe error envelope.

curl -X PATCH "https://os.one.ml/api/v1/relays/zones/$ZONE" \
  -H "Authorization: Bearer $GENESIS_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{}'

import { Genesis } from '@lifesi/genesis'

const genesis = new Genesis({ apiKey: process.env.GENESIS_API_KEY })
const result = await genesis.call('relays_updateZone', {
  zone: '<zone>',
  body: {},
})

{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "genesis_call",
    "arguments": {
      "operation": "relays_updateZone",
      "arguments": {
        "zone": "<zone>",
        "body": {}
      }
    }
  }
}

Dnssec

Read owned DNSSEC status; unavailable public key details return 503

GET/v1/relays/zones/{zone}/dnssec

relays:readAPI keys refusedrelays_getDnssec

Parameters

zonepath · stringrequired

Responses

200Stored DNSSEC state
Response fields
- zonestringrequired
- enabledbooleanrequired
- keysobject[]required
- ds_recordsobject[]required
- settingsobjectrequired
- settings.nsec3object | nullrequired
- settings.nsec3.algorithminteger
- settings.nsec3.flagsinteger
- settings.nsec3.iterationsinteger
- settings.nsec3.saltstring
- settings.auto_publish_cdsbooleanrequired
- settings.auto_publish_cdnskeybooleanrequired
401Error
403Error
404Error
503Error
4xx 5xxThe error envelope.

curl "https://os.one.ml/api/v1/relays/zones/$ZONE/dnssec" \
  -H "Authorization: Bearer $GENESIS_API_KEY"

import { Genesis } from '@lifesi/genesis'

const genesis = new Genesis({ apiKey: process.env.GENESIS_API_KEY })
const result = await genesis.call('relays_getDnssec', {
  zone: '<zone>',
})

{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "relays_getDnssec",
    "arguments": {
      "zone": "<zone>"
    }
  }
}

Records

List records in a zone

GET/v1/relays/zones/{zone}/records

relays:readAPI keys refusedrelays_listRecords

Parameters

zonepath · stringrequired
typequery · string
namequery · string
pagequery · integer
limitquery · integer

Responses

200Records
Response fields
- zonestring
- recordsobject[]
- records[].[].namestringrequired
- records[].[].typestringrequired
- records[].[].contentstringrequired
- records[].[].ttlinteger
  min 60 · max 86400 · default 3600
- records[].[].priorityinteger
  min 0 · max 65535
- records[].[].disabledboolean
  default false
- records[].[].commentstring
  max length 1000
- records[].[].tagsstring[]
- records[].[].idinteger
- records[].[].zonestring
- records[].[].created_atstring
- records[].[].updated_atstring
- metaobject
- meta.pageinteger
- meta.per_pageinteger
- meta.totalinteger
- meta.total_pagesinteger
404Error
4xx 5xxThe error envelope.

curl "https://os.one.ml/api/v1/relays/zones/$ZONE/records" \
  -H "Authorization: Bearer $GENESIS_API_KEY"

import { Genesis } from '@lifesi/genesis'

const genesis = new Genesis({ apiKey: process.env.GENESIS_API_KEY })
const result = await genesis.call('relays_listRecords', {
  zone: '<zone>',
})

{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "relays_listRecords",
    "arguments": {
      "zone": "<zone>"
    }
  }
}

Create one record, or up to 100 with {records:[...]}

POST/v1/relays/zones/{zone}/records

relays:writeAPI keys refusedrelays_createRecord

Parameters

zonepath · stringrequired

Request body application/json

Type: object | object

Responses

201Created
Response fields
A JSON object.
400Error
404Error
4xx 5xxThe error envelope.

curl -X POST "https://os.one.ml/api/v1/relays/zones/$ZONE/records" \
  -H "Authorization: Bearer $GENESIS_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "string",
    "type": "string",
    "content": "string"
  }'

import { Genesis } from '@lifesi/genesis'

const genesis = new Genesis({ apiKey: process.env.GENESIS_API_KEY })
const result = await genesis.call('relays_createRecord', {
  zone: '<zone>',
  body: {
    name: 'string',
    type: 'string',
    content: 'string',
  },
})

{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "relays_createRecord",
    "arguments": {
      "zone": "<zone>",
      "body": {
        "name": "string",
        "type": "string",
        "content": "string"
      }
    }
  }
}

Get a record

GET/v1/relays/zones/{zone}/records/{recordId}

relays:readAPI keys refusedrelays_getRecord

Parameters

recordIdpath · stringrequired
zonepath · stringrequired

Responses

200Record
Response fields
- namestringrequired
- typestringrequired
- contentstringrequired
- ttlinteger
  min 60 · max 86400 · default 3600
- priorityinteger
  min 0 · max 65535
- disabledboolean
  default false
- commentstring
  max length 1000
- tagsstring[]
- idinteger
- zonestring
- created_atstring
- updated_atstring
404Error
4xx 5xxThe error envelope.

curl "https://os.one.ml/api/v1/relays/zones/$ZONE/records/$RECORD_ID" \
  -H "Authorization: Bearer $GENESIS_API_KEY"

import { Genesis } from '@lifesi/genesis'

const genesis = new Genesis({ apiKey: process.env.GENESIS_API_KEY })
const result = await genesis.call('relays_getRecord', {
  zone: '<zone>',
  recordId: '<recordId>',
})

{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "genesis_call",
    "arguments": {
      "operation": "relays_getRecord",
      "arguments": {
        "zone": "<zone>",
        "recordId": "<recordId>"
      }
    }
  }
}

Delete a record

DELETE/v1/relays/zones/{zone}/records/{recordId}

relays:writeAPI keys refusedrelays_deleteRecord

Parameters

recordIdpath · stringrequired
zonepath · stringrequired

Responses

200Deleted
Response fields
- successboolean
- messagestring
404Error
4xx 5xxThe error envelope.

curl -X DELETE "https://os.one.ml/api/v1/relays/zones/$ZONE/records/$RECORD_ID" \
  -H "Authorization: Bearer $GENESIS_API_KEY"

import { Genesis } from '@lifesi/genesis'

const genesis = new Genesis({ apiKey: process.env.GENESIS_API_KEY })
const result = await genesis.call('relays_deleteRecord', {
  zone: '<zone>',
  recordId: '<recordId>',
})

{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "relays_deleteRecord",
    "arguments": {
      "zone": "<zone>",
      "recordId": "<recordId>"
    }
  }
}

Update a record

PATCH/v1/relays/zones/{zone}/records/{recordId}

relays:writeAPI keys refusedrelays_updateRecord

Parameters

recordIdpath · stringrequired
zonepath · stringrequired

Request body application/json

namestring
typestring
contentstring
ttlinteger
min 60 · max 86400
priorityinteger
min 0 · max 65535
disabledboolean
commentstring
max length 1000
tagsstring[]

Responses

200Updated
Response fields
- namestringrequired
- typestringrequired
- contentstringrequired
- ttlinteger
  min 60 · max 86400 · default 3600
- priorityinteger
  min 0 · max 65535
- disabledboolean
  default false
- commentstring
  max length 1000
- tagsstring[]
- idinteger
- zonestring
- created_atstring
- updated_atstring
404Error
4xx 5xxThe error envelope.

curl -X PATCH "https://os.one.ml/api/v1/relays/zones/$ZONE/records/$RECORD_ID" \
  -H "Authorization: Bearer $GENESIS_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{}'

import { Genesis } from '@lifesi/genesis'

const genesis = new Genesis({ apiKey: process.env.GENESIS_API_KEY })
const result = await genesis.call('relays_updateRecord', {
  zone: '<zone>',
  recordId: '<recordId>',
  body: {},
})

{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "relays_updateRecord",
    "arguments": {
      "zone": "<zone>",
      "recordId": "<recordId>",
      "body": {}
    }
  }
}

One Superintelligence, Inc. · Built from Genesis 0.1.12 and the live gateway on 2026-10-20. Support