Gandi - Registrar & DNS

**Judgement** High-functionality, production-grade integration for Gandi domain and DNS management, best suited for experienced operators and tightly controlled environments. Excellent for read-only audits and scripted maintenance, but risky if granted broad write access without strong safeguards. **What it does well** - Exposes most of Gandi’s practical surface area: domain listing and details, DNS listing and modification, bulk DNS updates, snapshots, email forwarding, availability checks, and smart domain suggestions. - Includes protective features like DNS snapshots, confirmation prompts, record-type validation, and explicit guidance on token scopes and security best practices. - Offers rich CLI-style scripts plus clear natural-language usage patterns, making it easier to understand and review what the agent will do. **Key risks** - **Destructive potential:** Can add/update/delete DNS records, perform bulk DNS replacement, restore snapshots, and manage email forwards (including catch‑all), which can break websites/email or silently redirect mail. - **Financial and account risk:** Future domain registration and renewal features will create financial transactions; even now, misconfiguration could impact critical services. - **External dependency:** Fully dependent on Gandi’s API availability and the correctness/permissions of stored API tokens. **Recommended scenarios** - Use **read-only tokens by default** for domain/DNS inspection, availability checks, SSL status, and email-forward auditing. - Reserve **write-scoped tokens** for carefully reviewed, human-initiated maintenance workflows (e.g., scheduled DNS migrations, adding specific records, adjusting forwards), ideally in non‑production first. - Combine with organizational controls: environment separation (staging vs. production), secret management for tokens, and policy rules that disallow destructive operations without explicit human confirmation.