Terms for Using REST API of ZONER a.s.

These terms govern the use of the REST API of ZONER a.s. for automated domain management and related services.

List of Available Actions in the REST API

• Domain Registration
• Domain Renewal
• Changing Nameservers
• Changing the Domain Holder
• Domain Transfer to ZONER Registrar
• Creating and Managing Domain Contacts
• Updating and Publishing DNS Records on Nameservers (A, AAAA, CNAME, MX, TXT, CAA, TLSA, and others)
• Managing TXT Records for fully automating the management of your SSL certificates using DNS authorization.

Rules for Using the REST API

Using the API is subject to the following rules:

1. 1. Contractual Conditions
   Using the REST API is conditioned upon complying with the current Contractual Conditions of ZONER a.s. These terms are available on our website.
2. 2. Abuse Restrictions
   The REST API must not be abused for:
   • Data Mining
   • Activities that are contrary to legal regulations or good morals
   • Deliberate damage or deterioration of the quality of the provider's services
   • Any other activities leading to the disruption of the integrity or security of ZONER's systems
   If abuse or excessive load on the interface is detected, access to the REST API (or a specific token) may be immediately blocked.
3. 3. Monitoring and Security
   ZONER a.s. monitors all requests to the REST API to ensure system stability and security. Access to the interface and request validation is governed by these mechanisms:
   • Authorization and IP Address Whitelisting: To gain access to the REST API, the customer is required to provide the IP address(es) of the device(s) from which the API will be used. Based on this registration, the customer will receive a unique Authorization Token.
   • Request Validation: All standard functions called through the REST API are validated by the system against the list of allowed IP addresses and the validity of the Authorization Token. Requests that do not meet both these conditions will be rejected.
   • Exception for Automatic SSL Management (DNS TXT): To automate the management of SSL certificates, editing TXT records in DNS without checking the source IP address is allowed within the REST API. Only a valid Authorization Token is required for these operations. This exception is exclusively for deploying one-time verification records and increases flexibility in deploying certificates in dynamic environments.
4. 4. Consequences of Abuse
   In case of serious abuse of the REST API, ZONER a.s. may forward logs for investigation to the relevant authorities, which will assess the criminal liability of the user. In case of violation of the rules, access to the REST API may be immediately revoked.

Technical Requirements

• REST API Documentation
  Detailed technical documentation for the REST API is available here.
• IP Address
  When requesting access to the REST API, it is necessary to specify the IP address from which the REST API will be used to ensure security and data protection.

Access to the REST API

• 1. Access requests to the REST API will be assessed individually.
• 2. Send your request via email to info@regzone.info.
• 3. The request must include your customer account number, the IP address you will connect from, and the reason for usage.

Responsibility and Reservations

• Warranties and Responsibility
  ZONER a.s. bears no responsibility for errors arising from the implementation of the REST API by a third party. However, it undertakes to resolve any technical issues on its side within the shortest possible time.
• Changes to the REST API
  ZONER a.s. reserves the right to modify or limit the available features of the REST API at any time without prior notice.

Contact

If you have any questions regarding the use of the REST API, you can contact us at: info@regzone.info.