Features
Resources
DNS Provider Sync · DigitalOcean
DigitalOcean DNS is free, simple, and probably running more production infrastructure than anyone admits. DNS Spy gives it the monitoring layer it doesn't come with.
No credit card required · 7-day trial · Read-only API access
DigitalOcean DNS doesn't offer zone transfers, which historically meant DNS monitoring tools could only guess at your records through wordlist probing. Provider sync goes straight to the DigitalOcean API instead: every A, AAAA, CNAME, MX, TXT, SRV, and CAA record in your zone is imported exactly as configured — including the unusually named ones no wordlist would find — and re-synced on a schedule so new records are picked up automatically.
DigitalOcean represents the zone apex as "@" — in record names and even inside record data, where a CNAME or MX can point at "@" to mean the domain itself. DNS Spy normalizes all of it during import: apex records land as proper root records, "@" targets expand to your domain name, and trailing dots are cleaned up. What you see in DNS Spy matches what resolvers actually answer.
DigitalOcean infrastructure is dynamic by design — droplets are rebuilt, floating IPs move, load balancers come and go. Every one of those changes ripples into DNS, and a stale A record pointing at a released IP is both an outage and a subdomain-takeover risk. DNS Spy alerts you when records change, when they stop resolving, and when your nameservers disagree with each other — from outside DigitalOcean's own network, where your users actually are.
In the DigitalOcean control panel, go to API → Tokens and click Generate New Token.
Choose Custom Scopes and grant only domain read access — DNS Spy needs nothing else.
Paste the token into DNS Spy under Team Settings → DNS Providers and click Test Connection.
Import your domains — each arrives with its complete record list and starts scanning immediately.
Read more about how imports, recurring sync, and resolver-based monitoring work on the DNS Provider Sync feature page.
Generate a personal access token with read-only domain scope (API → Tokens → Custom Scopes), connect it to DNS Spy, and import your domains. DNS Spy monitors every record from resolvers worldwide and alerts on changes, deletions, and nameserver sync issues.
No. DigitalOcean does not offer AXFR, so the API is the only way to enumerate a complete zone. DNS Spy's provider sync uses that API with a read-only token and re-checks it on a schedule.
Yes. DigitalOcean's custom token scopes let you grant only domain read access. DNS Spy never needs — and never asks for — write access to your infrastructure.
DigitalOcean's "@" apex convention is normalized during import: "@" names become proper apex records and "@" targets expand to your domain name, so monitoring matches exactly what public resolvers return.
Connect with a read-only token, import every record, and get alerted the moment anything changes. Free for 7 days.
DigitalOcean is a trademark of its respective owner. DNS Spy is not affiliated with or endorsed by DigitalOcean.
Features
Resources