Blog
2 min read

Cloudflare's Registrar API Lets Agents Search, Buy and Transfer Domains

During Birthday Week 2026 Cloudflare expanded its Registrar API (beta since April) with a test sandbox, transfers from other registrars and an endpoint describing 420+ extensions, made it available through Cloudflare MCP and the cf CLI, and rebuilt domain search. What it enables, at-cost pricing, and why agents should never buy domains without your approval.

Buying a domain has always meant a browser, a checkout page and a lot of upsells. On 30 September 2026, Cloudflare announced an expanded Registrar API designed for "people and agents": search, check, register, transfer and manage domains programmatically. (What Is a Domain Name?)

What's new

The Registrar API launched in beta in April 2026. The Birthday Week update added:

  • A sandbox — test registrar workflows without buying a domain or triggering a real transaction.
  • Transfers — move domains from other registrars into Cloudflare programmatically. (Transfer a Domain)
  • An extensions endpoint — details for each of the 420+ supported extensions, including their differing registry requirements.
  • Agent access through Cloudflare MCP and the new cf CLI, so an agent can check availability and register without a custom integration. (Cloudflare cf CLI, What Is MCP?)
  • A rebuilt domain search showing your exact term across every supported extension, results as you type, with first-year and renewal prices side by side.

Pricing

Cloudflare Registrar sells domains at cost — the registry's wholesale price with no markup — and shows renewal prices up front. During Birthday Week it ran first-year discounts on extensions like .io, .dev, .app and .tech. (Best Domain Registrar, Choose a Domain Extension)

The flow for an agent

The API is built around three steps:

  1. Search — get candidate names.
  2. Check — real-time availability and price.
  3. Register — a minimal request returning a workflow-style response that completes immediately or can be polled.

After one-time setup (account, API token, billing profile, default registrant contact, accepting the registration agreement), an agent can complete purchases without opening a browser.

Be careful: domain purchases are real money

Cloudflare's documentation is explicit that registrations made through the API are non-refundable, and recommends that agent flows run Check immediately before registering, show the price to the user, and get user approval before calling the registration endpoint.

If you let a coding agent manage domains:

  • Give it a scoped API token, not account-wide credentials. (Principle of Least Privilege)
  • Configure your agent to always ask before registration or transfer calls.
  • Watch for typosquat-style suggestions — an agent "helpfully" buying yourapp-app.dev you didn't want.

What it's good for

  • Spinning up a domain per customer, campaign or preview environment.
  • Moving a portfolio of domains into one place via scripted transfers.
  • Letting an assistant handle the boring parts — search, compare renewal prices, set DNS — while you approve the purchase. (Connect a Custom Domain to Your App)

Source: Cloudflare: Simplifying domains for people and agents · Registrar API docs

EasySpawn works with a domain from any registrar — Cloudflare included — and tells you exactly which DNS records to add, then sets up HTTPS automatically. See how it works or join the waitlist.

Related: DNS Records Explained · Cloudflare Birthday Week 2026 · What Is Cloudflare? · Subdomain vs Subdirectory

Keep reading