# set

URL: /business/nouns/dns-record/set · Id: `verb:DNSRecord.set` · Call: `await $.DNSRecord.set({ … })` (SDK) or the `do` tool at `https://api.sb/mcp`. Inputs says what to pass, Outputs what returns, When it waits who approves.

> Set adds or changes a Startup-owned DNS Record through a Change, previewed against what the Domain answers today.

Set adds or changes a [Startup](/business/nouns/startup)-owned [DNS Record](/business/nouns/dns-record) through a [Change](/business/nouns/change), previewed against what the [Domain](/business/nouns/domain) answers today.

## Inputs
| Input | Type | Required | Description |
| --- | --- | --- | --- |
| `domain` | [Domain](/business/nouns/domain) | Yes | The Domain the record answers for. |
| `type` | `string` | Yes | The record type. |
| `name` | `string` | Yes | The label, such as `@` or `_dmarc`. |
| `value` | `string` | Yes | The answer. |

## Outputs
| Output | Type | Required | Description |
| --- | --- | --- | --- |
| `record` | [DNS Record](/business/nouns/dns-record) | Yes | The DNS Record, with its status. |

## Effects
- Emits [`DNSRecord.set`](/business/events/DNSRecord.set).
- Performed by the [Reliability Engineer](/agents/engineering/reliability-engineer).
- Two-way: it runs at once, in the `try`, `send` and `do` modes.
- Refuses a record the platform owns.
- A revert of its Change restores the previous answer.

## Refuses when
| Check | Error | Fix | Then call |
| --- | --- | --- | --- |
| The key is valid, but its scopes do not allow this operation. | [`forbidden`](/code/api/errors/forbidden) | Use a key whose scopes cover the operation, or ask an owner of the namespace to grant them. | [DNSRecord.set](/business/nouns/dns-record/set) |
| A record the platform owns | [`refused`](/code/api/errors/refused) | Clear what the check names, then call it again. | [DNSRecord.set](/business/nouns/dns-record/set) |

## When it waits
| Gate | Default |
| --- | --- |
| Decision class | Low: two-way, nothing at stake |
| [Delay window](/systems/trust-and-governance/controls/one-way-windows) | None: it runs once review passes. |
| Limit | The call [Limit](/business/nouns/limit) of the [Permission](/business/nouns/permission) it runs under. |
| Over the Limit | It waits `pending` for an [Approval](/business/nouns/approval) from the [Founder](/agents/founding/founder). Approved, it runs; refused, it ends `refused` with [`limit-exceeded`](/code/api/errors/limit-exceeded); unanswered by its deadline, it ends `canceled`. |

## Example

**Ask**

```text
Set the latest DNS record with a domain.
```

**API**

```bash
curl -X POST https://api.sb/tutorloop.com/dns-records/set \
  -H "Authorization: Bearer $STARTUP_BUILDER_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"domain":"domain_1","type":"a","name":"TutorLoop","value":"Example value"}'
```

```json
{
  "api": "https://api.sb/tutorloop.com",
  "record": {
    "$id": "https://api.sb/tutorloop.com/dns-records/dns_record_1",
    "$type": "DNSRecord",
    "type": "a",
    "name": "_dmarc",
    "value": "192.0.2.10",
    "owner": "platform"
  },
  "action": {
    "$id": "https://api.sb/tutorloop.com/actions/action_1",
    "operation": "DNSRecord.set",
    "status": "done"
  },
  "links": {
    "self": "https://api.sb/tutorloop.com/actions/action_1"
  }
}
```

**SDK**

```ts
import { $ } from 'startup-builder'

const record = await $.DNSRecord.set({ domain: 'domain_1', type: 'a', name: 'TutorLoop', value: 'Example value' })
```

**CLI**

```bash
npx startup-builder do DNSRecord.set --json '{"domain":"domain_1","type":"a","name":"TutorLoop","value":"Example value"}'
```

**MCP**

```json
{
  "name": "do",
  "arguments": {
    "code": "return await $.DNSRecord.set({ domain: 'domain_1', type: 'a', name: 'TutorLoop', value: 'Example value' })"
  }
}
```