IQLink REST API

Manage DNS, CDN proxy, email forwarding, WAF, analytics and more.

Base URL

https://api.iqlink.pl

Rate Limits

120 requests per minute per IP. Responses include standard rate limit headers.

Content Type

All requests and responses use application/json.

Authentication

The API uses JWT Bearer tokens from Supabase Auth. Include the token in the Authorization header:

Authorization: Bearer <access_token>

Login via OTP (for CLI / API clients)

{
  "email": "user@example.com"
}

// Request
{
  "email": "user@example.com",
  "token": "123456"
}

// Response
{
  "access_token": "eyJ...",
  "refresh_token": "abc...",
  "user": { "id": "uuid", "email": "user@example.com" }
}

Token Refresh

{
  "refresh_token": "abc..."
}

CLI Tool

IQLink provides a command-line tool for managing your domains from the terminal.

Install

# Linux (amd64)
curl -Lo iqlink https://docs.iqlink.pl/dl/iqlink-linux-amd64
chmod +x iqlink && sudo mv iqlink /usr/local/bin/

# Linux (arm64)
curl -Lo iqlink https://docs.iqlink.pl/dl/iqlink-linux-arm64
chmod +x iqlink && sudo mv iqlink /usr/local/bin/

# macOS (Apple Silicon)
curl -Lo iqlink https://docs.iqlink.pl/dl/iqlink-darwin-arm64
chmod +x iqlink && sudo mv iqlink /usr/local/bin/

# macOS (Intel)
curl -Lo iqlink https://docs.iqlink.pl/dl/iqlink-darwin-amd64
chmod +x iqlink && sudo mv iqlink /usr/local/bin/

Quick Start

# Login
iqlink login user@example.com

# List domains
iqlink zones

# List DNS records
iqlink dns example.com

# Add A record with proxy
iqlink dns add example.com A www 1.2.3.4 --proxy

# Toggle proxy on/off
iqlink proxy on example.com <record-id>

# Check security score
iqlink security example.com

# View analytics
iqlink analytics example.com --period 7d

All Commands

Errors

Errors return JSON with an error field:

{
  "error": "domain not found"
}

Zones (Domains)

// Response
[
  {
    "id": "bd2b5609-...",
    "domain": "example.com",
    "status": "active",
    "ns_verified": true,
    "created_at": "2026-03-01T12:00:00Z"
  }
]

{ "domain": "example.com" }

// Response
{
  "tld_delegated": true,
  "authoritative": true,
  "expected_ns": ["ns1.iqlink.pl", "ns2.iqlink.pl"],
  "found_ns": ["ns1.iqlink.pl", "ns2.iqlink.pl"]
}

DNS Records

// Response
[
  {
    "id": "base64-encoded-id",
    "type": "A",
    "name": "example.com",
    "content": "1.2.3.4",
    "ttl": 300,
    "proxied": true,
    "proxiable": true,
    "port": 443
  }
]

{
  "type": "A",
  "name": "www",
  "content": "1.2.3.4",
  "ttl": 300,
  "proxied": false
}

{ "template_id": "google-workspace" }

Proxy (CDN)

Per-record proxy toggle (Cloudflare-style orange cloud). When enabled, traffic flows through IQLink edge nodes with TLS termination, caching, WAF, and DDoS protection.

{ "proxied": true }

{
  "ssl_mode": "full",       // flexible | full | strict
  "cache_enabled": true,
  "cache_ttl": 3600,
  "region": "pl"            // pl | eu | global
}

Email Forwarding

Forward emails to external addresses. Auto-creates MX, SPF, DMARC records. DKIM-signed via iqlink.pl.

// Response
{
  "forwards": [
    {
      "id": "uuid",
      "alias": "contact",
      "destinations": ["user@gmail.com"],
      "enabled": true,
      "is_catchall": false
    }
  ],
  "dns_ready": true,
  "limit": 5,
  "count": 1
}

{
  "alias": "contact",
  "destinations": ["user@gmail.com", "backup@example.com"]
}

WAF / Firewall

Per-zone Web Application Firewall powered by Coraza + OWASP CRS 4.15.0.

{
  "mode": "block",            // off | monitor | block
  "paranoia_level": 1,        // 1-4
  "rate_limit": 100,          // requests per second
  "block_ai_bots": false,
  "browser_check": false,
  "hotlink_protection": false,
  "wordpress_hardening": false
}

Cache

// Purge everything
{ "purge_everything": true }

// Purge specific URLs
{ "files": ["https://example.com/style.css"] }

Analytics

// Response
{
  "summary": {
    "total_requests": 12451,
    "total_bytes": 1288490188,
    "cache_hit_rate": 78.5,
    "unique_ips": 3201
  },
  "status_codes": { "2": 11118, "3": 1021, "4": 262, "5": 50 },
  "timeseries": [ ... ]
}

Security Check

// Response
{
  "score": 8,
  "total": 10,
  "checks": [
    {
      "category": "DNS",
      "name": "NS delegation",
      "status": "pass",
      "detail": "Using IQLink nameservers"
    },
    {
      "category": "SSL",
      "name": "TLS version",
      "status": "pass",
      "detail": "TLS 1.3"
    },
    {
      "category": "DNS",
      "name": "DNSSEC",
      "status": "fail",
      "detail": "Not enabled",
      "fix": "iqlink dnssec enable example.com"
    }
  ]
}

DNSSEC

Health Status

Plans & Billing

Plans

{ "plan": "pro" }  // pro | business