---
title: TSIG Keys
summary: A TSIG (Transaction Signature) key is set of shared credentials used to secure zone transfers between DNS servers.
url: https://www.fastly.com/documentation/reference/api/dns/tsig-keys
---

A TSIG (Transaction Signature) key is set of shared credentials used to secure zone transfers between DNS servers.

## Data model

| Field | Type | Description |
|-------|------|-------------|
| `errors` | array |  |

## Data model

| Field | Type | Description |
|-------|------|-------------|
| `algorithm` | string | The algorithm of the TSIG key. |
| `description` | string | A freeform descriptive note. |
| `name` | string | The name of the TSIG key. |
| `secret` | string | The Base64 encoded secret key. |

## Data model

| Field | Type | Description |
|-------|------|-------------|
| `algorithm` | string | The algorithm of the TSIG key. |
| `description` | string | A freeform descriptive note. |
| `name` | string | The name of the TSIG key. |
| `secret` | string | The Base64 encoded secret key. |

## Data model

| Field | Type | Description |
|-------|------|-------------|
| `algorithm` | string | The algorithm of the TSIG key. |
| `created_at` | string | Date and time in ISO 8601 format. (Read-only) |
| `description` | string | A freeform descriptive note. |
| `id` | string | TSIG Key Identifier (UUID). |
| `name` | string | The name of the TSIG key. |
| `updated_at` | string | Date and time in ISO 8601 format. (Read-only) |

## API endpoints

### Get TSIG keys

**GET** `/dns/v1/tsig-keys`

Retrieve a paginated list of all TSIG keys.

**Parameters:**

| Name | Type | In | Required | Description |
|------|------|----|---------|--------------|
| `cursor` | string | query | No | Cursor value from the <code>next_cursor</code> field of a previous response, used to retrieve the next page. To request the first page, this should be empty. |
| `limit` | integer | query | No | Limit how many results are returned. |
| `name` | string | query | No | Filters the list to return only TSIG keys that contain the provided name. |
| `sort` | string | query | No | The order in which to list the results. |

### Create TSIG key

**POST** `/dns/v1/tsig-keys`

Create a new TSIG key.

### Get TSIG key

**GET** `/dns/v1/tsig-keys/{tsig_key_id}`

Retrieve a specific TSIG key.

**Parameters:**

| Name | Type | In | Required | Description |
|------|------|----|---------|--------------|
| `tsig_key_id` | string | path | Yes | The TSIG Key Identifier (UUID). |

### Delete TSIG key

**DELETE** `/dns/v1/tsig-keys/{tsig_key_id}`

Delete a specific TSIG key.

**Parameters:**

| Name | Type | In | Required | Description |
|------|------|----|---------|--------------|
| `tsig_key_id` | string | path | Yes | The TSIG Key Identifier (UUID). |

### Update TSIG key

**PATCH** `/dns/v1/tsig-keys/{tsig_key_id}`

Update a specific TSIG key.

**Parameters:**

| Name | Type | In | Required | Description |
|------|------|----|---------|--------------|
| `tsig_key_id` | string | path | Yes | The TSIG Key Identifier (UUID). |