DNS Record Management
Full CRUD for A, AAAA, CNAME, MX, TXT, SRV and more, with proxy toggling and TTL control, across every zone in your account.
Direct to Cloudflare. No relay. No subscription.
The complete Cloudflare DNS manager
built for your Mac
Full Cloudflare DNS management, bulk zone tools, sub domains, Workers KV, R2 Storage, Zero Trust Tunnels, Workers, and Pages, all in one native macOS app that talks straight to Cloudflare's API. No menu-bar-only compromises, no cloud relay, no monthly fee.
🖥️ Native macOS app
🔒 Keychain-secured token
⚡ Direct to Cloudflare API
✨ $39.99 one-time
See It In Action
A native app, built for real work
A quick look at DNSShift running on macOS.
What's Inside
Everything you need to run your zones
Core Cloudflare DNS management, done properly, with real native macOS UI: search, list/grid views, and pagination on every screen.
Bulk DNS Editor, Import & Export
Bulk-update or bulk-delete DNS records across multiple domains at once with a dedicated bulk DNS editor, and import or export entire zone configurations.
Sub Domain Manager
See every subdomain across every zone in one searchable list, and add new CNAME subdomains to one or many zones at once.
SSL/TLS Management
Encryption mode, edge certificates, Always Use HTTPS, minimum TLS version, TLS 1.3, HSTS, and Universal SSL, per zone, styled after Cloudflare's own dashboard.
Multi-Account Dashboard
Switch between Cloudflare accounts and see requests, bandwidth, page views, and visitor analytics over 24 hours, 7 days, or 30 days.
DNS Change History & Rollback
Every add, edit, and delete is logged locally with the record, zone, and timestamp, so you always know what changed and when, with one-click rollback for eligible entries.
Automation & Dynamic DNS
Automatically update a Cloudflare DNS record when your public IP changes (dynamic DNS), on a schedule, or via an ntfy.sh or webhook trigger, then toggle proxy, purge cache, or send a notification.
Built the Native Way
Light & dark mode, custom accent colors, adjustable type size, global hotkeys, and search + list/grid views on every list in the app.
Why DNSShift
Not a menu-bar shortcut. A full app.
Direct to Cloudflare, nothing in between
Your API token is stored in the macOS Keychain and used only to talk to Cloudflare's own API. There's no relay server, no analytics backend, and no third party ever sees your zone data.
One app, five Cloudflare products
DNS is just the start. DNSShift also manages Workers KV, R2 Storage, Zero Trust Tunnels, Workers, and Pages, all from the same window, with the same consistent UI.
Signed, notarized, and Keychain-backed
DNSShift is signed with a Developer ID certificate and notarized by Apple, so Gatekeeper verifies it before it ever runs. Your Cloudflare API token lives in the macOS Keychain, never in plain text.
Developer Platform
Beyond DNS: the full Cloudflare stack
No other native Mac app manages this much of Cloudflare from one window.
Workers KV
- • Create, rename, and delete KV namespaces
- • Browse and search keys, with cursor-based paging for large namespaces
- • Read, write, and delete key/value pairs with expiration (TTL)
- • List or grid view, same as every other list in the app
R2 Storage
- • Create and delete R2 buckets
- • Upload and download objects with the native macOS file picker
- • Browse, search, and bulk-delete objects in a bucket
- • Live upload/download progress in the toolbar
Zero Trust Tunnels
- • Create and delete Cloudflare Tunnels
- • See connector status and active connections at a glance
- • Add and remove public hostname routes per tunnel
- • Copy the Tunnel ID to bring a connector online with one click
Workers
- • See every deployed Worker script in your account
- • Manage routes that point zone traffic to a Worker
- • Manage secrets, write-only, exactly like
wrangler secret put - • Live tail real-time logs straight from the app
Pages
View every Pages project and its deployment history, retry a failed deployment or roll back to a previous one, manage custom domains, and manage environment variables for production and preview, all without leaving your Mac.
Privacy & Security
Your zones, your Mac, nobody else's server
No Middleman
Every request goes straight from your Mac to Cloudflare's API. There is no relay server, and DNSShift does not run its own backend to route your data through.
Keychain Storage
Your Cloudflare API token is stored in the macOS Keychain, never in plain text, and never leaves your Mac except to authenticate directly with Cloudflare.
Notarized by Apple
DNSShift is signed with a Developer ID certificate, notarized, and runs with Apple's hardened runtime, so Gatekeeper verifies it before it launches. That verified-identity model, not App Sandbox confinement, is what the current build relies on.
Comparison
How DNSShift compares
We checked so you don't have to. Named apps replaced with "App A/B/C": pricing and features verified from their own App Store listings.
| Feature |
BEST
DNSShift
$39.99
one-time
|
App A$4.99one-time
|
App B$49.99one-time
|
App C$17.99/yrsubscription
|
|---|---|---|---|---|
| DNS Record Management | ✅ | ✅ | ✅ | ✅ |
| Bulk Import / Export | ✅ | ❌ | ❌ | ❌ |
| Sub Domain Manager (all zones) | ✅ | ❌ | ❌ | ❌ |
| SSL/TLS Management (mode, certs, HSTS) | ✅ | ❌ | ❌ | ❌ |
| Multi-Account Support | ✅ | ❌ | ✅ | ✅ |
| Zone Analytics Dashboard | ✅ | ❌ | ✅ | ✅ |
| DNS Change History | ✅ | ❌ | ❌ | ❌ |
| Workers KV Management | ✅ | ❌ | ❌ | ✅ |
| R2 Storage Management | ✅ | ❌ | ❌ | ✅ |
| Zero Trust Tunnel Management | ✅ | ❌ | ❌ | ❌ |
| Workers Management + Live Logs | ✅ | ❌ | ❌ | ⚠️ |
| Pages Management | ✅ | ❌ | ❌ | ⚠️ |
| Full Native Mac Window App | ✅ | ✅ | ❌ | ❌ |
| Search + List/Grid Views | ✅ | ❌ | ⚠️ | ❌ |
| Keychain-Secured Token | ✅ | ✅ | ✅ | ❌ |
| Global Hotkeys | ✅ | ❌ | ✅ | ❌ |
| Recurring Fee | ✅ None | ✅ None | ✅ None | ❌ Yearly |
Pricing
One price. Everything included. Forever.
No subscription tiers to unlock the app itself. No feature gating. Buy once and own it.
ONE-TIME PURCHASE
$39.99
USD · One-time
Own it forever
No subscription, no ads, no data collection. Buy once, own forever.
All future updates to the current feature set are included.
- Full DNS record management, all record types
- Bulk import/export + Sub Domain Manager across all zones
- Multi-account dashboard with zone analytics
- Workers KV, R2 Storage, Zero Trust Tunnels
- Workers management with live tail logs
- Pages deployments, custom domains & env vars
- Automation rules, including dynamic DNS updates
- DNS change history with rollback + Keychain-secured token
Secure checkout via Gumroad · instant download
FAQ
Common questions
Everything people ask before trying a Cloudflare DNS manager for the first time.
Is DNSShift affiliated with Cloudflare?
No. DNSShift is an independent Mac app built by Code There. It's not affiliated with, endorsed by, or sponsored by Cloudflare, Inc. Every mention of Cloudflare on this site and in the app describes API compatibility only.
Do I need my own Cloudflare account and API token?
Yes. DNSShift connects to the Cloudflare account you already have, using a Cloudflare User API Token you create yourself. DNSShift has no account system or login of its own.
Is DNSShift a subscription?
No. DNSShift is a one-time purchase of $39.99. All future updates to the current feature set are included at no extra cost, with no recurring fee.
Can DNSShift act like a dynamic DNS client and update my IP automatically?
Yes, through Automation rules. DNSShift can watch your public IP address and update a Cloudflare DNS record automatically, on a schedule, or in response to a webhook or ntfy.sh notification, similar to a dynamic DNS client, built into a full Cloudflare management app.
What Mac do I need to run DNSShift?
DNSShift requires macOS 14 (Sonoma) or later, and runs natively on both Apple Silicon and Intel Macs.
Where is my Cloudflare API token stored?
In the macOS Keychain on your own Mac, encrypted by the operating system. It's never written to disk in plain text and never sent anywhere except directly to Cloudflare's API.
Does DNSShift work with more than one Cloudflare account?
Yes. The multi-account dashboard lets you switch between Cloudflare accounts and see zone analytics for each one, all from the same app.