# Supported DNSSEC parameters

`GET /v1/domain/@id/dnssec/flags` · scope `domains:read`

Flag, protocol, algorithm and digest values used when adding a DNSSEC key.

## HTTP request

| Item | Value |
| --- | --- |
| URL | `https://api.tino.vn/v1/domain/@id/dnssec/flags` |
| Method | `GET` |
| Scope | `domains:read` |
| Header | `Authorization: Bearer <token>` |
| Content-Type | — (no body) |
| Tokens that can call it | app tokens (`tinoat_`), personal API tokens (`tinopat_`) |

## Parameters

| Name | In | Type | Required | Description |
| --- | --- | --- | --- | --- |
| `id` | path | integer | yes | Domain ID |

## Example request

```bash
curl "https://api.tino.vn/v1/domain/200001/dnssec/flags" \
  -H "Authorization: Bearer $TINO_TOKEN"
```

`$TINO_TOKEN` is a token with the scope `domains:read`. Path parameters in the example are sample values.

SDK ([SDK & examples](/en/docs/sdk)): Python `client.domains.get_dnssec_flags(id)`, Node.js `await client.domains.getDnssecFlags(id);`, PHP `$client->domains->getDnssecFlags($id);`.

## Example response

```json
{
 "success": true,
 "flag": null,
 "protocol": null,
 "algorithm": null,
 "digest": null,
 "form_type": null
}
```

Live sample from a test account with personal data masked; long arrays and strings are trimmed (`… N more item(s)`, `… N more line(s)`).