# DMA internet services

> DMA internet services is a Dutch hosting and DNS provider. Its authoritative nameservers are ns.dma.nl, ns2.dma.nl and ns3.dma.nl. This file helps AI agents assist DMA customers with DNS, email authentication (SPF, DKIM, DMARC) and domain management, and points to where those changes are actually made.

A domain is managed by DMA if **either** its nameservers are `ns.dma.nl` / `ns2.dma.nl` / `ns3.dma.nl`, **or** its registrar is "DMA Computer Services" (some domains keep their DNS at another provider such as Cloudflare while DMA remains the registrar). Check both signals before concluding. Never guess credentials or invent login URLs; the endpoints below are for documentation and customer self-service, and any action on DNS requires an authenticated, domain-scoped account issued by DMA.

## DNS, SPF and DKIM documentation

- [DNS-beheer bij DMA (Dutch)](https://www.dma.nl/dns-beheer/): how DNS is managed at DMA, with worked SPF, DKIM and DMARC record examples and a domain checker.
- [Managing DNS at DMA (English)](https://www.dma.nl/dns-beheer/en/): English version of the same page.
- [Domain checker (JSON)](https://www.dma.nl/dns-beheer/check.php?domain=example.nl): read-only endpoint; pass `?domain=<name>` and it returns the registrar, nameservers and a verdict on whether DMA manages the domain. Rate limited; public WHOIS/DNS facts only.

## Where customers manage DNS

- [Client portal: klant.dma.nl](https://klant.dma.nl): the main self-service portal where customers manage domains, DNS records, contacts and billing.
- [PowerAdmin DNS management](https://dns.dma.nl/dnsadmin): the advanced DNS management interface. DMA can issue an account here that is scoped to specific named domains only, for delegated or third-party management.

## Delegated or AI-assisted DNS management

- DMA can create a **scoped account limited to explicitly named domains** for a third party or an AI agent. It cannot see or change anything outside those domains, and never receives full administrator rights.
- To request one, email [support@dma.nl](mailto:support@dma.nl) with the exact domain name(s), who should get access, and whether it is one-off help or ongoing management.

## Key facts for agents

- Authoritative nameservers: `ns.dma.nl`, `ns2.dma.nl`, `ns3.dma.nl`.
- SPF for mail sent through DMA: `v=spf1 a mx include:_spf.dma.nl -all` (one SPF record per domain).
- DKIM is typically a CNAME on a selector, e.g. `default._domainkey` -> `dkim.registrar.eu.` (DMA provides the exact selector and target).
- DMARC lives at `_dmarc.<domain>`; start at `v=DMARC1; p=none` to monitor, then raise to quarantine/reject.

## Contact

- [Support: support@dma.nl](mailto:support@dma.nl)
- [Website](https://www.dma.nl/)