Direct to Cloudflare. No relay. No subscription.

The complete Cloudflare
toolkit for your Mac

Name: DNSShift
Price: 39.99 USD

DNS records, bulk zone tools, sub domains, Workers KV, R2 Storage, Zero Trust Tunnels, Workers, and Pages — one native macOS app that talks straight to Cloudflare's API. No menu-bar-only compromises, no cloud relay, no monthly fee.

Get DNSShift — $39.99

🖥️ Native macOS app 🔒 Keychain-secured token ⚡ Direct to Cloudflare API ✨ $39.99 one-time

See It In Action

A native app, built for real work

A quick look at DNSShift running on macOS.

What's Inside

Everything you need to run your zones

Core DNS management, done properly, with real native macOS UI — search, list/grid views, and pagination on every screen.

DNS Record Management

Full CRUD for A, AAAA, CNAME, MX, TXT, SRV and more, with proxy toggling and TTL control, across every zone in your account.

Bulk Import & Export

Bulk-update or bulk-delete DNS records across multiple domains at once, and import or export entire zone configurations.

Sub Domain Manager

See every subdomain across every zone in one searchable list, and add new CNAME subdomains to one or many zones at once.

SSL/TLS Management

Encryption mode, edge certificates, Always Use HTTPS, minimum TLS version, TLS 1.3, HSTS, and Universal SSL — per zone, styled after Cloudflare's own dashboard.

Multi-Account Dashboard

Switch between Cloudflare accounts and see requests, bandwidth, page views, and visitor analytics over 24 hours, 7 days, or 30 days.

DNS Change History

Every add, edit, and delete is logged locally with the record, zone, and timestamp — so you always know what changed and when.

Built the Native Way

Light & dark mode, custom accent colors, adjustable type size, global hotkeys, and search + list/grid views on every list in the app.

Why DNSShift

Not a menu-bar shortcut. A full app.

Direct to Cloudflare, nothing in between

Your API token is stored in the macOS Keychain and used only to talk to Cloudflare's own API. There's no relay server, no analytics backend, and no third party ever sees your zone data.

One app, five Cloudflare products

DNS is just the start. DNSShift also manages Workers KV, R2 Storage, Zero Trust Tunnels, Workers, and Pages — all from the same window, with the same consistent UI.

Sandboxed, and it stays that way

DNSShift runs inside the macOS App Sandbox with only the entitlements it needs — network access and the file access you explicitly grant for R2 uploads and downloads.

Developer Platform

Beyond DNS: the full Cloudflare stack

No other native Mac app manages this much of Cloudflare from one window.

Workers KV

• Create, rename, and delete KV namespaces
• Browse and search keys, with cursor-based paging for large namespaces
• Read, write, and delete key/value pairs with expiration (TTL)
• List or grid view, same as every other list in the app

R2 Storage

• Create and delete R2 buckets
• Upload and download objects with the native macOS file picker
• Browse, search, and bulk-delete objects in a bucket
• Live upload/download progress in the toolbar

Zero Trust Tunnels

• Create and delete Cloudflare Tunnels
• See connector status and active connections at a glance
• Add and remove public hostname routes per tunnel
• Copy the Tunnel ID to bring a connector online with one click

Workers

• See every deployed Worker script in your account
• Manage routes that point zone traffic to a Worker
• Manage secrets — write-only, exactly like wrangler secret put
• Live tail real-time logs straight from the app

Pages

View every Pages project and its deployment history, retry a failed deployment or roll back to a previous one, manage custom domains, and manage environment variables for production and preview — all without leaving your Mac.

Privacy & Security

Your zones, your Mac, nobody else's server

No Middleman

Every request goes straight from your Mac to Cloudflare's API. There is no relay server, and DNSShift does not run its own backend to route your data through.

Keychain Storage

Your Cloudflare API token is stored in the macOS Keychain, never in plain text, and never leaves your Mac except to authenticate directly with Cloudflare.

Sandboxed App

DNSShift runs in the macOS App Sandbox and only requests the entitlements it actually uses — networking, and file access you explicitly grant for R2 uploads/downloads.

Comparison

How DNSShift compares

We checked so you don't have to. Named apps replaced with "App A/B/C" — pricing and features verified from their own App Store listings.

Feature	BEST DNSShift $39.99 one-time	App A$4.99one-time	App B$49.99one-time	App C$17.99/yrsubscription
DNS Record Management	✅	✅	✅	✅
Bulk Import / Export	✅	❌	❌	❌
Sub Domain Manager (all zones)	✅	❌	❌	❌
SSL/TLS Management (mode, certs, HSTS)	✅	❌	❌	❌
Multi-Account Support	✅	❌	✅	✅
Zone Analytics Dashboard	✅	❌	✅	✅
DNS Change History	✅	❌	❌	❌
Workers KV Management	✅	❌	❌	✅
R2 Storage Management	✅	❌	❌	✅
Zero Trust Tunnel Management	✅	❌	❌	❌
Workers Management + Live Logs	✅	❌	❌	⚠️
Pages Management	✅	❌	❌	⚠️
Full Native Mac Window App	✅	✅	❌	❌
Search + List/Grid Views	✅	❌	⚠️	❌
Keychain-Secured Token	✅	✅	✅	❌
Global Hotkeys	✅	❌	✅	❌
Recurring Fee	✅ None	✅ None	✅ None	❌ Yearly

Pricing

One price. Everything included. Forever.

No subscription tiers to unlock the app itself. No feature gating. Buy once and own it.

ONE-TIME PURCHASE

$39.99

USD · One-time

Own it forever

No subscription, no ads, no data collection. Buy once, own forever.
All future updates to the current feature set are included.

Full DNS record management, all record types
Bulk import/export + Sub Domain Manager across all zones
Multi-account dashboard with zone analytics
Workers KV, R2 Storage, Zero Trust Tunnels
Workers management with live tail logs
Pages deployments, custom domains & env vars
DNS change history + Keychain-secured token