Registrars / Gandi
Track your Gandi domains.
nmspc reads your Gandi domains with a personal access token and reminds you before anything expires. It never changes them.
nmspc reads your Gandi domains through Gandi's v5 API: when each one expires, whether automatic renewal is on, its status and nameservers, and the DNS records of domains on Gandi's LiveDNS. nmspc lists what it finds and you choose which domains to track; nothing is added by itself. On Free it syncs when you press Sync now, on Pro every day.
Connect Gandi
Steps
- In Gandi, open Organizations, choose the organization that owns your domains and open its Sharing tab. At the bottom, press Create a token.
- Name it nmspc and pick how long it lasts. Gandi stops the token when it expires; then create a new one and paste it here again.
- Under resources, keep the whole organization or restrict the token to the domains you want tracked.
- Under permissions, turn on only See and renew domain names and leave everything else off. Gandi has no view-only permission for domains.
- Copy the token (Gandi shows it once) and paste it below. nmspc only reads, and stores the token encrypted.
What nmspc reads
- The domains of the organization the token belongs to.
- Each domain's expiry and registration dates, automatic renewal setting, status and nameservers.
- DNS records of domains on Gandi's LiveDNS, when the token may read them.
What nmspc never does
- Renew, transfer, register or delete a domain.
- Change DNS records, nameservers, contacts or auto-renew.
- Buy anything or touch your payment details.
Can the token change your account?
nmspc can't check what a Gandi token is allowed to do, so treat it as one that can change your Gandi account. nmspc only ever reads with it.
Before nmspc stores it, the workspace owner ticks “I allow nmspc to store a token that can change my Gandi account”.
If it doesn't connect
- Gandi refused to list domains. The token may have expired or been deleted, or it lacks See and renew domain names. Create a new token on the organization's Sharing tab and paste it again, or use CSV import instead.
- Gandi didn't accept the token. Use a personal access token (the older API key isn't accepted) that hasn't expired, with See and renew domain names turned on.
- Gandi tokens expire after the time chosen when they were made (7 days up to 1 year). When nmspc stops syncing, create a new token and paste it on nmspc's Settings page for Gandi.
About Gandi
- Website
- www.gandi.net
- API docs
- api.gandi.net/docs/
- IANA registrar ID
- 81 (Gandi SAS)
- RDAP base URL
- https://rdap.gandi.net/
- API sign-in
- Personal access tokens, limited to one organization, chosen products and chosen permissions, valid for 7 days up to 1 year. Gandi lists the older API key as deprecated.
- API limits
- 1,000 requests a minute from one IP address.
Try it free
Check any domain now, no account needed: when it expires and who it's registered with.
More Gandi domains than projects? You're among friends. The Domain Support Group has a chair for you.
Moving a domain away from Gandi
- You usually start the transfer at the new registrar and follow its process; at Gandi you only need the authorization code and the transfer lock off.
- Open the domain from Domains and choose the Transfer Out tab. Turn off Transfer Lock Enabled, then copy the code or press Generate a new code. Only someone with the right permissions, such as the owner or administrative contact, sees the code.
- For most endings the transfer is confirmed by email to the domain's owner. Gandi sends these within 24 hours, and after a five-day period the transfer completes by itself, sooner if the owner approves it from Gandi's email.
- Gandi's mail service for the domain stops as soon as it is transferred, and the email data is deleted seven days later. .uk domains use an IPS tag instead of a code, also set on the Transfer Out tab.
How do I create a Gandi token for nmspc?
In Gandi, open Organizations, choose the organization that owns your domains and open its Sharing tab. At the bottom, press Create a token. Give it a name, an expiry (7, 30, 60 or 90 days, or 1 year) and the products it may see: the whole organization or only selected domains.
Under permissions, turn on only See and renew domain names. Gandi shows the token once, so copy it before you press Done.
Can the Gandi token change my account?
nmspc can't check what a Gandi token is allowed to do, so treat it as one that can change your Gandi account. nmspc only ever reads with it.
The narrowest domain permission Gandi offers is See and renew domain names, which includes renewing, and Gandi's API has no way to show nmspc which permissions a token has. So the owner of the nmspc workspace ticks a box to allow storing it. The token is stored encrypted and only used for reading.
Why did nmspc stop syncing my Gandi domains?
Gandi tokens expire after the time chosen when they were made, at most a year. Gandi answers an expired or deleted token the same way as one without the right permission, so nmspc can only say it was refused. Create a new token and paste it again.
Does Gandi send renewal reminders?
Gandi emails reminders 2 months before the renewal end date (to the billing contact), 1 month and 15 days before (to the owner, admin and billing contacts), 1 day before, and on the day the domain is deleted at Gandi.
For .com and other generic endings, ICANN requires Gandi, like every accredited registrar, to email at least two reminders before a domain expires (about a month and about a week before) and one more within five days after, if it is neither renewed nor deleted.
nmspc adds its own reminders 60, 30, 14, 7, 1 days before.
How does automatic renewal work at Gandi?
Gandi doesn't renew a domain unless you turn automatic renewal on: from the domain's Overview page, or for several domains from the domain list in Advanced View. It is paid from the prepaid account first, then a saved payment method.
For most endings Gandi tries at 31, 15 and 1 days before the last possible renewal date, which can be earlier than the expiry date; for .app, .dev, .org, .net and .info the first try is 60 days before expiry. Turn it off at least 32 days before the last possible renewal date if you want to let a domain go. nmspc shows the new setting after its next sync.
Why doesn't nmspc show DNS records for some of my Gandi domains?
nmspc reads records only for domains on Gandi's LiveDNS nameservers, and only if the token may read them. Domains pointed at another DNS provider still get expiry and automatic renewal from Gandi.
Does nmspc renew my Gandi domains?
No. nmspc never renews, transfers or changes a domain. It reads your Gandi domains and reminds you 60, 30, 14, 7, 1 days before each one expires, by push notification on any plan and by email on Pro. Renewing stays with Gandi.
Sources
- Gandi API: Authentication
- Gandi API: Reference (rate limit, sharing_id)
- Gandi API: Domain API
- Gandi API: LiveDNS API
- Gandi API: Organization API
- Gandi Documentation: Manage API accesses with a Personal Access Token
- Gandi Documentation: List of permissions
- Gandi Documentation: How to Renew Your Domain Names Automatically
- Gandi Documentation: When Gandi Sends Email Reminders to Renew Your Domain
- Gandi Documentation: How to Transfer a Domain to Another Registrar
- Gandi Documentation: How to Find the Authorization Code (EPP Code)
- Gandi Documentation: How to Turn On Transfer Lock
- IANA: Registrar IDs (with RDAP base URLs)
- ICANN: Expired Registration Recovery Policy
- ICANN: FAQs for domain name holders (transfers)
Checked against these pages on 28 October 2026. Gandi changes its pages now and then; the source wins if it disagrees.
nmspc is independent and not affiliated with Gandi.