User Guide

Day-to-day use of the dnsmesh CLI and the dmp Python library.

• Clients — the Python CLI, the desktop + Android GUI (dnsmesh-app, alpha), and the Rust SDK + CLI (dnsmesh-rs, alpha). Pick the one that matches how you want to use the protocol.
• CLI reference — every subcommand, flag, and env var. Includes the dnsmesh tsig register flow that mints the per-user DNS UPDATE credential after M9.
• Identity and contacts — how identities are published, how contacts are pinned, how the zone-anchored user@host addressing works.
• Forward secrecy and prekeys — how the X3DH-style one-time prekeys keep past messages safe from long-term key compromise.
• Legacy HTTP-token registration — dnsmesh register and per-node bearer tokens. Pre-M9 path, preserved for back-compat. New deployments use dnsmesh tsig register (see CLI reference above).

---

Table of contents

• Clients
• CLI reference
• Identity and contacts
• Forward secrecy and prekeys
• Registering on a multi-tenant node