install

Additional install commands

macOS

Homebrewverified · 100%

brew install lexicon

local Homebrew formula metadata

Linux

Nixverified · 92%

nix profile install nixpkgs#lexicon

nixpkgs package indexes · lexicon · source: raw.githubusercontent.com

Ubuntu aptverified · 92%

sudo apt install lexicon

Ubuntu 24.04 LTS package indexes · lexicon · source: archive.ubuntu.com

overview

Package summary

Manipulate DNS records on various DNS providers in a standardized way

Project links

Commands and aliases

lexicon

history

Project history and usage

DNS-Lexicon, packaged by Homebrew as `lexicon`, is a CLI and Python library for manipulating DNS records through a provider-neutral interface. Its practical niche is automation: scripts and certificate clients can create TXT, A, CNAME, and other records without learning each DNS provider API.

Project history

Lexicon began in the `AnalogJ/lexicon` repository, created on February 2, 2016. The original project described itself as a standardized way to manipulate DNS records across providers and accumulated a large provider-oriented ecosystem.

The project moved to the `dns-lexicon/dns-lexicon` repository starting with version 3.20.0. The old repository README directs users and issue reporters to the new repository, while the DNS-Lexicon changelog records 3.20.0 on December 12, 2024 and subsequent 3.20.x/3.21.x releases in the new line.

Adoption history

Lexicon's adoption is tied to ACME DNS-01 automation. The PyPI project page for `dns-lexicon` version 2.1.22 stated that Lexicon was designed for automation, specifically Let's Encrypt, and the official docs include installation, Docker, configuration, provider options, integration, and developer-guide sections for adding providers.

How it is used

As a CLI, Lexicon takes a provider name followed by create, update, delete, or list operations for DNS records. As a library, it exposes the same idea to Python code through a common client/configuration layer. Credentials live in provider-specific configuration, so automation can swap DNS providers with less custom glue.

Why package nerds care

Package nerds care about Lexicon because it is adapter glue packaged as a first-class tool. It turns dozens of vendor APIs into one command surface, making certificate automation, dynamic DNS workflows, and infrastructure scripts more portable.

Timeline

2016: The original `AnalogJ/lexicon` repository was created on February 2, 2016.
2019: DNS-Lexicon changelog entries show the 3.1.x and 3.2.x release line in active use.
2024: Version 3.19.0 was released from the original repository on December 6, 2024.
2024: Version 3.20.0 on December 12, 2024 marked the move to `dns-lexicon/dns-lexicon`.
2026: The documentation changelog records 3.25.2 on May 10, 2026.

Related projects

Lexicon is related to Let's Encrypt and ACME DNS-01 clients such as Certbot and dehydrated hooks. It also sits beside DNS automation tools such as lego, acme.sh integrations, octoDNS, and provider-specific DNS plugins.

Sources

security posture

No protected-tool coverage found yet

No matching local secret-handling manifest was found for lexicon. Nucleus package metadata is still published here so future coverage has a stable package URL.

Install behavior

No Homebrew post-install hook is recorded in formula metadata.
Homebrew bottle metadata is available for 6 platform targets.
Installs with 4 runtime dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix: $CONFIG_DIR/lexicon.yml$CONFIG_DIR/lexicon_<provider>.yml

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix: $CONFIG_DIR/lexicon.yml$CONFIG_DIR/lexicon_<provider>.yml

executables

Installed executables

Command	Kind	Exposure	Note
`lexicon`	cli	global executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08

manager version3.25.2

manager updated2026-06-20

local dataok

upstreamnot checked

latest detectednot detected

https://github.com/dns-lexicon/dns-lexicon

infoNo cached GitHub release or tag data was available.https://github.com/dns-lexicon/dns-lexiconnone confidence

install metadata

Package metadata

Package key	brew:lexicon
Version	3.25.2
Package manager	Homebrew
Package manager page	https://formulae.brew.sh/formula/lexicon
Homepage	https://github.com/dns-lexicon/dns-lexicon
Repository	https://github.com/dns-lexicon/dns-lexicon
Upstream docs	https://dns-lexicon.github.io/dns-lexicon
License	MIT
Source archive	https://files.pythonhosted.org/packages/4b/37/291063606930c749681b2ad0612952b1bc5374ab2037346566812ba8f2c9/dns_lexicon-3.25.2.tar.gz
Last updated	2026-06-20T11:14:59Z
Pulse	updated
Dependencies	certifi, cryptography, libyaml, python@3.14
Uses from macOS	libxml2, libxslt
Bottle	available (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install	not defined
Service	none declared

registry facts

Source database details

Source Database	Homebrew formula API
Tap	homebrew/core
Full Name	lexicon
Version Scheme	0
Revision	2
Head Version	HEAD
Bottle Stable Root URL	https://ghcr.io/v2/homebrew/core
Deprecated	no
Disabled	no
Keg Only	no
URL Keys	head stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

lexicon

nix profile install nixpkgs#lexicon

normalized package name match
Matched by: Lexicon

nixpkgs package indexes · raw.githubusercontent.com · nixpkgs package indexes: lexicon from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix

Ubuntu apt95%

lexicon 3.17.0-1

CLI for manipulating DNS records on various DNS providers

https://github.com/AnalogJ/lexicon

sudo apt install lexicon

Section: universe/python
Architecture: all
2 dependencies
normalized package name match
Matched by: Lexicon

Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: lexicon from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz

Ubuntu apt95%

python3-lexicon 3.17.0-1

Manipulate DNS records on various DNS providers (Python 3)

https://github.com/AnalogJ/lexicon

sudo apt install python3-lexicon

Section: universe/python
Architecture: all
Source Package: lexicon
10 dependencies
3 optional deps
normalized package name match
Matched by: Lexicon

Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: python3-lexicon from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Combined YAML source

View the package source record on GitHub.

combined/lexicon.yml

Used sources

Geiger risk classifier
Nucleus package database
av.db category and tag curation
cross-ecosystem install command graph
curated configuration and credential file locations
curated package history
external package-manager database matches
package relationship graph
package version freshness
package-page enrichment

Install lexicon with Homebrew, Nix, apt