You don't need API access to your DNS, the ability to delegate the ACME challenge records to your own server is also enough.