Skip to content

Connectors · MSP & PSA

DNSFilter MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to DNSFilter and the rest of your systems. It gives your agent 245 DNSFilter actions (144 reads, 66 writes and 35 that wait for a confirmation) and holds the DNSFilter credential itself, so the agent never does. It paces DNSFilter's limits and records every call.

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

claude mcp add --transport http actionlake https://connect.actionlake.com/mcp
the first call
do {  action: "dnsfilter.users.list",  intent: "check which DNSFilter account is connected"}# Get Extant — DNSFilter Users · read · 1 upstream call
  • 245actionsin one signed file
  • 144readlook, never change
  • 66writecreate and update
  • 35wait for a yesdestructive, confirmed first

Set up

Connect DNSFilter in three steps.

  1. 01

    Add actionlake to Claude.

    Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.

    https://connect.actionlake.com/mcp
  2. 02

    Connect DNSFilter.

    API key. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.

    • api_keyAPI key (JWT)
    account { op: "connections.requirements", service: "dnsfilter" }
    # free: exactly what to paste, and what is found for you
  3. 03

    Make the first call. Check before a write.

    Ask in plain words; Claude picks the action. Before anything changes, check validates the call and prices it, for free.

    do    { action: "dnsfilter.users.list" }# get extant — dnsfilter users · read · 1 upstream callcheck { action: "dnsfilter.organization_users.create", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent

DNSFilter at a glance

Sign-in
API key. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.
You provide
api_key
Limits we pace to
300 calls a minute, per connection
API covered
DNSFilter API 2026-09-16api.dnsfilter.com
Built from
DNSFilter's documentation, read 19 September 2026api.dnsfilter.com
Service file
Version 1.0.0, signed (Ed25519)
Cached reads
142 of 144 reads, for up to an hour; a write clears what it affects
Ready-made plans
9 in the store
Shared entities
5, so ask can line DNSFilter up with your other systems
Data
Processed and stored in Sydney, Australia. No US region yet

Capabilities

What an AI agent can do in DNSFilter.

245 actions in 1 area. Every one carries its effect, so a key can allow the reads and hold the rest.

  • 144readlook, never change
  • 66writecreate and update
  • 35destructivewait for a confirmation
  1. DNS

    245

    144 read · 66 write · 35 destructive

    Get Extant — DNSFilter Users · Get Extant — DNSFilter Organizations · Get Extant — DNSFilter Policies · Gets Extant Users — DNSFilter Agent Local Users

Top actions

The DNSFilter API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 103 of DNSFilter's 110 action names are shared with at least one other connector, so an agent learns them once.

ActionWhat it doesEffectSame name in
dnsfilter.users.listGet Extant — DNSFilter UsersGets users basic information.readidentity.user.list474 connectors
dnsfilter.organizations.listGet Extant — DNSFilter OrganizationsGets user's associated organizations basic information.readcrm.company.list162 connectors
dnsfilter.policies.listGet Extant — DNSFilter PoliciesGets user associated policies basic information.readsecurity.policy.list36 connectors
dnsfilter.users.list_allGet All — DNSFilter UsersGets ALL users basic information.readidentity.user.list474 connectors
dnsfilter.user_agents.listGet Extant Agents — DNSFilter User AgentsGets a list of user agents with basic information.readdevice.endpoint.list65 connectors
dnsfilter.networks.listGet Extant — DNSFilter NetworksGets user's associated networks with basic information.readsecurity.network.list15 connectors
dnsfilter.organization_users.createCreate — DNSFilter Organization UsersAdds a new or existing user with the specified email to the specified organization.writeidentity.user.create262 connectors
dnsfilter.organizations.list_allGet All — DNSFilter OrganizationsGets all organizations basic information.readcrm.company.list162 connectors
dnsfilter.policies.list_allGet All — DNSFilter PoliciesGets ALL user associated policies basic information.readsecurity.policy.list36 connectors
dnsfilter.organizations.createCreate — DNSFilter OrganizationsCreates a new organization with the specified data.writecrm.company.create142 connectors
dnsfilter.current_user.updateUpdate — DNSFilter Current UserUpdate attributes for the currently authenticated user.writeidentity.user.update280 connectors
dnsfilter.agent_local_users.deleteDelete — DNSFilter Agent Local UsersDeletes a agent local user.destructiveidentity.user.delete253 connectors

Try it

Prompts to paste into Claude.

Each one names the DNSFilter actions it will call, so you know what it reads and what it changes before you send it.

  1. Readread

    Which DNSFilter devices have not checked in for a week?

    callsdnsfilter.user_agents.list

  2. Planread

    Build a weekly threat and category report for an organization in DNSFilter.

    callsdnsfilter.organizations.getdnsfilter.traffic_reports.total_threatsdnsfilter.traffic_reports.top_categoriesdnsfilter.traffic_reports.total_domainsdnsfilter.traffic_reports.top_agents+1 more

  3. Planread

    Review query volume and deployment across all managed organizations in DNSFilter.

    callsdnsfilter.organizations.list_alldnsfilter.traffic_reports.top_organizations_requestsdnsfilter.traffic_reports.total_deploymentsdnsfilter.traffic_reports.total_roaming_clientsdnsfilter.metrics.organization_usage

  4. Writewrite

    Create — DNSFilter Organization Users in DNSFilter. Show me exactly what you will send before you save it.

    callsdnsfilter.organization_users.create

  5. Across systemsread

    Which DNSFilter companies have invoices in NetSuite, and how many each?

    callsdnsfilter.organizations.listnetsuite.views.invoices

Across your systems

DNSFilter, joined to the rest of your business.

One ask fetches from DNSFilter and another system, joins the rows on the same customer on our side, and hands your agent the answer, not every row.

  • Which DNSFilter companies have invoices in NetSuite, and how many each?

    dnsfilter.organizations.list + netsuite.views.invoices, on crm.company · NetSuite

  • Which DNSFilter companies have tickets in HubSpot CRM, and how many each?

    dnsfilter.organizations.list + hubspot_crm.tickets.list, on crm.company · HubSpot CRM

Also mapped by other connectorsidentity.user 517crm.company 227device.endpoint 69security.policy 28security.network 12
ask
ask {  intent: "which DNSFilter companies have invoices in NetSuite, and how many each",  steps: [    { action: "dnsfilter.organizations.list", as: "co", input: {}, limit: 100, max_pages: 5 },    { action: "netsuite.views.invoices", as: "inv", input: {}, limit: 100, max_pages: 5 },    { join: {        left: "co",        right: "inv",        on: "crm.company",        group_by: "co.name",        select: ["co.name", "count(inv.id) as invoices"]    } }  ]}
Example. Run it through check first: it validates the steps and prices them, and it is free.

The plan store

Ready-made plans for DNSFilter.

9 plans in the store. Install one and your agent runs it by name; the reply says which connections are still missing. A schedule can run a plan on a timetable. There are no triggers or webhooks, by design.

  1. Review query volume and deployment across all managed organizations

    Use it when An MSP wants usage, deployment and query volume compared across every customer organization it manages.

    Effect
    read
    Steps
    5 · loops
    Needs
    from, msp id and to
    Install
    dnsfilter-msp-usage-review
  2. Build a weekly threat and category report for an organization

    Use it when Someone asks for the week's DNS threat and category summary for a single organization.

    Effect
    read
    Steps
    6
    Needs
    from, organization id and to
    Install
    dnsfilter-weekly-threat-report
  3. Export a filtered roaming client list to CSV

    Use it when Someone needs a spreadsheet of deployed DNSFilter agents matching a search, tag or status.

    Effect
    write
    Steps
    5
    Needs
    network ids, organization ids, search and status
    Install
    dnsfilter-agent-csv-export
  4. Triage a suspicious domain and blocklist it after approval

    Use it when An analyst has one suspicious domain and wants it checked, reported to DNSFilter and blocked across policies.

    A person decidesBlock fqdn on number of policy ids policies. Reason: notes

    Effect
    write
    Steps
    5
    Needs
    fqdn, from, notes and policy ids
    Install
    dnsfilter-threat-domain-triage
  5. Move a set of networks onto a new policy and block page

    Use it when A policy or block page change has to be applied to many networks in one organization together.

    A person decidesMove number of items networks onto policy policy id. Filtering changes immediately at every site.

    Effect
    write
    Steps
    6
    Needs
    block page id, organization id and policy id
    Install
    dnsfilter-network-policy-rollout
  6. Onboard a new customer organization end to end

    Use it when A new customer has been sold DNSFilter and needs their tenant, block page, policy, network IPs and first admin created.

    A person decidesCreate a new DNSFilter organization and its first admin. This consumes a licence and will appear on the next invoice.

    Effect
    write
    Steps
    6 · loops
    Needs
    admin user, block page, ip addresses, organization and policy
    Install
    dnsfilter-onboard-organization
  7. Rotate a DNSFilter API key with approval

    Use it when A DNSFilter API key is expiring or has been exposed and must be replaced without breaking an integration.

    A person decidesRevoke API key old key id now that its replacement new key name is in place. Any system still using the old key stops working.

    Effect
    destructive
    Steps
    5
    Needs
    expiry, new key name and old key id
    Install
    dnsfilter-api-key-rotation
  8. Retire roaming clients that have been offline too long

    Use it when Licence count is drifting and stale or decommissioned roaming clients need removing in bulk.

    A person decidesPermanently delete total roaming clients in state agent state. This cannot be undone.

    Effect
    destructive
    Steps
    5
    Needs
    agent state, name search and organization id
    Install
    dnsfilter-stale-agent-cleanup
  9. Unblock a domain a user reported as a false positive

    Use it when A user says a legitimate site is blocked and it needs allowlisting on their policy.

    A person decidesAllow domain on policy policy id, and remove it from that policy's blocklist. Reason: note

    Effect
    destructive
    Steps
    6
    Needs
    domain, note and policy id
    Install
    dnsfilter-allowlist-domain-request
install a plan
account { op: "plans.install", slug: "dnsfilter-msp-usage-review" }
# then ask for it by name; a schedule can run it on a timetable

Governance for DNSFilter

Destructive actions wait for a yes.

35 DNSFilter actions are destructive. The first 10:

  • Delete — DNSFilter Agent Local Usersdnsfilter.agent_local_users.delete
  • Delete — DNSFilter Organization Usersdnsfilter.organization_users.delete
  • Create — DNSFilter Agent Local User Bulk Deletesdnsfilter.agent_local_user_bulk_deletes.create
  • Cancel — DNSFilter Organizationsdnsfilter.organizations.cancel
  • Delete MSP — DNSFilter Organizationsdnsfilter.organizations.delete
  • Delete — DNSFilter Policiesdnsfilter.policies.delete
  • Delete — DNSFilter Scheduled Policiesdnsfilter.scheduled_policies.delete
  • Remove Queue — DNSFilter User Agentsdnsfilter.user_agents.dequeue_uninstall
  • Delete — DNSFilter User Agentsdnsfilter.user_agents.delete
  • Delete — DNSFilter Mac Addressesdnsfilter.mac_addresses.delete

A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

dodnsfilter.agent_local_users.deleteconfirm_policy: human

Delete — DNSFilter Agent Local Users?

intent: the user asked me to delete — DNSFilter Agent Local Users

run suspended · waiting for a named person · key dnsfilter-agent cannot confirm itself
In the console, or from an emailed signed link.
a key for this connector
account {  op: "keys.create", name: "dnsfilter-agent",  allowed_actions: ["dnsfilter.*"], cap_calls: 2000,  confirm_policy: "human_for_writes",  approval_rules: [    { match: "dnsfilter.agent_local_users.delete", approver: "[email protected]" },    { match: "dnsfilter.organization_users.delete", approver: "[email protected]" },    { match: "dnsfilter.agent_local_user_bulk_deletes.create", approver: "[email protected]" }  ]}
Illustrative. Scoped to DNSFilter only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

What DNSFilter costs on actionlake.

Every DNSFilter action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call DNSFilter refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

  • 1upstream call per actionall 245 DNSFilter actions
  • 245actions pageeach page of a long list is one call
  • 142reads can be cacheda cache hit costs nothing
  • 100,000calls a month, freepaid plans from US$49 a month for 250,000

See pricing

Action index

Every DNSFilter action.

245 actions by area: the id your agent calls, what it does, and its effect.

DNS245
  • dnsfilter.agent_local_user_bulk_deletes.countsCount — DNSFilter Agent Local User Bulk Deletesread
  • dnsfilter.agent_local_user_bulk_deletes.createCreate — DNSFilter Agent Local User Bulk Deletesdestructive
  • dnsfilter.agent_local_user_bulk_deletes.getShow Bulk Delete — DNSFilter Agent Local User Bulk Deletesread
  • dnsfilter.agent_local_users.countsCount Users — DNSFilter Agent Local Usersread
  • dnsfilter.agent_local_users.deleteDelete — DNSFilter Agent Local Usersdestructive
  • dnsfilter.agent_local_users.getShow Extant User — DNSFilter Agent Local Usersread
  • dnsfilter.agent_local_users.listGets Extant Users — DNSFilter Agent Local Usersread
  • dnsfilter.agent_local_users.list_allGets ALL Users — DNSFilter Agent Local Usersread
  • dnsfilter.agent_local_users.updateUpdate — DNSFilter Agent Local Userswrite
  • dnsfilter.agent_local_users_csv_exports.createCreate — DNSFilter Agent Local Users Csv Exportswrite
  • dnsfilter.agent_local_users_csv_exports.getShow — DNSFilter Agent Local Users Csv Exportsread
  • dnsfilter.api_keys.createCreate — DNSFilter Api Keyswrite
  • dnsfilter.api_keys.deleteDelete — DNSFilter Api Keysdestructive
  • dnsfilter.api_keys.getShow — DNSFilter Api Keysread
  • dnsfilter.api_keys.listList — DNSFilter Api Keysread
  • dnsfilter.api_keys.revokeRevoke — DNSFilter Api Keysdestructive
  • dnsfilter.application_categories.getShow Category — DNSFilter Application Categoriesread
  • dnsfilter.application_categories.listGet Extant — DNSFilter Application Categoriesread
  • dnsfilter.applications.getShow — DNSFilter Applicationsread
  • dnsfilter.applications.listGet Extant — DNSFilter Applicationsread
  • dnsfilter.applications.list_allGet All — DNSFilter Applicationsread
  • dnsfilter.billing.address_showShow Address — DNSFilter Billingread
  • dnsfilter.billing.address_updateUpdate Address — DNSFilter Billingwrite
  • dnsfilter.billing.createCreate — DNSFilter Billingwrite
  • dnsfilter.billing.getShow — DNSFilter Billingread
  • dnsfilter.block_pages.createCreate — DNSFilter Block Pageswrite
  • dnsfilter.block_pages.deleteDelete — DNSFilter Block Pagesdestructive
  • dnsfilter.block_pages.getShow Page — DNSFilter Block Pagesread
  • dnsfilter.block_pages.listGet Extant — DNSFilter Block Pagesread
  • dnsfilter.block_pages.list_allGet All — DNSFilter Block Pagesread
  • dnsfilter.block_pages.updateUpdate — DNSFilter Block Pageswrite
  • dnsfilter.categories.getShow Category — DNSFilter Categoriesread
  • dnsfilter.categories.listGet Extant — DNSFilter Categoriesread
  • dnsfilter.categories.list_allGet All — DNSFilter Categoriesread
  • dnsfilter.collection_users.addUpdate — DNSFilter Collection Userswrite
  • dnsfilter.collection_users.deleteDelete User — DNSFilter Collection Usersdestructive
  • dnsfilter.collection_users.getShow User — DNSFilter Collection Usersread
  • dnsfilter.collection_users.listGets Collection Users — DNSFilter Collection Usersread
  • dnsfilter.current_user.getGet — DNSFilter Current Userread
  • dnsfilter.current_user.updateUpdate — DNSFilter Current Userwrite
  • dnsfilter.cybersight_csv_exports.createCreate — DNSFilter Cybersight Csv Exportswrite
  • dnsfilter.cybersight_csv_exports.getShow — DNSFilter Cybersight Csv Exportsread
  • dnsfilter.dashboards.availableAvailable Dashboards — DNSFilter Dashboardsread
  • dnsfilter.dashboards.createCreate — DNSFilter Dashboardswrite
  • dnsfilter.dashboards.deleteDelete — DNSFilter Dashboardsdestructive
  • dnsfilter.dashboards.linkLink — DNSFilter Dashboardswrite
  • dnsfilter.dashboards.listUser's Dashboards — DNSFilter Dashboardsread
  • dnsfilter.dashboards.make_privateMake Private — DNSFilter Dashboardswrite
  • dnsfilter.dashboards.make_publicMake Public — DNSFilter Dashboardswrite
  • dnsfilter.dashboards.ownedOwned Dashboards — DNSFilter Dashboardsread
  • dnsfilter.dashboards.unlinkUnlink — DNSFilter Dashboardsdestructive
  • dnsfilter.dashboards.updateUpdate — DNSFilter Dashboardswrite
  • dnsfilter.dictionary.ai_applicationsAI Applications — DNSFilter Dictionaryread
  • dnsfilter.dictionary.cyber_sight_activity_typesCyberSight Activity Types — DNSFilter Dictionaryread
  • dnsfilter.dictionary.qp_methodsList QP Methods — DNSFilter Dictionaryread
  • dnsfilter.dictionary.vpn_settings_state_typesVPN Settings State Types — DNSFilter Dictionaryread
  • dnsfilter.domain_notes.batch_destroyBatch Destroy — DNSFilter Domain Notesdestructive
  • dnsfilter.domain_notes.batch_updateBulk Update — DNSFilter Domain Noteswrite
  • dnsfilter.domain_notes.deleteDelete — DNSFilter Domain Notesdestructive
  • dnsfilter.domain_notes.getShow — DNSFilter Domain Notesread
  • dnsfilter.domain_notes.updateUpdate — DNSFilter Domain Noteswrite
  • dnsfilter.domains.bulk_lookupBulk Lookup — DNSFilter Domainsread
  • dnsfilter.domains.suggest_threatSuggest Threat — DNSFilter Domainswrite
  • dnsfilter.domains.user_lookupLookup — DNSFilter Domainsread
  • dnsfilter.enterprise_connections.createCreate — DNSFilter Enterprise Connectionswrite
  • dnsfilter.enterprise_connections.deleteDelete — DNSFilter Enterprise Connectionsdestructive
  • dnsfilter.enterprise_connections.getShow Connection — DNSFilter Enterprise Connectionsread
  • dnsfilter.enterprise_connections.listGet Extant — DNSFilter Enterprise Connectionsread
  • dnsfilter.enterprise_connections.updateUpdate — DNSFilter Enterprise Connectionswrite
  • dnsfilter.invoices.currentGet Current Invoice — DNSFilter Invoicesread
  • dnsfilter.invoices.getGet Invoice — DNSFilter Invoicesread
  • dnsfilter.invoices.listGet Invoices — DNSFilter Invoicesread
  • dnsfilter.ip_addresses.createCreate — DNSFilter Ip Addresseswrite
  • dnsfilter.ip_addresses.deleteDelete — DNSFilter Ip Addressesdestructive
  • dnsfilter.ip_addresses.getShow IP — DNSFilter Ip Addressesread
  • dnsfilter.ip_addresses.listGet Extant — DNSFilter Ip Addressesread
  • dnsfilter.ip_addresses.list_allGet All — DNSFilter Ip Addressesread
  • dnsfilter.ip_addresses.myipGet My IP — DNSFilter Ip Addressesread
  • dnsfilter.ip_addresses.updateUpdate — DNSFilter Ip Addresseswrite
  • dnsfilter.ip_addresses.verifyVerify IP — DNSFilter Ip Addressesread
  • dnsfilter.mac_addresses.createCreate — DNSFilter Mac Addresseswrite
  • dnsfilter.mac_addresses.deleteDelete — DNSFilter Mac Addressesdestructive
  • dnsfilter.mac_addresses.getShow Address — DNSFilter Mac Addressesread
  • dnsfilter.mac_addresses.listGet Extant — DNSFilter Mac Addressesread
  • dnsfilter.mac_addresses.list_allGet All — DNSFilter Mac Addressesread
  • dnsfilter.mac_addresses.updateUpdate — DNSFilter Mac Addresseswrite
  • dnsfilter.metrics.organization_usageGet Usage — DNSFilter Metricsread
  • dnsfilter.metrics.organization_usage_detailedGet Usage Detailed — DNSFilter Metricsread
  • dnsfilter.network_lan_ips.getShow Lan IP — DNSFilter Network Lan Ipsread
  • dnsfilter.network_lan_ips.listGet — DNSFilter Network Lan Ipsread
  • dnsfilter.network_lan_ips.updateUpdate — DNSFilter Network Lan Ipswrite
  • dnsfilter.network_subnets.createCreate — DNSFilter Network Subnetswrite
  • dnsfilter.network_subnets.deleteDelete — DNSFilter Network Subnetsdestructive
  • dnsfilter.network_subnets.getShow Subnet — DNSFilter Network Subnetsread
  • dnsfilter.network_subnets.listGet Extant — DNSFilter Network Subnetsread
  • dnsfilter.network_subnets.list_allGet All — DNSFilter Network Subnetsread
  • dnsfilter.network_subnets.updateUpdate — DNSFilter Network Subnetswrite
  • dnsfilter.networks.bulk_createBulk Create — DNSFilter Networkswrite
  • dnsfilter.networks.bulk_create_statusBulk Create Status — DNSFilter Networksread
  • dnsfilter.networks.bulk_destroyBulk Delete — DNSFilter Networksdestructive
  • dnsfilter.networks.bulk_destroy_statusBulk Delete Status — DNSFilter Networksread
  • dnsfilter.networks.bulk_updateBulk Update — DNSFilter Networkswrite
  • dnsfilter.networks.bulk_update_statusBulk Update Status — DNSFilter Networksread
  • dnsfilter.networks.countsCounts — DNSFilter Networksread
  • dnsfilter.networks.createCreate — DNSFilter Networkswrite
  • dnsfilter.networks.deleteDelete — DNSFilter Networksdestructive
  • dnsfilter.networks.generate_secret_keyCreate Key — DNSFilter Networkswrite
  • dnsfilter.networks.getShow Network — DNSFilter Networksread
  • dnsfilter.networks.get_by_ipGet By IP — DNSFilter Networksread
  • dnsfilter.networks.listGet Extant — DNSFilter Networksread
  • dnsfilter.networks.list_allGet All — DNSFilter Networksread
  • dnsfilter.networks.list_geoGet Geo — DNSFilter Networksread
  • dnsfilter.networks.list_mspGet Extant MSP — DNSFilter Networksread
  • dnsfilter.networks.list_msp_allGet All MSP — DNSFilter Networksread
  • dnsfilter.networks.revoke_secret_keyDelete Key — DNSFilter Networksdestructive
  • dnsfilter.networks.rotate_secret_keyRotate Key — DNSFilter Networksdestructive
  • dnsfilter.networks.updateUpdate — DNSFilter Networkswrite
  • dnsfilter.networks_csv_exports.createCreate — DNSFilter Networks Csv Exportswrite
  • dnsfilter.networks_csv_exports.getShow — DNSFilter Networks Csv Exportsread
  • dnsfilter.organization_users.createCreate — DNSFilter Organization Userswrite
  • dnsfilter.organization_users.deleteDelete — DNSFilter Organization Usersdestructive
  • dnsfilter.organization_users.getShow User — DNSFilter Organization Usersread
  • dnsfilter.organization_users.listGet — DNSFilter Organization Usersread
  • dnsfilter.organization_users.resend_inviteResend Invite — DNSFilter Organization Userswrite
  • dnsfilter.organization_users.updateUpdate — DNSFilter Organization Userswrite
  • dnsfilter.organizations.bulk_updateBulk Update — DNSFilter Organizationswrite
  • dnsfilter.organizations.cancelCancel — DNSFilter Organizationsdestructive
  • dnsfilter.organizations.createCreate — DNSFilter Organizationswrite
  • dnsfilter.organizations.deleteDelete MSP — DNSFilter Organizationsdestructive
  • dnsfilter.organizations.getShow Organization — DNSFilter Organizationsread
  • dnsfilter.organizations.listGet Extant — DNSFilter Organizationsread
  • dnsfilter.organizations.list_allGet All — DNSFilter Organizationsread
  • dnsfilter.organizations.promote_to_mspPromote — DNSFilter Organizationswrite
  • dnsfilter.organizations.settingsGet Settings — DNSFilter Organizationsread
  • dnsfilter.organizations.updateUpdate — DNSFilter Organizationswrite
  • dnsfilter.policies.add_allowed_applicationAdd Allow Category — DNSFilter Policieswrite
  • dnsfilter.policies.add_blacklist_categoryAdd Block Category — DNSFilter Policieswrite
  • dnsfilter.policies.add_blacklist_domainAdd Block Domain — DNSFilter Policieswrite
  • dnsfilter.policies.add_blocked_applicationAdd Block Application — DNSFilter Policieswrite
  • dnsfilter.policies.add_whitelist_domainAdd Allow Domain — DNSFilter Policieswrite
  • dnsfilter.policies.application_updateUpdate Application — DNSFilter Policieswrite
  • dnsfilter.policies.createCreate — DNSFilter Policieswrite
  • dnsfilter.policies.deleteDelete — DNSFilter Policiesdestructive
  • dnsfilter.policies.getShow Policy — DNSFilter Policiesread
  • dnsfilter.policies.get_applicationGet Application — DNSFilter Policiesread
  • dnsfilter.policies.get_permissive_modeGet Permissive Mode — DNSFilter Policiesread
  • dnsfilter.policies.listGet Extant — DNSFilter Policiesread
  • dnsfilter.policies.list_allGet All — DNSFilter Policiesread
  • dnsfilter.policies.remove_allowed_applicationRemove Allow Category — DNSFilter Policiesdestructive
  • dnsfilter.policies.remove_blacklist_categoryRemove Block Category — DNSFilter Policiesdestructive
  • dnsfilter.policies.remove_blacklist_domainRemove Block Domain — DNSFilter Policiesdestructive
  • dnsfilter.policies.remove_blocked_applicationRemove Block Application — DNSFilter Policiesdestructive
  • dnsfilter.policies.remove_whitelist_domainRemove Allow Domain — DNSFilter Policiesdestructive
  • dnsfilter.policies.updateUpdate — DNSFilter Policieswrite
  • dnsfilter.policies.update_permissive_modeUpdate Permissive Mode — DNSFilter Policieswrite
  • dnsfilter.policy_bulk_actions.add_allowlist_domainsBulk Add Allow — DNSFilter Policy Bulk Actionswrite
  • dnsfilter.policy_bulk_actions.add_blocklist_domainsBulk Add Block — DNSFilter Policy Bulk Actionswrite
  • dnsfilter.policy_bulk_actions.remove_allowlist_domainsBulk Delete Allow — DNSFilter Policy Bulk Actionsdestructive
  • dnsfilter.policy_bulk_actions.remove_blocklist_domainsBulk Delete Block — DNSFilter Policy Bulk Actionsdestructive
  • dnsfilter.policy_ips.getShow IP — DNSFilter Policy Ipsread
  • dnsfilter.policy_ips.listGet — DNSFilter Policy Ipsread
  • dnsfilter.psa_integrations.redirect_linkCreate Link — DNSFilter Psa Integrationswrite
  • dnsfilter.scheduled_policies.createCreate — DNSFilter Scheduled Policieswrite
  • dnsfilter.scheduled_policies.deleteDelete — DNSFilter Scheduled Policiesdestructive
  • dnsfilter.scheduled_policies.getShow Policy — DNSFilter Scheduled Policiesread
  • dnsfilter.scheduled_policies.listGet Extant — DNSFilter Scheduled Policiesread
  • dnsfilter.scheduled_policies.list_allGet All — DNSFilter Scheduled Policiesread
  • dnsfilter.scheduled_policies.updateUpdate — DNSFilter Scheduled Policieswrite
  • dnsfilter.scheduled_report_previews.createCreate — DNSFilter Scheduled Report Previewswrite
  • dnsfilter.scheduled_report_previews.getShow Preview — DNSFilter Scheduled Report Previewsread
  • dnsfilter.scheduled_reports.createCreate — DNSFilter Scheduled Reportswrite
  • dnsfilter.scheduled_reports.deleteDelete — DNSFilter Scheduled Reportsdestructive
  • dnsfilter.scheduled_reports.getShow Report — DNSFilter Scheduled Reportsread
  • dnsfilter.scheduled_reports.listGet — DNSFilter Scheduled Reportsread
  • dnsfilter.scheduled_reports.updateUpdate — DNSFilter Scheduled Reportswrite
  • dnsfilter.traffic_reports.qpsQueries Per Second — DNSFilter Traffic Reportsread
  • dnsfilter.traffic_reports.qps_active_agentsQPS Clients — DNSFilter Traffic Reportsread
  • dnsfilter.traffic_reports.qps_active_organizationsQPS Organizations — DNSFilter Traffic Reportsread
  • dnsfilter.traffic_reports.query_logsQuery Logs — DNSFilter Traffic Reportsread
  • dnsfilter.traffic_reports.top_agentsTop Agents — DNSFilter Traffic Reportsread
  • dnsfilter.traffic_reports.top_application_categoriesTop Application Categories — DNSFilter Traffic Reportsread
  • dnsfilter.traffic_reports.top_categoriesTop Categories — DNSFilter Traffic Reportsread
  • dnsfilter.traffic_reports.top_collectionsTop Collections — DNSFilter Traffic Reportsread
  • dnsfilter.traffic_reports.top_domainsTop Domains — DNSFilter Traffic Reportsread
  • dnsfilter.traffic_reports.top_networksTop Networks — DNSFilter Traffic Reportsread
  • dnsfilter.traffic_reports.top_organizations_requestsTop Organizations Requests — DNSFilter Traffic Reportsread
  • dnsfilter.traffic_reports.top_usersTop Users — DNSFilter Traffic Reportsread
  • dnsfilter.traffic_reports.total_applications_agents_statsApplication Reqs Clients — DNSFilter Traffic Reportsread
  • dnsfilter.traffic_reports.total_applications_collections_statsApplication Reqs Collections — DNSFilter Traffic Reportsread
  • dnsfilter.traffic_reports.total_applications_networks_statsApplications Reqs Networks — DNSFilter Traffic Reportsread
  • dnsfilter.traffic_reports.total_applications_statsApplication Requests — DNSFilter Traffic Reportsread
  • dnsfilter.traffic_reports.total_applications_users_statsApplication Reqs Users — DNSFilter Traffic Reportsread
  • dnsfilter.traffic_reports.total_categoriesTotal Category Requests — DNSFilter Traffic Reportsread
  • dnsfilter.traffic_reports.total_categories_organizationsCategory Reqs Organizations — DNSFilter Traffic Reportsread
  • dnsfilter.traffic_reports.total_category_statsCategory Stats — DNSFilter Traffic Reportsread
  • dnsfilter.traffic_reports.total_client_statsTotal Client Stats — DNSFilter Traffic Reportsread
  • dnsfilter.traffic_reports.total_deploymentsDeployments — DNSFilter Traffic Reportsread
  • dnsfilter.traffic_reports.total_domain_statsDomain Stats — DNSFilter Traffic Reportsread
  • dnsfilter.traffic_reports.total_domainsTotal Domain Reqs — DNSFilter Traffic Reportsread
  • dnsfilter.traffic_reports.total_domains_organizationsDomain Reqs Organizations — DNSFilter Traffic Reportsread
  • dnsfilter.traffic_reports.total_domains_usersDomain Reqs Users — DNSFilter Traffic Reportsread
  • dnsfilter.traffic_reports.total_organizations_requestsTotal Org Requests — DNSFilter Traffic Reportsread
  • dnsfilter.traffic_reports.total_organizations_statsOrganization Stats — DNSFilter Traffic Reportsread
  • dnsfilter.traffic_reports.total_requestsTotal Requests/time — DNSFilter Traffic Reportsread
  • dnsfilter.traffic_reports.total_requests_agentsTotal Requests Clients — DNSFilter Traffic Reportsread
  • dnsfilter.traffic_reports.total_requests_collectionsTotal Requests Collections — DNSFilter Traffic Reportsread
  • dnsfilter.traffic_reports.total_requests_geoTotal Requests Geo — DNSFilter Traffic Reportsread
  • dnsfilter.traffic_reports.total_requests_organizationsTotal Requests/organizations — DNSFilter Traffic Reportsread
  • dnsfilter.traffic_reports.total_requests_usersTotal Requests Users — DNSFilter Traffic Reportsread
  • dnsfilter.traffic_reports.total_roaming_clientsRoaming Clients — DNSFilter Traffic Reportsread
  • dnsfilter.traffic_reports.total_threatsTotal Threats/time — DNSFilter Traffic Reportsread
  • dnsfilter.traffic_reports.total_threats_organizationsTotal Threats Organizations — DNSFilter Traffic Reportsread
  • dnsfilter.traffic_reports.total_threats_usersTotal Threats Users — DNSFilter Traffic Reportsread
  • dnsfilter.trials.createCreate — DNSFilter Trialswrite
  • dnsfilter.user_agent_bulk_deletes.countsCounts — DNSFilter User Agent Bulk Deletesread
  • dnsfilter.user_agent_bulk_deletes.createCreate — DNSFilter User Agent Bulk Deletesdestructive
  • dnsfilter.user_agent_bulk_deletes.getShow — DNSFilter User Agent Bulk Deletesread
  • dnsfilter.user_agent_bulk_updates.countsCounts — DNSFilter User Agent Bulk Updatesread
  • dnsfilter.user_agent_bulk_updates.createCreate — DNSFilter User Agent Bulk Updateswrite
  • dnsfilter.user_agent_bulk_updates.getShow — DNSFilter User Agent Bulk Updatesread
  • dnsfilter.user_agent_bulk_updates.has_mixedCheck Agent Values — DNSFilter User Agent Bulk Updatesread
  • dnsfilter.user_agent_cleanups.createCreate — DNSFilter User Agent Cleanupsdestructive
  • dnsfilter.user_agent_cleanups.getShow — DNSFilter User Agent Cleanupsread
  • dnsfilter.user_agent_cleanups.updateUpdate — DNSFilter User Agent Cleanupswrite
  • dnsfilter.user_agent_csv_exports.createCreate — DNSFilter User Agent Csv Exportswrite
  • dnsfilter.user_agent_csv_exports.getShow — DNSFilter User Agent Csv Exportsread
  • dnsfilter.user_agent_releases.listGet — DNSFilter User Agent Releasesread
  • dnsfilter.user_agent_releases.relayGet Relay — DNSFilter User Agent Releasesread
  • dnsfilter.user_agents.countsCounts — DNSFilter User Agentsread
  • dnsfilter.user_agents.deleteDelete — DNSFilter User Agentsdestructive
  • dnsfilter.user_agents.dequeue_uninstallRemove Queue — DNSFilter User Agentsdestructive
  • dnsfilter.user_agents.getShow Agent — DNSFilter User Agentsread
  • dnsfilter.user_agents.listGet Extant Agents — DNSFilter User Agentsread
  • dnsfilter.user_agents.list_allGet All Agents — DNSFilter User Agentsread
  • dnsfilter.user_agents.tagsGet Tags — DNSFilter User Agentsread
  • dnsfilter.user_agents.uninstall_pinPIN — DNSFilter User Agentsread
  • dnsfilter.user_agents.updateUpdate — DNSFilter User Agentswrite
  • dnsfilter.user_agents.update_settingsUpdate Settings — DNSFilter User Agentswrite
  • dnsfilter.user_org_ui_settings.suppress_license_warningSuppresses License Warning — DNSFilter User Org Ui Settingswrite
  • dnsfilter.user_ui_settings.getGet UI Settings — DNSFilter User Ui Settingsread
  • dnsfilter.user_ui_settings.updateUpdate UI Settings — DNSFilter User Ui Settingswrite
  • dnsfilter.users.change_passwordChange Password — DNSFilter Userswrite
  • dnsfilter.users.getShow User — DNSFilter Usersread
  • dnsfilter.users.listGet Extant — DNSFilter Usersread
  • dnsfilter.users.list_allGet All — DNSFilter Usersread

Questions

The DNSFilter MCP server, answered.

Is there a DNSFilter MCP server for Claude?

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 245 DNSFilter actions, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by DNSFilter.

What do I need to connect DNSFilter?

API key (JWT). The free call account { op: "connections.requirements", service: "dnsfilter" } lists exactly what to paste.

Can an AI agent delete or change things in DNSFilter?

Only if its key allows it, and only with an explicit confirmation. 35 DNSFilter actions are destructive, including delete — DNSFilter Agent Local Users, delete — DNSFilter Organization Users and create — DNSFilter Agent Local User Bulk Deletes. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

Will an AI agent use up my DNSFilter API limit?

actionlake paces every call to the limits in the DNSFilter service file: 300 calls a minute per connection. Repeated reads are answered from cache (142 DNSFilter actions can be), which never reaches DNSFilter.

What does a DNSFilter action cost?

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (245 DNSFilter actions page). Cache hits, searches, dry runs and calls DNSFilter refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

Which DNSFilter API does it cover?

The DNSFilter API 2026-09-16 at api.dnsfilter.com. It is built from DNSFilter's documentation as read on 19 September 2026. 245 actions in 1 area, each one in the signed service file (version 1.0.0).

Can I combine DNSFilter with my other systems?

Yes. ask joins DNSFilter to NetSuite or HubSpot CRM on the same customer and returns the answer rather than every row. DNSFilter maps crm.company, which 227 other connectors also map.

Does actionlake keep my DNSFilter data, and where?

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to an hour, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your DNSFilter credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

Which AI clients can use it?

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

Give your agent DNSFilter today.

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.