--- title: "DNSFilter MCP server for AI agents - actionlake" description: "Give Claude 245 DNSFilter actions through one MCP server: users, organizations, policies. Your agent never holds the credential. 100,000 calls a month free." canonical: https://actionlake.com/connectors/dnsfilter updated: 2026-10-10 --- Connectors · MSP & PSA # DNSFilter MCP server for AI agents. actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to DNSFilter and the rest of your systems. It gives your agent 245 DNSFilter actions (144 reads, 66 writes and 35 that wait for a confirmation) and holds the DNSFilter credential itself, so the agent never does. It paces DNSFilter's limits and records every call. [Connect DNSFilter free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) 100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you. `claude mcp add --transport http actionlake https://connect.actionlake.com/mcp` the first call ``` do { action: "dnsfilter.users.list", intent: "check which DNSFilter account is connected" } # Get Extant — DNSFilter Users · read · 1 upstream call ``` - 245 actions in one signed file - 144 read look, never change - 66 write create and update - 35 wait for a yes destructive, confirmed first Set up ## Connect DNSFilter in three steps. 1. 01 ### Add actionlake to Claude. Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us. `https://connect.actionlake.com/mcp` 2. 02 ### Connect DNSFilter. API key. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key. - `api_key` API key (JWT) ``` account { op: "connections.requirements", service: "dnsfilter" } # free: exactly what to paste, and what is found for you ``` 3. 03 ### Make the first call. Check before a write. Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free. ``` do { action: "dnsfilter.users.list" } # get extant — dnsfilter users · read · 1 upstream call check { action: "dnsfilter.organization_users.create", input: { … } } # free: inputs, permissions, cost and confirmations, nothing sent ``` DNSFilter at a glance **Sign-in** API key. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. **You provide** `api_key` **Limits we pace to** 300 calls a minute, per connection **API covered** DNSFilter API 2026-09-16`api.dnsfilter.com` **Built from** DNSFilter's documentation, read 19 September 2026[api.dnsfilter.com](https://api.dnsfilter.com/docs/api.json) **Service file** Version 1.0.0, signed (Ed25519) **Cached reads** 142 of 144 reads, for up to an hour; a write clears what it affects **Ready-made plans** 9 in the store **Shared entities** 5, so ask can line DNSFilter up with your other systems **Data** Processed and stored in Sydney, Australia. No US region yet Capabilities ## What an AI agent can do in DNSFilter. 245 actions in 1 area. Every one carries its effect, so a key can allow the reads and hold the rest. - **144** read look, never change - **66** write create and update - **35** destructive wait for a confirmation 1. ### DNS 245 144 read · 66 write · 35 destructive Get Extant — DNSFilter Users · Get Extant — DNSFilter Organizations · Get Extant — DNSFilter Policies · Gets Extant Users — DNSFilter Agent Local Users Top actions ## The DNSFilter API, shaped for agents. The ids your agent types, what each does, and the one name it shares with other systems. 103 of DNSFilter's 110 action names are shared with at least one other connector, so an agent learns them once. | Action | What it does | Effect | Same name in | | --- | --- | --- | --- | | `dnsfilter.users.list` Get Extant — DNSFilter Users | Gets users basic information. | read | `identity.user.list` 474 connectors | | `dnsfilter.organizations.list` Get Extant — DNSFilter Organizations | Gets user's associated organizations basic information. | read | `crm.company.list` 162 connectors | | `dnsfilter.policies.list` Get Extant — DNSFilter Policies | Gets user associated policies basic information. | read | `security.policy.list` 36 connectors | | `dnsfilter.users.list_all` Get All — DNSFilter Users | Gets ALL users basic information. | read | `identity.user.list` 474 connectors | | `dnsfilter.user_agents.list` Get Extant Agents — DNSFilter User Agents | Gets a list of user agents with basic information. | read | `device.endpoint.list` 65 connectors | | `dnsfilter.networks.list` Get Extant — DNSFilter Networks | Gets user's associated networks with basic information. | read | `security.network.list` 15 connectors | | `dnsfilter.organization_users.create` Create — DNSFilter Organization Users | Adds a new or existing user with the specified email to the specified organization. | write | `identity.user.create` 262 connectors | | `dnsfilter.organizations.list_all` Get All — DNSFilter Organizations | Gets all organizations basic information. | read | `crm.company.list` 162 connectors | | `dnsfilter.policies.list_all` Get All — DNSFilter Policies | Gets ALL user associated policies basic information. | read | `security.policy.list` 36 connectors | | `dnsfilter.organizations.create` Create — DNSFilter Organizations | Creates a new organization with the specified data. | write | `crm.company.create` 142 connectors | | `dnsfilter.current_user.update` Update — DNSFilter Current User | Update attributes for the currently authenticated user. | write | `identity.user.update` 280 connectors | | `dnsfilter.agent_local_users.delete` Delete — DNSFilter Agent Local Users | Deletes a agent local user. | destructive | `identity.user.delete` 253 connectors | Try it ## Prompts to paste into Claude. Each one names the DNSFilter actions it will call, so you know what it reads and what it changes before you send it. 1. Read read Which DNSFilter devices have not checked in for a week? calls `dnsfilter.user_agents.list` 2. Plan read Build a weekly threat and category report for an organization in DNSFilter. calls `dnsfilter.organizations.get` `dnsfilter.traffic_reports.total_threats` `dnsfilter.traffic_reports.top_categories` `dnsfilter.traffic_reports.total_domains` `dnsfilter.traffic_reports.top_agents` +1 more 3. Plan read Review query volume and deployment across all managed organizations in DNSFilter. calls `dnsfilter.organizations.list_all` `dnsfilter.traffic_reports.top_organizations_requests` `dnsfilter.traffic_reports.total_deployments` `dnsfilter.traffic_reports.total_roaming_clients` `dnsfilter.metrics.organization_usage` 4. Write write Create — DNSFilter Organization Users in DNSFilter. Show me exactly what you will send before you save it. calls `dnsfilter.organization_users.create` 5. Across systems read Which DNSFilter companies have invoices in NetSuite, and how many each? calls `dnsfilter.organizations.list` `netsuite.views.invoices` Across your systems ## DNSFilter, joined to the rest of your business. One `ask` fetches from DNSFilter and another system, joins the rows on the same customer on our side, and hands your agent the answer, not every row. - Which DNSFilter companies have invoices in NetSuite, and how many each? `dnsfilter.organizations.list` + `netsuite.views.invoices`, on `crm.company` · [NetSuite](https://actionlake.com/connectors/netsuite) - Which DNSFilter companies have tickets in HubSpot CRM, and how many each? `dnsfilter.organizations.list` + `hubspot_crm.tickets.list`, on `crm.company` · [HubSpot CRM](https://actionlake.com/connectors/hubspot-crm) Also mapped by other connectors `identity.user` **517** `crm.company` **227** `device.endpoint` **69** `security.policy` **28** `security.network` **12** ask ``` ask { intent: "which DNSFilter companies have invoices in NetSuite, and how many each", steps: [ { action: "dnsfilter.organizations.list", as: "co", input: {}, limit: 100, max_pages: 5 }, { action: "netsuite.views.invoices", as: "inv", input: {}, limit: 100, max_pages: 5 }, { join: { left: "co", right: "inv", on: "crm.company", group_by: "co.name", select: ["co.name", "count(inv.id) as invoices"] } } ] } ``` Example. Run it through check first: it validates the steps and prices them, and it is free. The plan store ## Ready-made plans for DNSFilter. 9 plans in the store. Install one and your agent runs it by name; the reply says which connections are still missing. A schedule can run a plan on a timetable. There are no triggers or webhooks, by design. 1. ### Review query volume and deployment across all managed organizations Use it when An MSP wants usage, deployment and query volume compared across every customer organization it manages. **Effect** read **Steps** 5 · loops **Needs** from, msp id and to **Install** `dnsfilter-msp-usage-review` 2. ### Build a weekly threat and category report for an organization Use it when Someone asks for the week's DNS threat and category summary for a single organization. **Effect** read **Steps** 6 **Needs** from, organization id and to **Install** `dnsfilter-weekly-threat-report` 3. ### Export a filtered roaming client list to CSV Use it when Someone needs a spreadsheet of deployed DNSFilter agents matching a search, tag or status. **Effect** write **Steps** 5 **Needs** network ids, organization ids, search and status **Install** `dnsfilter-agent-csv-export` 4. ### Triage a suspicious domain and blocklist it after approval Use it when An analyst has one suspicious domain and wants it checked, reported to DNSFilter and blocked across policies. A person decides Block _fqdn_ on _number of policy ids_ policies. Reason: _notes_ **Effect** write **Steps** 5 **Needs** fqdn, from, notes and policy ids **Install** `dnsfilter-threat-domain-triage` 5. ### Move a set of networks onto a new policy and block page Use it when A policy or block page change has to be applied to many networks in one organization together. A person decides Move _number of items_ networks onto policy _policy id_. Filtering changes immediately at every site. **Effect** write **Steps** 6 **Needs** block page id, organization id and policy id **Install** `dnsfilter-network-policy-rollout` 6. ### Onboard a new customer organization end to end Use it when A new customer has been sold DNSFilter and needs their tenant, block page, policy, network IPs and first admin created. A person decides Create a new DNSFilter organization and its first admin. This consumes a licence and will appear on the next invoice. **Effect** write **Steps** 6 · loops **Needs** admin user, block page, ip addresses, organization and policy **Install** `dnsfilter-onboard-organization` 7. ### Rotate a DNSFilter API key with approval Use it when A DNSFilter API key is expiring or has been exposed and must be replaced without breaking an integration. A person decides Revoke API key _old key id_ now that its replacement _new key name_ is in place. Any system still using the old key stops working. **Effect** destructive **Steps** 5 **Needs** expiry, new key name and old key id **Install** `dnsfilter-api-key-rotation` 8. ### Retire roaming clients that have been offline too long Use it when Licence count is drifting and stale or decommissioned roaming clients need removing in bulk. A person decides Permanently delete _total_ roaming clients in state _agent state_. This cannot be undone. **Effect** destructive **Steps** 5 **Needs** agent state, name search and organization id **Install** `dnsfilter-stale-agent-cleanup` 9. ### Unblock a domain a user reported as a false positive Use it when A user says a legitimate site is blocked and it needs allowlisting on their policy. A person decides Allow _domain_ on policy _policy id_, and remove it from that policy's blocklist. Reason: _note_ **Effect** destructive **Steps** 6 **Needs** domain, note and policy id **Install** `dnsfilter-allowlist-domain-request` install a plan ``` account { op: "plans.install", slug: "dnsfilter-msp-usage-review" } # then ask for it by name; a schedule can run it on a timetable ``` Governance for DNSFilter ## Destructive actions wait for a yes. 35 DNSFilter actions are destructive. The first 10: - Delete — DNSFilter Agent Local Users `dnsfilter.agent_local_users.delete` - Delete — DNSFilter Organization Users `dnsfilter.organization_users.delete` - Create — DNSFilter Agent Local User Bulk Deletes `dnsfilter.agent_local_user_bulk_deletes.create` - Cancel — DNSFilter Organizations `dnsfilter.organizations.cancel` - Delete MSP — DNSFilter Organizations `dnsfilter.organizations.delete` - Delete — DNSFilter Policies `dnsfilter.policies.delete` - Delete — DNSFilter Scheduled Policies `dnsfilter.scheduled_policies.delete` - Remove Queue — DNSFilter User Agents `dnsfilter.user_agents.dequeue_uninstall` - Delete — DNSFilter User Agents `dnsfilter.user_agents.delete` - Delete — DNSFilter Mac Addresses `dnsfilter.mac_addresses.delete` A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after. do dnsfilter.agent_local_users.delete confirm_policy: **human** Delete — DNSFilter Agent Local Users? **intent:** the user asked me to delete — DNSFilter Agent Local Users run suspended · waiting for a named person · key _dnsfilter-agent_ cannot confirm itself In the console, or from an emailed signed link. a key for this connector ``` account { op: "keys.create", name: "dnsfilter-agent", allowed_actions: ["dnsfilter.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "dnsfilter.agent_local_users.delete", approver: "lead@example.com" }, { match: "dnsfilter.organization_users.delete", approver: "lead@example.com" }, { match: "dnsfilter.agent_local_user_bulk_deletes.create", approver: "lead@example.com" } ] } ``` Illustrative. Scoped to DNSFilter only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person. Cost ## What DNSFilter costs on actionlake. Every DNSFilter action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call DNSFilter refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. - 1 upstream call per action all 245 DNSFilter actions - 245 actions page each page of a long list is one call - 142 reads can be cached a cache hit costs nothing - 100,000 calls a month, free paid plans from US$49 a month for 250,000 [See pricing](https://actionlake.com/pricing) Action index ## Every DNSFilter action. 245 actions by area: the id your agent calls, what it does, and its effect. **DNS 245** - `dnsfilter.agent_local_user_bulk_deletes.counts` Count — DNSFilter Agent Local User Bulk Deletes read - `dnsfilter.agent_local_user_bulk_deletes.create` Create — DNSFilter Agent Local User Bulk Deletes destructive - `dnsfilter.agent_local_user_bulk_deletes.get` Show Bulk Delete — DNSFilter Agent Local User Bulk Deletes read - `dnsfilter.agent_local_users.counts` Count Users — DNSFilter Agent Local Users read - `dnsfilter.agent_local_users.delete` Delete — DNSFilter Agent Local Users destructive - `dnsfilter.agent_local_users.get` Show Extant User — DNSFilter Agent Local Users read - `dnsfilter.agent_local_users.list` Gets Extant Users — DNSFilter Agent Local Users read - `dnsfilter.agent_local_users.list_all` Gets ALL Users — DNSFilter Agent Local Users read - `dnsfilter.agent_local_users.update` Update — DNSFilter Agent Local Users write - `dnsfilter.agent_local_users_csv_exports.create` Create — DNSFilter Agent Local Users Csv Exports write - `dnsfilter.agent_local_users_csv_exports.get` Show — DNSFilter Agent Local Users Csv Exports read - `dnsfilter.api_keys.create` Create — DNSFilter Api Keys write - `dnsfilter.api_keys.delete` Delete — DNSFilter Api Keys destructive - `dnsfilter.api_keys.get` Show — DNSFilter Api Keys read - `dnsfilter.api_keys.list` List — DNSFilter Api Keys read - `dnsfilter.api_keys.revoke` Revoke — DNSFilter Api Keys destructive - `dnsfilter.application_categories.get` Show Category — DNSFilter Application Categories read - `dnsfilter.application_categories.list` Get Extant — DNSFilter Application Categories read - `dnsfilter.applications.get` Show — DNSFilter Applications read - `dnsfilter.applications.list` Get Extant — DNSFilter Applications read - `dnsfilter.applications.list_all` Get All — DNSFilter Applications read - `dnsfilter.billing.address_show` Show Address — DNSFilter Billing read - `dnsfilter.billing.address_update` Update Address — DNSFilter Billing write - `dnsfilter.billing.create` Create — DNSFilter Billing write - `dnsfilter.billing.get` Show — DNSFilter Billing read - `dnsfilter.block_pages.create` Create — DNSFilter Block Pages write - `dnsfilter.block_pages.delete` Delete — DNSFilter Block Pages destructive - `dnsfilter.block_pages.get` Show Page — DNSFilter Block Pages read - `dnsfilter.block_pages.list` Get Extant — DNSFilter Block Pages read - `dnsfilter.block_pages.list_all` Get All — DNSFilter Block Pages read - `dnsfilter.block_pages.update` Update — DNSFilter Block Pages write - `dnsfilter.categories.get` Show Category — DNSFilter Categories read - `dnsfilter.categories.list` Get Extant — DNSFilter Categories read - `dnsfilter.categories.list_all` Get All — DNSFilter Categories read - `dnsfilter.collection_users.add` Update — DNSFilter Collection Users write - `dnsfilter.collection_users.delete` Delete User — DNSFilter Collection Users destructive - `dnsfilter.collection_users.get` Show User — DNSFilter Collection Users read - `dnsfilter.collection_users.list` Gets Collection Users — DNSFilter Collection Users read - `dnsfilter.current_user.get` Get — DNSFilter Current User read - `dnsfilter.current_user.update` Update — DNSFilter Current User write - `dnsfilter.cybersight_csv_exports.create` Create — DNSFilter Cybersight Csv Exports write - `dnsfilter.cybersight_csv_exports.get` Show — DNSFilter Cybersight Csv Exports read - `dnsfilter.dashboards.available` Available Dashboards — DNSFilter Dashboards read - `dnsfilter.dashboards.create` Create — DNSFilter Dashboards write - `dnsfilter.dashboards.delete` Delete — DNSFilter Dashboards destructive - `dnsfilter.dashboards.link` Link — DNSFilter Dashboards write - `dnsfilter.dashboards.list` User's Dashboards — DNSFilter Dashboards read - `dnsfilter.dashboards.make_private` Make Private — DNSFilter Dashboards write - `dnsfilter.dashboards.make_public` Make Public — DNSFilter Dashboards write - `dnsfilter.dashboards.owned` Owned Dashboards — DNSFilter Dashboards read - `dnsfilter.dashboards.unlink` Unlink — DNSFilter Dashboards destructive - `dnsfilter.dashboards.update` Update — DNSFilter Dashboards write - `dnsfilter.dictionary.ai_applications` AI Applications — DNSFilter Dictionary read - `dnsfilter.dictionary.cyber_sight_activity_types` CyberSight Activity Types — DNSFilter Dictionary read - `dnsfilter.dictionary.qp_methods` List QP Methods — DNSFilter Dictionary read - `dnsfilter.dictionary.vpn_settings_state_types` VPN Settings State Types — DNSFilter Dictionary read - `dnsfilter.domain_notes.batch_destroy` Batch Destroy — DNSFilter Domain Notes destructive - `dnsfilter.domain_notes.batch_update` Bulk Update — DNSFilter Domain Notes write - `dnsfilter.domain_notes.delete` Delete — DNSFilter Domain Notes destructive - `dnsfilter.domain_notes.get` Show — DNSFilter Domain Notes read - `dnsfilter.domain_notes.update` Update — DNSFilter Domain Notes write - `dnsfilter.domains.bulk_lookup` Bulk Lookup — DNSFilter Domains read - `dnsfilter.domains.suggest_threat` Suggest Threat — DNSFilter Domains write - `dnsfilter.domains.user_lookup` Lookup — DNSFilter Domains read - `dnsfilter.enterprise_connections.create` Create — DNSFilter Enterprise Connections write - `dnsfilter.enterprise_connections.delete` Delete — DNSFilter Enterprise Connections destructive - `dnsfilter.enterprise_connections.get` Show Connection — DNSFilter Enterprise Connections read - `dnsfilter.enterprise_connections.list` Get Extant — DNSFilter Enterprise Connections read - `dnsfilter.enterprise_connections.update` Update — DNSFilter Enterprise Connections write - `dnsfilter.invoices.current` Get Current Invoice — DNSFilter Invoices read - `dnsfilter.invoices.get` Get Invoice — DNSFilter Invoices read - `dnsfilter.invoices.list` Get Invoices — DNSFilter Invoices read - `dnsfilter.ip_addresses.create` Create — DNSFilter Ip Addresses write - `dnsfilter.ip_addresses.delete` Delete — DNSFilter Ip Addresses destructive - `dnsfilter.ip_addresses.get` Show IP — DNSFilter Ip Addresses read - `dnsfilter.ip_addresses.list` Get Extant — DNSFilter Ip Addresses read - `dnsfilter.ip_addresses.list_all` Get All — DNSFilter Ip Addresses read - `dnsfilter.ip_addresses.myip` Get My IP — DNSFilter Ip Addresses read - `dnsfilter.ip_addresses.update` Update — DNSFilter Ip Addresses write - `dnsfilter.ip_addresses.verify` Verify IP — DNSFilter Ip Addresses read - `dnsfilter.mac_addresses.create` Create — DNSFilter Mac Addresses write - `dnsfilter.mac_addresses.delete` Delete — DNSFilter Mac Addresses destructive - `dnsfilter.mac_addresses.get` Show Address — DNSFilter Mac Addresses read - `dnsfilter.mac_addresses.list` Get Extant — DNSFilter Mac Addresses read - `dnsfilter.mac_addresses.list_all` Get All — DNSFilter Mac Addresses read - `dnsfilter.mac_addresses.update` Update — DNSFilter Mac Addresses write - `dnsfilter.metrics.organization_usage` Get Usage — DNSFilter Metrics read - `dnsfilter.metrics.organization_usage_detailed` Get Usage Detailed — DNSFilter Metrics read - `dnsfilter.network_lan_ips.get` Show Lan IP — DNSFilter Network Lan Ips read - `dnsfilter.network_lan_ips.list` Get — DNSFilter Network Lan Ips read - `dnsfilter.network_lan_ips.update` Update — DNSFilter Network Lan Ips write - `dnsfilter.network_subnets.create` Create — DNSFilter Network Subnets write - `dnsfilter.network_subnets.delete` Delete — DNSFilter Network Subnets destructive - `dnsfilter.network_subnets.get` Show Subnet — DNSFilter Network Subnets read - `dnsfilter.network_subnets.list` Get Extant — DNSFilter Network Subnets read - `dnsfilter.network_subnets.list_all` Get All — DNSFilter Network Subnets read - `dnsfilter.network_subnets.update` Update — DNSFilter Network Subnets write - `dnsfilter.networks.bulk_create` Bulk Create — DNSFilter Networks write - `dnsfilter.networks.bulk_create_status` Bulk Create Status — DNSFilter Networks read - `dnsfilter.networks.bulk_destroy` Bulk Delete — DNSFilter Networks destructive - `dnsfilter.networks.bulk_destroy_status` Bulk Delete Status — DNSFilter Networks read - `dnsfilter.networks.bulk_update` Bulk Update — DNSFilter Networks write - `dnsfilter.networks.bulk_update_status` Bulk Update Status — DNSFilter Networks read - `dnsfilter.networks.counts` Counts — DNSFilter Networks read - `dnsfilter.networks.create` Create — DNSFilter Networks write - `dnsfilter.networks.delete` Delete — DNSFilter Networks destructive - `dnsfilter.networks.generate_secret_key` Create Key — DNSFilter Networks write - `dnsfilter.networks.get` Show Network — DNSFilter Networks read - `dnsfilter.networks.get_by_ip` Get By IP — DNSFilter Networks read - `dnsfilter.networks.list` Get Extant — DNSFilter Networks read - `dnsfilter.networks.list_all` Get All — DNSFilter Networks read - `dnsfilter.networks.list_geo` Get Geo — DNSFilter Networks read - `dnsfilter.networks.list_msp` Get Extant MSP — DNSFilter Networks read - `dnsfilter.networks.list_msp_all` Get All MSP — DNSFilter Networks read - `dnsfilter.networks.revoke_secret_key` Delete Key — DNSFilter Networks destructive - `dnsfilter.networks.rotate_secret_key` Rotate Key — DNSFilter Networks destructive - `dnsfilter.networks.update` Update — DNSFilter Networks write - `dnsfilter.networks_csv_exports.create` Create — DNSFilter Networks Csv Exports write - `dnsfilter.networks_csv_exports.get` Show — DNSFilter Networks Csv Exports read - `dnsfilter.organization_users.create` Create — DNSFilter Organization Users write - `dnsfilter.organization_users.delete` Delete — DNSFilter Organization Users destructive - `dnsfilter.organization_users.get` Show User — DNSFilter Organization Users read - `dnsfilter.organization_users.list` Get — DNSFilter Organization Users read - `dnsfilter.organization_users.resend_invite` Resend Invite — DNSFilter Organization Users write - `dnsfilter.organization_users.update` Update — DNSFilter Organization Users write - `dnsfilter.organizations.bulk_update` Bulk Update — DNSFilter Organizations write - `dnsfilter.organizations.cancel` Cancel — DNSFilter Organizations destructive - `dnsfilter.organizations.create` Create — DNSFilter Organizations write - `dnsfilter.organizations.delete` Delete MSP — DNSFilter Organizations destructive - `dnsfilter.organizations.get` Show Organization — DNSFilter Organizations read - `dnsfilter.organizations.list` Get Extant — DNSFilter Organizations read - `dnsfilter.organizations.list_all` Get All — DNSFilter Organizations read - `dnsfilter.organizations.promote_to_msp` Promote — DNSFilter Organizations write - `dnsfilter.organizations.settings` Get Settings — DNSFilter Organizations read - `dnsfilter.organizations.update` Update — DNSFilter Organizations write - `dnsfilter.policies.add_allowed_application` Add Allow Category — DNSFilter Policies write - `dnsfilter.policies.add_blacklist_category` Add Block Category — DNSFilter Policies write - `dnsfilter.policies.add_blacklist_domain` Add Block Domain — DNSFilter Policies write - `dnsfilter.policies.add_blocked_application` Add Block Application — DNSFilter Policies write - `dnsfilter.policies.add_whitelist_domain` Add Allow Domain — DNSFilter Policies write - `dnsfilter.policies.application_update` Update Application — DNSFilter Policies write - `dnsfilter.policies.create` Create — DNSFilter Policies write - `dnsfilter.policies.delete` Delete — DNSFilter Policies destructive - `dnsfilter.policies.get` Show Policy — DNSFilter Policies read - `dnsfilter.policies.get_application` Get Application — DNSFilter Policies read - `dnsfilter.policies.get_permissive_mode` Get Permissive Mode — DNSFilter Policies read - `dnsfilter.policies.list` Get Extant — DNSFilter Policies read - `dnsfilter.policies.list_all` Get All — DNSFilter Policies read - `dnsfilter.policies.remove_allowed_application` Remove Allow Category — DNSFilter Policies destructive - `dnsfilter.policies.remove_blacklist_category` Remove Block Category — DNSFilter Policies destructive - `dnsfilter.policies.remove_blacklist_domain` Remove Block Domain — DNSFilter Policies destructive - `dnsfilter.policies.remove_blocked_application` Remove Block Application — DNSFilter Policies destructive - `dnsfilter.policies.remove_whitelist_domain` Remove Allow Domain — DNSFilter Policies destructive - `dnsfilter.policies.update` Update — DNSFilter Policies write - `dnsfilter.policies.update_permissive_mode` Update Permissive Mode — DNSFilter Policies write - `dnsfilter.policy_bulk_actions.add_allowlist_domains` Bulk Add Allow — DNSFilter Policy Bulk Actions write - `dnsfilter.policy_bulk_actions.add_blocklist_domains` Bulk Add Block — DNSFilter Policy Bulk Actions write - `dnsfilter.policy_bulk_actions.remove_allowlist_domains` Bulk Delete Allow — DNSFilter Policy Bulk Actions destructive - `dnsfilter.policy_bulk_actions.remove_blocklist_domains` Bulk Delete Block — DNSFilter Policy Bulk Actions destructive - `dnsfilter.policy_ips.get` Show IP — DNSFilter Policy Ips read - `dnsfilter.policy_ips.list` Get — DNSFilter Policy Ips read - `dnsfilter.psa_integrations.redirect_link` Create Link — DNSFilter Psa Integrations write - `dnsfilter.scheduled_policies.create` Create — DNSFilter Scheduled Policies write - `dnsfilter.scheduled_policies.delete` Delete — DNSFilter Scheduled Policies destructive - `dnsfilter.scheduled_policies.get` Show Policy — DNSFilter Scheduled Policies read - `dnsfilter.scheduled_policies.list` Get Extant — DNSFilter Scheduled Policies read - `dnsfilter.scheduled_policies.list_all` Get All — DNSFilter Scheduled Policies read - `dnsfilter.scheduled_policies.update` Update — DNSFilter Scheduled Policies write - `dnsfilter.scheduled_report_previews.create` Create — DNSFilter Scheduled Report Previews write - `dnsfilter.scheduled_report_previews.get` Show Preview — DNSFilter Scheduled Report Previews read - `dnsfilter.scheduled_reports.create` Create — DNSFilter Scheduled Reports write - `dnsfilter.scheduled_reports.delete` Delete — DNSFilter Scheduled Reports destructive - `dnsfilter.scheduled_reports.get` Show Report — DNSFilter Scheduled Reports read - `dnsfilter.scheduled_reports.list` Get — DNSFilter Scheduled Reports read - `dnsfilter.scheduled_reports.update` Update — DNSFilter Scheduled Reports write - `dnsfilter.traffic_reports.qps` Queries Per Second — DNSFilter Traffic Reports read - `dnsfilter.traffic_reports.qps_active_agents` QPS Clients — DNSFilter Traffic Reports read - `dnsfilter.traffic_reports.qps_active_organizations` QPS Organizations — DNSFilter Traffic Reports read - `dnsfilter.traffic_reports.query_logs` Query Logs — DNSFilter Traffic Reports read - `dnsfilter.traffic_reports.top_agents` Top Agents — DNSFilter Traffic Reports read - `dnsfilter.traffic_reports.top_application_categories` Top Application Categories — DNSFilter Traffic Reports read - `dnsfilter.traffic_reports.top_categories` Top Categories — DNSFilter Traffic Reports read - `dnsfilter.traffic_reports.top_collections` Top Collections — DNSFilter Traffic Reports read - `dnsfilter.traffic_reports.top_domains` Top Domains — DNSFilter Traffic Reports read - `dnsfilter.traffic_reports.top_networks` Top Networks — DNSFilter Traffic Reports read - `dnsfilter.traffic_reports.top_organizations_requests` Top Organizations Requests — DNSFilter Traffic Reports read - `dnsfilter.traffic_reports.top_users` Top Users — DNSFilter Traffic Reports read - `dnsfilter.traffic_reports.total_applications_agents_stats` Application Reqs Clients — DNSFilter Traffic Reports read - `dnsfilter.traffic_reports.total_applications_collections_stats` Application Reqs Collections — DNSFilter Traffic Reports read - `dnsfilter.traffic_reports.total_applications_networks_stats` Applications Reqs Networks — DNSFilter Traffic Reports read - `dnsfilter.traffic_reports.total_applications_stats` Application Requests — DNSFilter Traffic Reports read - `dnsfilter.traffic_reports.total_applications_users_stats` Application Reqs Users — DNSFilter Traffic Reports read - `dnsfilter.traffic_reports.total_categories` Total Category Requests — DNSFilter Traffic Reports read - `dnsfilter.traffic_reports.total_categories_organizations` Category Reqs Organizations — DNSFilter Traffic Reports read - `dnsfilter.traffic_reports.total_category_stats` Category Stats — DNSFilter Traffic Reports read - `dnsfilter.traffic_reports.total_client_stats` Total Client Stats — DNSFilter Traffic Reports read - `dnsfilter.traffic_reports.total_deployments` Deployments — DNSFilter Traffic Reports read - `dnsfilter.traffic_reports.total_domain_stats` Domain Stats — DNSFilter Traffic Reports read - `dnsfilter.traffic_reports.total_domains` Total Domain Reqs — DNSFilter Traffic Reports read - `dnsfilter.traffic_reports.total_domains_organizations` Domain Reqs Organizations — DNSFilter Traffic Reports read - `dnsfilter.traffic_reports.total_domains_users` Domain Reqs Users — DNSFilter Traffic Reports read - `dnsfilter.traffic_reports.total_organizations_requests` Total Org Requests — DNSFilter Traffic Reports read - `dnsfilter.traffic_reports.total_organizations_stats` Organization Stats — DNSFilter Traffic Reports read - `dnsfilter.traffic_reports.total_requests` Total Requests/time — DNSFilter Traffic Reports read - `dnsfilter.traffic_reports.total_requests_agents` Total Requests Clients — DNSFilter Traffic Reports read - `dnsfilter.traffic_reports.total_requests_collections` Total Requests Collections — DNSFilter Traffic Reports read - `dnsfilter.traffic_reports.total_requests_geo` Total Requests Geo — DNSFilter Traffic Reports read - `dnsfilter.traffic_reports.total_requests_organizations` Total Requests/organizations — DNSFilter Traffic Reports read - `dnsfilter.traffic_reports.total_requests_users` Total Requests Users — DNSFilter Traffic Reports read - `dnsfilter.traffic_reports.total_roaming_clients` Roaming Clients — DNSFilter Traffic Reports read - `dnsfilter.traffic_reports.total_threats` Total Threats/time — DNSFilter Traffic Reports read - `dnsfilter.traffic_reports.total_threats_organizations` Total Threats Organizations — DNSFilter Traffic Reports read - `dnsfilter.traffic_reports.total_threats_users` Total Threats Users — DNSFilter Traffic Reports read - `dnsfilter.trials.create` Create — DNSFilter Trials write - `dnsfilter.user_agent_bulk_deletes.counts` Counts — DNSFilter User Agent Bulk Deletes read - `dnsfilter.user_agent_bulk_deletes.create` Create — DNSFilter User Agent Bulk Deletes destructive - `dnsfilter.user_agent_bulk_deletes.get` Show — DNSFilter User Agent Bulk Deletes read - `dnsfilter.user_agent_bulk_updates.counts` Counts — DNSFilter User Agent Bulk Updates read - `dnsfilter.user_agent_bulk_updates.create` Create — DNSFilter User Agent Bulk Updates write - `dnsfilter.user_agent_bulk_updates.get` Show — DNSFilter User Agent Bulk Updates read - `dnsfilter.user_agent_bulk_updates.has_mixed` Check Agent Values — DNSFilter User Agent Bulk Updates read - `dnsfilter.user_agent_cleanups.create` Create — DNSFilter User Agent Cleanups destructive - `dnsfilter.user_agent_cleanups.get` Show — DNSFilter User Agent Cleanups read - `dnsfilter.user_agent_cleanups.update` Update — DNSFilter User Agent Cleanups write - `dnsfilter.user_agent_csv_exports.create` Create — DNSFilter User Agent Csv Exports write - `dnsfilter.user_agent_csv_exports.get` Show — DNSFilter User Agent Csv Exports read - `dnsfilter.user_agent_releases.list` Get — DNSFilter User Agent Releases read - `dnsfilter.user_agent_releases.relay` Get Relay — DNSFilter User Agent Releases read - `dnsfilter.user_agents.counts` Counts — DNSFilter User Agents read - `dnsfilter.user_agents.delete` Delete — DNSFilter User Agents destructive - `dnsfilter.user_agents.dequeue_uninstall` Remove Queue — DNSFilter User Agents destructive - `dnsfilter.user_agents.get` Show Agent — DNSFilter User Agents read - `dnsfilter.user_agents.list` Get Extant Agents — DNSFilter User Agents read - `dnsfilter.user_agents.list_all` Get All Agents — DNSFilter User Agents read - `dnsfilter.user_agents.tags` Get Tags — DNSFilter User Agents read - `dnsfilter.user_agents.uninstall_pin` PIN — DNSFilter User Agents read - `dnsfilter.user_agents.update` Update — DNSFilter User Agents write - `dnsfilter.user_agents.update_settings` Update Settings — DNSFilter User Agents write - `dnsfilter.user_org_ui_settings.suppress_license_warning` Suppresses License Warning — DNSFilter User Org Ui Settings write - `dnsfilter.user_ui_settings.get` Get UI Settings — DNSFilter User Ui Settings read - `dnsfilter.user_ui_settings.update` Update UI Settings — DNSFilter User Ui Settings write - `dnsfilter.users.change_password` Change Password — DNSFilter Users write - `dnsfilter.users.get` Show User — DNSFilter Users read - `dnsfilter.users.list` Get Extant — DNSFilter Users read - `dnsfilter.users.list_all` Get All — DNSFilter Users read Questions ## The DNSFilter MCP server, answered. **Is there a DNSFilter MCP server for Claude?** Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 245 DNSFilter actions, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by DNSFilter. **What do I need to connect DNSFilter?** API key (JWT). The free call account { op: "connections.requirements", service: "dnsfilter" } lists exactly what to paste. **Can an AI agent delete or change things in DNSFilter?** Only if its key allows it, and only with an explicit confirmation. 35 DNSFilter actions are destructive, including delete — DNSFilter Agent Local Users, delete — DNSFilter Organization Users and create — DNSFilter Agent Local User Bulk Deletes. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it. **Will an AI agent use up my DNSFilter API limit?** actionlake paces every call to the limits in the DNSFilter service file: 300 calls a minute per connection. Repeated reads are answered from cache (142 DNSFilter actions can be), which never reaches DNSFilter. **What does a DNSFilter action cost?** One upstream call, the only unit actionlake bills. A list that pages bills one call per page (245 DNSFilter actions page). Cache hits, searches, dry runs and calls DNSFilter refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. **Which DNSFilter API does it cover?** The DNSFilter API 2026-09-16 at api.dnsfilter.com. It is built from DNSFilter's documentation as read on 19 September 2026. 245 actions in 1 area, each one in the signed service file (version 1.0.0). **Can I combine DNSFilter with my other systems?** Yes. ask joins DNSFilter to NetSuite or HubSpot CRM on the same customer and returns the answer rather than every row. DNSFilter maps crm.company, which 227 other connectors also map. **Does actionlake keep my DNSFilter data, and where?** actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to an hour, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your DNSFilter credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models. **Which AI clients can use it?** Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names. ## More connectors like DNSFilter Shares the most action names with - [Liongard 19](https://actionlake.com/connectors/liongard) - [Acronis Cyber Protect Cloud 18](https://actionlake.com/connectors/acronis-cyber-protect-cloud) - [Tactical RMM 17](https://actionlake.com/connectors/tactical-rmm) - [Proofpoint Essentials 15](https://actionlake.com/connectors/proofpoint-essentials) - [Automox 15](https://actionlake.com/connectors/automox) - [Cisco Umbrella 14](https://actionlake.com/connectors/cisco-umbrella) Joins with, on shared entities - [Cloudflare 3](https://actionlake.com/connectors/cloudflare) - [Tenable Vulnerability Management 3](https://actionlake.com/connectors/tenable-vulnerability-management) - [VMware Carbon Black Cloud 3](https://actionlake.com/connectors/vmware-carbon-black-cloud) - [Microsoft 365 Users 2](https://actionlake.com/connectors/microsoft-365-users) - [Salesforce Sales Cloud 2](https://actionlake.com/connectors/salesforce-sales-cloud) - [Xero 2](https://actionlake.com/connectors/xero) Browse - [All MSP & PSA connectors](https://actionlake.com/connectors/category/msp-and-psa) - [All connectors](https://actionlake.com/connectors) - [How actionlake compares](https://actionlake.com/compare) actionlake is independent. It is not made or endorsed by DNSFilter; the name is the vendor's own. Counts are from the DNSFilter service file, version 1.0.0. ## Give your agent DNSFilter today. [Connect DNSFilter free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free. --- Source: https://actionlake.com/connectors/dnsfilter More: https://actionlake.com/llms.txt