Integration

DNSFilter integration

DNSFilter is a cloud DNS security and content filtering service. Manage networks (sites) and their subnets, IP and MAC addresses, filtering policies (block and allow domains, categories and applications), scheduled policies and block pages, look up how a domain is categorized, review roaming client agents, organization users and pending unblock requests, and pull traffic reports (total and top requests, threats, domains, categories, query logs). Distributor and MSP provisioning, billing and invoices, API key management, CSV exports, bulk agent jobs, dashboards and network secret keys are not exposed. Authentication is a DNSFilter API key (created in the dashboard under Account Settings) sent as-is in the Authorization header, with no prefix.

Connect DNSFilter How integrations work

Ask it in chat

Say what should happen.
The workflow builds itself.

When this happens, do that in DNSFilter.Built from the 106 DNSFilter tools below, on the connection you add once.

What you can do with DNSFilter

Each of these is one operation on one endpoint, available both as a workflow step and as a tool an AI agent can call on its own. Nothing bundles several operations into one action, so what a run did stays readable afterwards.

Most endpoints run on the free plan. A few, mainly the ones that publish on your behalf, need a paid plan.

User, 8 operations

create_organization_userCreate organization userPOSTAdds a new or existing user with the specified email to the specified organization.
delete_organization_userDelete organization userDELETERemoves a user from the organization. This will not actually delete the user account.
get_organization_userGet organization userGETGets the user details and permissions for the specified organization.
get_userGet userGETGets basic information of the specified user.
list_collection_usersList collection usersGETShow users belonging to a specific collection with the specified id.
list_organization_usersList organization usersGETGets the users for the specified organization.
list_usersList usersGETGets users basic information.
update_organization_userUpdate organization userPATCHUpdates a user or permissions with the specified data.

Block page, 5 operations

create_block_pageCreate block pagePOSTCreates a new block page.
delete_block_pageDelete block pageDELETEDeletes a block page.
get_block_pageGet block pageGETGets the specified block page.
list_block_pagesList block pagesGETGets the list of block pages associated with the current user.
update_block_pageUpdate block pagePATCHUpdates a block_page with the specified data.

Ip address, 5 operations

create_ip_addressCreate ip addressPOSTCreates a new IP address with the specified data.
delete_ip_addressDelete ip addressDELETERemoves an IP address.
get_ip_addressGet ip addressGETGets basic information of the specified IP address.
list_ip_addressesList ip addressesGETGets user associated IP addresses basic information.
update_ip_addressUpdate ip addressPATCHUpdates an IP address with the specified data.

Mac address, 5 operations

create_mac_addressCreate mac addressPOSTCreates a new MAC address with the specified data.
delete_mac_addressDelete mac addressDELETEDeletes a MAC address.
get_mac_addressGet mac addressGETGets basic information of the specified MAC address.
list_mac_addressesList mac addressesGETGets the MAC addresses associated to an organization with basic information.
update_mac_addressUpdate mac addressPATCHUpdates a MAC address with the specified data.

Network, 5 operations

create_networkCreate networkPOSTCreates a new network with the specified data.
delete_networkDelete networkDELETEDeletes a network.
get_networkGet networkGETGets basic information of the specified network.
list_networksList networksGETGets user's associated networks with basic information.
update_networkUpdate networkPATCHUpdates a network with the specified data.

Policy, 5 operations

create_policyCreate policyPOSTCreates a new policy with the specified data.
delete_policyDelete policyDELETEDeletes a policy.
get_policyGet policyGETGets basic information of the specified policy.
list_policiesList policiesGETGets user associated policies basic information.
update_policyUpdate policyPATCHUpdates a policy with the specified data.

Scheduled policy, 5 operations

create_scheduled_policyCreate scheduled policyPOSTCreates a new scheduled policy.
delete_scheduled_policyDelete scheduled policyDELETERemoves a scheduled policy from the database.
get_scheduled_policyGet scheduled policyGETGets the specified scheduled policy.
list_scheduled_policiesList scheduled policiesGETGets the list of scheduled policies associated with the current user.
update_scheduled_policyUpdate scheduled policyPATCHUpdates a scheduled policy in the database with the specified data.

Scheduled report, 5 operations

create_scheduled_reportCreate scheduled reportPOSTCreates a scheduled report: a name, a report type, a cadence (daily, weekly, monthly, quarterly...) and its recipients.
delete_scheduled_reportDelete scheduled reportDELETEDeletes a scheduled report and its recipients. To stop deliveries but keep the schedule, call update_scheduled_report with active=false instead.
get_scheduled_reportGet scheduled reportGETGets one scheduled report with its internal and external recipients and the day of week or month its cadence sends on.
list_scheduled_reportsList scheduled reportsGETLists scheduled reports for the organizations you administer, sorted by next delivery. Filter by active status, organization or MSP, or free-text search.
update_scheduled_reportUpdate scheduled reportPATCHUpdates a scheduled report; send only the fields to change. Pausing (active=false) keeps the next delivery date; resuming a schedule whose date has passed reschedules it from today, with no catch-up send.

Subnet, 5 operations

create_subnetCreate subnetPOSTCreates a network subnet with the specified data.
delete_subnetDelete subnetDELETEDeletes a network subnet with the specified data.
get_subnetGet subnetGETGets network associated subnet with basic information.
list_network_subnetsList network subnetsGETGets network associated subnets with basic information.
update_subnetUpdate subnetPATCHUpdates a network subnet with the specified data.

User agent, 4 operations

delete_user_agentDelete user agentDELETESoft deletes an user agent.
get_user_agentGet user agentGETGets the specified user agent with basic information.
list_user_agentsList user agentsGETGets a list of user agents with basic information.
update_user_agentUpdate user agentPATCHUpdates an user agent with the specified data.

Agent local user, 2 operations

get_agent_local_userGet agent local userGETGets basic information of the specified agent local user.
list_agent_local_usersList agent local usersGETGets the agent local users associated to an organization with basic information.

Application, 2 operations

get_applicationGet applicationGETGets basic information of a specific application.
list_applicationsList applicationsGETList extant applications basic information.

Application category, 2 operations

get_application_categoryGet application categoryGETGets basic information of a specific application category.
list_application_categoriesList application categoriesGETList extant application categories.

Category, 2 operations

get_categoryGet categoryGETGets basic information of a specific category.
list_categoriesList categoriesGETList categories basic information.

Count, 2 operations

count_networksCount networksGETGets counts of networks for each network status.
count_user_agentsCount user agentsGETGets counts of user agents for each status.

Organization, 2 operations

get_organizationGet organizationGETGets basic information of the specified organization.
list_organizationsList organizationsGETGets user's associated organizations basic information.

Policy ip, 2 operations

get_policy_ipGet policy ipGETGets basic information of the specified Policy IP.
list_policy_ipsList policy ipsGETGets user associated policies IPs basic information from database.

Unblock request, 2 operations

get_unblock_requestGet unblock requestGETGets one pending unblock request with its allow-list targets and whether the domain is already covered. A request already decided or expired answers 409, an unknown id 404.
list_unblock_requestsList unblock requestsGETLists end users' requests to unblock a domain, pending (tab=active, the default) or resolved (tab=history). Filter a column with <column>[value] and an optional <column>[operator]. Each row's can_action says if you may decide it.

Add allowed application, 1 operation

add_policy_allowed_applicationAdd policy allowed applicationPOSTAdds a single application to the allow list.

Add allowlist domain, 1 operation

add_bulk_allowlist_domainsAdd bulk allowlist domainsPOSTAdds one or more domains to one or more policy's allow list.

Add blacklist category, 1 operation

add_policy_blacklist_categoryAdd policy blacklist categoryPOSTAdds a single category to the blocklist.

Add blacklist domain, 1 operation

add_policy_blacklist_domainAdd policy blacklist domainPOSTAdds a single domain to the blocklist.

Add blocked application, 1 operation

add_policy_blocked_applicationAdd policy blocked applicationPOSTAdds a single application to the block list.

Add blocklist domain, 1 operation

add_bulk_blocklist_domainsAdd bulk blocklist domainsPOSTAdds one or more domains to one or more policy's block list.

Add whitelist domain, 1 operation

add_policy_whitelist_domainAdd policy whitelist domainPOSTAdds a single domain to the allowlist.

Bulk lookup, 1 operation

bulk_lookup_domainsBulk lookup domainsGETGets the domains and categories associated for each FQDN of the specified list.

Current user, 1 operation

get_current_userGet current userGETFetch information about the currently authenticated user.

Decision, 1 operation

decide_unblock_requestDecide unblock requestPOSTDecides a pending unblock request (allow, allow-universal, deny, deny-and-ignore, resolve-already-allowed). Allow adds the domain to the allow list; allow and deny email the requester.

Lan ip, 1 operation

list_lan_ipsList lan ipsGETGets network associated LAN IPs with basic information.

Lookup, 1 operation

get_network_by_ipGet network by ipGETGets basic information of a network based on its associated IP addresses.

Pending count, 1 operation

count_pending_unblock_requestsCount pending unblock requestsGETReturns the number of pending unblock requests across the organizations you can see (0 when there are none). Optionally narrow to one MSP or organization.

Qp, 1 operation

list_queries_per_secondList queries per secondGETGets the total number of queries per second in a period of time for sites.

Query log, 1 operation

list_query_logsList query logsGETGets the query raw logs in a period of time.

Remove allowed application, 1 operation

remove_policy_allowed_applicationRemove policy allowed applicationPOSTRemoves a single application from the allow list.

Remove allowlist domain, 1 operation

remove_bulk_allowlist_domainsRemove bulk allowlist domainsPOSTRemoves one or more domains from one or more policy's allow list.

Remove blacklist category, 1 operation

remove_policy_blacklist_categoryRemove policy blacklist categoryPOSTRemoves a single category from the blocklist.

Remove blacklist domain, 1 operation

remove_policy_blacklist_domainRemove policy blacklist domainPOSTRemoves a single domain from the blocklist.

Remove blocked application, 1 operation

remove_policy_blocked_applicationRemove policy blocked applicationPOSTRemoves a single application from the block list.

Remove blocklist domain, 1 operation

remove_bulk_blocklist_domainsRemove bulk blocklist domainsPOSTRemoves one or more domains from one or more policy's block list.

Remove whitelist domain, 1 operation

remove_policy_whitelist_domainRemove policy whitelist domainPOSTRemoves a single domain from the allowlist.

Resend invite, 1 operation

resend_user_inviteResend user invitePOSTResends the user invite for the specified user and organization.

Suggest threat, 1 operation

suggest_threatSuggest threatPOSTSubmits a domain (FQDN) to DNSFilter for a review of its threat categorization, with your notes and optionally the security category ids you suggest.

Tag, 1 operation

list_user_agent_tagsList user agent tagsGETGets ALL tags used by user agents on a network or organization.

Top agent, 1 operation

list_top_agentsList top agentsGETGets the top agents in a period of time.

Top application category, 1 operation

list_top_application_categoriesList top application categoriesGETGets the top application categories domains in a period of time.

Top category, 1 operation

list_top_categoriesList top categoriesGETGets the top categories domains in a period of time.

Top domain, 1 operation

list_top_domainsList top domainsGETGets the top requested domains in a period of time.

Top network, 1 operation

list_top_networksList top networksGETGets the top networks in a period of time.

Top user, 1 operation

list_top_usersList top usersGETGets the top users in a period of time.

Total category, 1 operation

list_total_categoriesList total categoriesGETGets the total number of requests by category for sites in a period of time.

Total category stats, 1 operation

list_total_category_statsList total category statsGETGets the total number of stats for a category in a period of time.

Total domain, 1 operation

list_total_domainsList total domainsGETGets the total number of requests by domain for sites in a period of time.

Total domain stats, 1 operation

list_total_domain_statsList total domain statsGETGets the total number of stats for a domain in a period of time.

Total request, 1 operation

list_total_requestsList total requestsGETGets the total number of requests for sites in a period of time.

Total threat, 1 operation

list_total_threatsList total threatsGETGets the total number of threats for sites in a period of time.

User lookup, 1 operation

lookup_domainLookup domainGETLooks up a domain (FQDN) and returns the domains DNSFilter associates with it and their categories.

Use DNSFilter from Claude Code, Cursor or Codex

Connect DNSFilter in LiveContext, create an API key in Settings, then add the LiveContext MCP server to your client. Its DNSFilter operations become tools the client can call, next to every other integration you connected.

Claude Code

claude mcp add --transport http livecontext https://livecontext.ai/mcp --header "X-API-Key: YOUR_API_KEY"

Codex (~/.codex/config.toml)

[mcp_servers.livecontext]
url = "https://livecontext.ai/mcp"

[mcp_servers.livecontext.http_headers]
"X-API-Key" = "YOUR_API_KEY"

Cursor, Claude Desktop and other JSON configs

{
  "mcpServers": {
    "livecontext": {
      "type": "http",
      "url": "https://livecontext.ai/mcp",
      "headers": {
        "X-API-Key": "YOUR_API_KEY"
      }
    }
  }
}

Set up the MCP server step by step

How to connect DNSFilter

Create your workspace
Sign up free. Nothing to install.
Connect DNSFilter once
Add your DNSFilter connection in Settings. Every tool from this integration reuses it, and secrets are encrypted at rest and visible only to you.
Describe the job in chat
The workflow builds itself in front of you and picks the endpoints it needs. Drag the steps yourself on the canvas whenever you would rather be explicit.