NextDNS MCP integration for AI agents.
Connect AI agents to NextDNS through 7 structured actions, including get analytics devices, get analytics domains, and get analytics reasons. Review authenti…
- ACTION CONTRACTS
- 7
- AUTHENTICATION
- API key
- SOURCE STATUS
- Provider-backed
CATALOG SOURCE REVIEWED AUGUST 23, 2026 / ACTION NAMES AND SCHEMAS DERIVED FROM WORKING MACHINES PROVIDER SOURCE
CAPABILITY PROFILE
What the NextDNS integration exposes
The NextDNS Agent App exposes 7 provider-backed actions for security and data work. Its current contract lets an authorized agent list per-device dns query analytics for a nextdns profile, list per-domain dns query analytics for a nextdns profile, and list dns query counts grouped by blocking reason for a nextdns profile. These operations are called through Working Machines as typed capabilities rather than through browser navigation or copied UI steps.
A connection uses API key. Before execution, the agent can inspect the selected action, its required fields, declared scopes, and expected output contract. Provider credentials remain inside the Working Machines runtime; the calling agent receives the capability and its structured result, not the underlying secret.
For reliable operation, start with the narrowest action that satisfies the task, resolve stable provider identifiers before changing state, and validate the returned object or status after execution. Availability still depends on the connected NextDNS account, granted provider permissions, workspace policy, region, plan, and upstream API behavior.
VERIFIED ACTION SAMPLE
Real NextDNS capabilities.
Showing 7 of 7 actions. Risk labels are conservative signals based on operation names, not substitutes for provider documentation or runtime policy.
get_analytics_devicesREADList per-device DNS query analytics for a NextDNS profile.
INPUTS: profileId / from / to / limit / cursor
get_analytics_domainsREADList per-domain DNS query analytics for a NextDNS profile.
INPUTS: profileId / from / to / limit / cursor
get_analytics_reasonsREADList DNS query counts grouped by blocking reason for a NextDNS profile.
INPUTS: profileId / from / to / limit / cursor
get_analytics_statusREADList DNS query counts grouped by status for a NextDNS profile.
INPUTS: profileId / from / to / limit / cursor
get_logsREADList DNS query logs for a NextDNS profile with optional filters.
INPUTS: profileId / from / to / limit / cursor
get_profileREADGet one NextDNS profile with its current settings and setup details.
INPUTS: profileId
list_profilesREADList NextDNS profiles available to the authenticated account.
INPUT CONTRACTS
Know what the action needs before it runs.
get_analytics_devices
profileIdREQUIRED- The NextDNS profile ID.
fromOPTIONAL- The inclusive start date filter. NextDNS accepts ISO timestamps, Unix timestamps, and relative values such as -7d.
toOPTIONAL- The exclusive end date filter. NextDNS accepts ISO timestamps, Unix timestamps, and relative values such as now.
limitOPTIONAL- The maximum number of items to return.
cursorOPTIONAL- The opaque pagination cursor from a previous response.
get_analytics_domains
profileIdREQUIRED- The NextDNS profile ID.
fromOPTIONAL- The inclusive start date filter. NextDNS accepts ISO timestamps, Unix timestamps, and relative values such as -7d.
toOPTIONAL- The exclusive end date filter. NextDNS accepts ISO timestamps, Unix timestamps, and relative values such as now.
limitOPTIONAL- The maximum number of items to return.
cursorOPTIONAL- The opaque pagination cursor from a previous response.
get_analytics_reasons
profileIdREQUIRED- The NextDNS profile ID.
fromOPTIONAL- The inclusive start date filter. NextDNS accepts ISO timestamps, Unix timestamps, and relative values such as -7d.
toOPTIONAL- The exclusive end date filter. NextDNS accepts ISO timestamps, Unix timestamps, and relative values such as now.
limitOPTIONAL- The maximum number of items to return.
cursorOPTIONAL- The opaque pagination cursor from a previous response.
get_analytics_status
profileIdREQUIRED- The NextDNS profile ID.
fromOPTIONAL- The inclusive start date filter. NextDNS accepts ISO timestamps, Unix timestamps, and relative values such as -7d.
toOPTIONAL- The exclusive end date filter. NextDNS accepts ISO timestamps, Unix timestamps, and relative values such as now.
limitOPTIONAL- The maximum number of items to return.
cursorOPTIONAL- The opaque pagination cursor from a previous response.
PROVIDER-SPECIFIC WORKFLOWS
Jobs this Agent App can support
Inspect Get Analytics Devices
List per-device DNS query analytics for a NextDNS profile. Use this as a bounded discovery step, retain the returned identifier, and avoid expanding the read beyond the task's stated scope.
get_analytics_devicesVerify with Get Analytics Domains
List per-domain DNS query analytics for a NextDNS profile. Compare the returned provider state with the intended outcome and preserve stable IDs or canonical links in the run record.
get_analytics_domainsSAFETY BOUNDARY
Operate NextDNS with explicit limits
- Authorize NextDNS with API key and grant only the provider access required by the selected actions.
- The current action names appear read-oriented, but returned NextDNS data may still be sensitive and should be minimized before it enters model context.
- Do not infer permission from catalog visibility. Workspace policy, connection identity, and upstream authorization still govern execution.
- No provider scope string is declared on the sampled actions. Verify the connected account's actual permissions in NextDNS rather than assuming unrestricted access.
- After a call, inspect the structured result and execution record before reporting that the NextDNS task completed successfully.
CONNECTION MODEL
API key
NextDNS API key passed with the X-Api-Key header. Create or view API keys in the NextDNS account page: https://my.nextdns.io/account
Working Machines stores provider credentials behind the execution boundary. An agent can use an authorized connection identity, but catalog discovery alone does not reveal OAuth tokens, API keys, or provider secrets.
- READ SIGNALS
- 7
- WRITE SIGNALS
- 0
- HIGH IMPACT
- 0
- REVIEW SIGNALS
- 0
EVIDENCE AND AVAILABILITY
Provider reference
Action names, input fields, authentication types, and counts on this page are generated from the Working Machines provider catalog. Provider behavior, quotas, object semantics, account eligibility, and regional availability remain governed by NextDNS.