Control D MCP server

Connect Control D to Claude, ChatGPT, Cursor, Claude Code, Codex, Gemini, GitHub Copilot and any other MCP client, for your whole team. Metorial adds security, governance, and tracing, and gives everyone one Magic MCP URL to connect.

What you can do with the Control D MCP server

Ask your agent in plain language. Each of these maps to a real tool on the server.

  • Use the manage custom rules tool in Control D
  • Use the list profiles tool in Control D
  • Use the manage services tool in Control D
  • Use the manage filters tool in Control D
  • Use the manage profile tool in Control D
  • Use the get account info tool in Control D

Supported Tools

manage_custom_rules

Manage Custom Rules

Create, list, update, or delete custom domain-level DNS rules on a profile. Custom rules provide granular control over individual domains, TLDs, and wildcard patterns. Each rule can block, bypass (allow), spoof (to a custom IP), or redirect traffic through a proxy location. Rules are organized into folders.

list_profiles

List Profiles

List all DNS filtering profiles in your Control D account. Each profile is a collection of rules and settings enforced on a DNS resolver. Returns profile names, IDs, and summary counts of filters, services, custom rules, and options configured on each.

manage_services

Manage Services

List or configure service-level DNS rules on a profile. Services represent specific apps/websites (e.g., Facebook, TikTok, Steam) that can be individually blocked, bypassed, or redirected through proxy locations. Supports listing all services on a profile, browsing service categories, and modifying service actions.

manage_filters

Manage Filters

List, enable, or disable DNS filters on a profile. Filters are pre-configured categories like Ads & Trackers, Malware, Adult Content, etc. You can list both native and third-party filters, or batch-enable/disable multiple filters at once.

manage_profile

Manage Profile

Create, update, or delete a DNS filtering profile. Profiles are collections of rules and settings enforced on DNS resolvers. You can create blank profiles or clone existing ones. Updates support renaming, disabling until a specific time, and locking/unlocking.

get_account_info

Get Account Info

Retrieve your Control D account information, billing history, active subscriptions, and products. Also returns your current external IP address as seen by Control D.

manage_ip_access

Manage IP Access

List, authorize, or deauthorize IP addresses for a device's DNS resolver. Useful for Legacy DNS enforcement where IP-based identification is required. Lists up to the latest 50 known IPs that have queried against a device.

manage_rule_folders

Manage Rule Folders

Create, list, update, or delete custom rule folders on a profile. Folders organize custom DNS rules and apply a shared action (block, bypass, spoof, redirect) to all rules within them.

manage_default_rule

Manage Default Rule

Get or update the default DNS rule for a profile. The default rule is the catch-all that applies to all domains not matched by custom rules, services, or filters. It can block, bypass, spoof, or redirect all unmatched traffic.

list_devices

List Devices

List all devices (endpoints) configured in your Control D account. Devices are unique DNS resolvers that enforce profiles. Optionally filter by device type (user devices or routers). Returns device names, resolver addresses, assigned profiles, and status.

list_proxies

List Proxies

List all available proxy locations for traffic redirection. Control D supports 100+ exit proxy locations worldwide. Use proxy codes (e.g., "JFK", "YYZ", "LOCAL") when configuring redirect actions on services, custom rules, or default rules.

manage_profile_options

Manage Profile Options

List all available profile options or update a specific option on a profile. Profile options control behaviors like DNS rebind protection, DNSSEC, IPv4/IPv6 compatibility, AI malware filtering, and TTL settings.

manage_organization

Manage Organization

View and update organization details, list members, and manage sub-organizations. Sub-organizations represent physical sites, departments, or customer companies that group profiles and endpoints together.

get_analytics_config

Get Analytics Config

Retrieve available DNS query logging levels and analytics storage regions. Log levels control what gets recorded (off, basic, full). Storage regions determine where analytics data is kept geographically.

manage_device

Manage Device

Create, update, or delete a device (endpoint). Devices are unique DNS resolvers that enforce profiles on physical devices. When created, resolver addresses (DoH, DoT, IPv4, IPv6) are automatically provisioned. You can assign profiles, configure IP learning, enable legacy resolvers, set analytics levels, and more.

list_profile_restrictions

List Profile Restrictions

Discover currently available profile restrictions, such as Safe Search, with their identifiers and descriptions. Optionally list the restrictions enabled on a profile. Restrictions are separate from Profile Options.

manage_profile_restrictions

Manage Profile Restrictions

Enable or disable one profile restriction and return the complete updated list of enabled restriction identifiers. Call list_profile_restrictions to discover available identifiers and list_profiles to discover profile IDs. Requires a write API token and an unlocked profile; organization members need Admin permissions or higher.

Connect Control D to your AI client

Every client uses the same Magic MCP URL, and so does any other MCP client. Add it once and sign in with SSO.

  1. Enable Control D in Metorial. In your Metorial portal, enable the Control D MCP server and sign in with the account that owns the data. Access stays governed by your team policies.
  2. Add a custom connector. Open Customize, then Connectors. Select Add, then Custom, then Web.
  3. Paste your Metorial MCP URL. Name it Metorial, paste your Magic MCP URL (<your-magic-mcp-url>) and continue.
  4. Sign in. Select Add and sign in to load Control D tools.

Run Control D through the Metorial gateway

One governed layer for every app your agents reach, not a separate connector per tool.

  • Give Control D and every other app to your whole team through one MCP gateway, behind your SSO.
  • Scope which teams and agents can use Control D tools with role-based access control, and trace every call.
  • Prefer to run it yourself? Metorial is open source and self-hostable.

More integrations teams use with Control D

GitHub

Manage repositories, issues, and pull requests. Create and configure branches, star repositories, review code, and merge changes. Automate CI/CD workflows with GitHub Actions, manage workflow runs, secrets, and artifacts. Track issues with labels, milestones, and assignees. Search across code, repositories, issues, and users. Manage organizations, teams, and memberships. Create and manage projects, gists, packages, deployments, and environments. Access security alerts including code scanning, secret scanning, and Dependabot alerts. Read and write file contents in repositories. Manage webhooks, notifications, and codespaces.

Salesforce

Manage CRM data including Accounts, Contacts, Leads, Opportunities, Cases, and custom objects. Create, read, update, and delete records. Query data using SOQL and search across objects using SOSL. Perform bulk data operations for large-scale imports, exports, and migrations. Execute composite requests to batch multiple operations in a single API call. Access analytics, reports, and dashboards. Manage files and attachments associated with records. Interact with Chatter feeds, posts, and groups for social collaboration. Manage org metadata including custom objects, fields, layouts, and workflows. Query data using GraphQL for precise data retrieval across related objects.

Sharepoint

Manage SharePoint sites, document libraries, lists, and files. Create, read, update, and delete lists and list items with custom columns. Resolve site users to numeric Person/Group LookupId values. Upload, download, move, copy, and version files in document libraries. Search across sites, files, folders, lists, and list items using Microsoft Search. Manage permissions at site, list, and item levels with granular access control. Define and manage content types and site columns. Retrieve site properties and search for sites across Microsoft 365.

Airtable

Create, read, update, and delete records in Airtable bases and tables. Manage base schemas including creating tables and fields. Filter records using formulas, sort by fields, and scope queries to specific views. Upsert records to find, create, or update in a single call. Upload attachments to records, read and write record comments, list accessible bases, and receive real-time base change events through webhooks.

Sentry

Track, manage, and resolve application errors and performance issues. List, query, and bulk-update issues and error events with filters like status, assignment, and tags. Create and manage releases, associate commits, and upload source maps. Configure issue alert rules and metric alert rules with notification actions. Set up cron monitors to detect missed or failed scheduled jobs. Build custom dashboards with configurable widgets. Run ad-hoc Discover queries across errors and transactions for performance analysis. Manage organizations, teams, projects, and members. Provision users via SCIM. Access session replay data.

Bitbucket

Manage Git repositories, pull requests, and CI/CD pipelines on Bitbucket Cloud. Create, fork, and configure repositories within workspaces and projects. Create, review, approve, merge, and decline pull requests with inline code comments. Browse source code, list commits, and manage branches and tags. Trigger, monitor, and manage Bitbucket Pipelines. List workspace members, configure repository default reviewers and branch restrictions, create and manage repository webhooks, and search code across repositories.

Technical notes for Control D

Manage DNS filtering profiles, custom rules, and traffic redirection. Create and configure profiles with filters (ads, trackers, adult content, etc.), block or redirect 400+ specific services, and define custom domain-level rules including blocking, allowing, spoofing, and proxying. Manage devices/endpoints and assign continuously enforced profiles. Control IP-based access authorization, configure analytics logging, browse proxy locations for traffic redirection, and manage organizations and sub-organizations. Discover and toggle profile restrictions, including available Safe Search policies. Retrieve account, billing, and subscription information.

Frequently asked questions

Common questions about connecting Control D to AI agents with Metorial.

  1. How many tools does the Control D MCP server have?
    The Control D MCP server exposes 17 tools, including Manage Custom Rules, List Profiles, Manage Services. Each one is governed and traced through Metorial.
  2. Control D exposes tools your agents call on demand; it does not publish event triggers yet. Everything still runs through one governed MCP URL.
  3. Any MCP client, including VS Code, Windsurf, Zed, OpenCode and Grok. Each one reaches the Control D MCP server through the same Metorial URL.
  4. Use role-based access control to decide which teams, users, and agents can use Control D and which of its tools they can call.
  5. Yes. Metorial is open source, so you can run the Control D MCP server yourself or use the hosted gateway.

Connect Control D to production AI agents

See how Metorial gives your team governed access to Control D, with tracing and security controls built in.