get_query_log
Retrieve raw DNS query logs for detailed analysis. Shows individual DNS queries with domain, result (allowed/blocked), category, site, and roaming client details. Useful for troubleshooting, security investigations, and audit trails.
create_organization
Creates a new organization (tenant). Useful for MSPs onboarding new customers. The new organization can then have policies, networks, and users assigned to it.
list_networks
Lists network sites configured in DNSFilter. Optionally filter MSP networks by organization. Returns site details including associated policies, IP addresses, and status.
list_organizations
Lists all organizations accessible to the authenticated user. For MSP accounts, returns all managed customer organizations. Useful for auditing tenants, selecting an organization for further operations, or building organization-level dashboards.
lookup_domain
Look up one or more domains (FQDNs) to retrieve their associated categories and threat classifications. Useful for checking if a domain is categorized as malicious, what content category it belongs to, or verifying filtering behavior.
Supports single domain lookup or bulk lookup of multiple domains at once.
update_organization
Updates an existing organization's settings. Can modify the organization name and other configuration attributes.
manage_roaming_client
Get, update, or delete a roaming client (agent). Use this to view agent details, reassign policies/sites, update tags, configure auto-update settings, or remove a deployed agent.
- **get**: Retrieve full details for an agent.
- **update**: Modify agent settings (policy, site, tags, auto-update, release channel).
- **delete**: Remove an agent deployment.
suggest_domain_categorization
Submit a domain for categorization review or report it as a threat. Use "category" type to suggest a category change, or "threat" to report a domain as malicious (phishing, malware, botnet, etc.).
get_billing
Retrieve billing information, invoices, and estimated upcoming charges. Supports viewing historical invoices, the current estimated invoice, and billing/payment details for an organization.
manage_network_secret_key
Generate, rotate, or revoke a network's secret key used for agent authentication.
- **generate**: Creates a new secret key for the network.
- **rotate**: Replaces the existing secret key with a new one.
- **revoke**: Removes the secret key entirely.
get_traffic_report
Retrieve total DNS request counts over time. Filter by network, organization, or roaming client to monitor usage and filtering results.
list_policies
Lists DNS filtering policies. Optionally filter by organization IDs. Returns policy configurations including allow/block lists, category settings, and application filtering rules.
manage_block_page
List, create, update, or delete custom block pages. Block pages are displayed to end users when they attempt to access a blocked domain. They can be associated with specific policies, sites, or collections.
- **list**: Get all block pages.
- **get**: Retrieve a specific block page.
- **create**: Create a new custom block page.
- **update**: Modify an existing block page.
- **delete**: Remove a block page.
manage_network
Create, update, or delete a network (site) in DNSFilter. Networks represent physical or logical sites whose DNS traffic is filtered.
- **Create**: provide a name and optional settings (policy, IP addresses).
- **Update**: provide networkId and fields to change.
- **Delete**: provide networkId and set action to "delete".
manage_mac_addresses
List, create, update, or delete MAC addresses associated with organizations for device-level identification.
- **list**: Get all registered MAC addresses.
- **create**: Register a new MAC address.
- **update**: Modify an existing MAC address entry.
- **delete**: Remove a MAC address.
manage_policy
Create, update, or delete a DNS filtering policy. Policies control content filtering behavior including domain allow/block lists, category blocking, and application (AppAware) rules.
- To **create**: provide a name and optional settings.
- To **update**: provide policyId and the fields to change.
- To **delete**: provide policyId and set action to "delete".
manage_collection
Create, update, delete, or list user collections. Collections group users for policy assignment with priority ordering. If a user belongs to multiple collections, the highest-priority collection's policy applies.
- **list**: Get all collections.
- **create**: Create a new collection.
- **update**: Modify collection settings.
- **delete**: Remove a collection.
manage_scheduled_policy
List, create, update, or delete scheduled policies. Scheduled policies apply different filtering rules during specific time windows (e.g., stricter filtering during work hours, relaxed on weekends).
- **list**: Get all scheduled policies.
- **create**: Create a new time-based schedule.
- **update**: Modify an existing schedule.
- **delete**: Remove a scheduled policy.
list_roaming_clients
Lists roaming client (agent) deployments. Returns agent details including hostname, OS, site association, policy assignment, tags, and update settings. Supports pagination.
get_organization
Retrieves detailed information about a specific organization by ID. Returns organization settings, subscription details, and configuration.
manage_organization_users
List, add, update, or remove users in an organization.
- **list**: Get all users in the organization.
- **add**: Add a new or existing user by email.
- **update**: Change a user's role/permissions (Admin, Read-Only).
- **remove**: Remove a user from the organization (does not delete their account).
list_categories
Lists all available content filtering categories (36+ categories). Use the returned category IDs when configuring policy blocking rules. Also supports listing application categories and individual applications (AppAware, 400+ SaaS apps).
manage_collection_users
List, add, or remove users from a user collection. Collections are used for policy assignment - each user in a collection inherits the collection's assigned policy.
- **list**: Get all users in the collection.
- **add**: Add a user to the collection.
- **remove**: Remove a user from the collection.
manage_ip_addresses
List, create, update, or delete IP addresses associated with networks. Also supports verifying whether an IP is already registered and retrieving your current public IP.
- **list**: Get all registered IP addresses.
- **create**: Register a new IP address for a network.
- **update**: Modify an existing IP address entry.
- **delete**: Remove an IP address.
- **verify**: Check if an IP is already in the system.
- **my_ip**: Get the requester's current public IP.
get_policy
Retrieve a filtering policy and its configured allow lists, block lists, categories, applications, and relationships. Call list_policies to discover policy IDs.
get_current_user
Retrieve the user whose permissions are used by this API key, including their ID, name, and email.
get_network
Retrieve a network site, its filtering configuration, and related resource IDs. Call list_networks to discover network IDs.