Nextdns MCP server

Connect Nextdns to Claude, ChatGPT, Cursor, Claude Code, Codex, Gemini, GitHub Copilot and any other MCP client, for your whole team. Metorial adds security, governance, and tracing, and gives everyone one Magic MCP URL to connect.

What you can do with the Nextdns MCP server

Ask your agent in plain language. Each of these maps to a real tool on the server.

  • Use the get profile tool in Nextdns
  • Use the update privacy settings tool in Nextdns
  • Use the update security settings tool in Nextdns
  • Use the delete profile tool in Nextdns
  • Use the manage dns rewrites tool in Nextdns
  • Use the get analytics tool in Nextdns

Supported Tools

get_profile

Get Profile

Retrieve the full configuration of a specific NextDNS profile, including security settings, privacy settings, parental controls, allowlist, denylist, rewrites, and operational settings. Use this to inspect the complete state of a profile.

update_privacy

Update Privacy Settings

Update the privacy and ad-blocking configuration for a NextDNS profile. Manage blocklists (e.g., "nextdns-recommended", "oisd"), native tracker blocking for platforms (e.g., "apple", "samsung", "huawei", "windows", "xiaomi", "alexa", "roku", "sonos"), and toggle disguised tracker blocking and affiliate link handling.

update_security

Update Security Settings

Update the security configuration for a NextDNS profile. Toggle threat protection features such as AI threat detection, Google Safe Browsing, cryptojacking protection, DNS rebinding protection, and more. You can also manage the list of blocked TLDs (e.g., `.ru`, `.cn`). Only provide the fields you want to change.

delete_profile

Delete Profile

Permanently delete a NextDNS DNS configuration profile. This also clears all logs associated with the profile. **This action cannot be undone.**

manage_rewrites

Manage DNS Rewrites

Manage DNS rewrite rules for a NextDNS profile. Add or remove custom DNS rewrite rules that map domain names to specific IP addresses or CNAMEs. Useful for local network resolution (e.g., mapping "router.local" to "192.168.1.1").

get_analytics

Get Analytics

Retrieve DNS query analytics for a NextDNS profile. Query various dimensions including status counts, top domains, block reasons, client IPs, devices, protocols, query types, IP versions, DNSSEC validation, encryption stats, and destination countries or GAFAM companies. Supports date range filtering and optional time series mode.

clear_logs

Clear DNS Logs

Permanently clear all DNS query logs for a NextDNS profile. **This action is irreversible** — all log data will be deleted.

create_profile

Create Profile

Create a new NextDNS DNS configuration profile and return its ID. After creation, configure security, privacy, and parental control settings using other tools. Use get_setup for connection details.

manage_allowlist_denylist

Manage Allow & Deny Lists

Add, remove, or toggle domains on a NextDNS profile's allowlist or denylist. Retrieve the current lists, add new domains, remove existing domains, or toggle entries active/inactive. Operate on the allowlist, denylist, or both in a single call.

get_setup

Get Setup Info

Retrieve connection and setup information for a NextDNS profile. Returns DNS server addresses (IPv4/IPv6), linked IP details, DDNS hostname, DNS stamp, and other configuration needed to connect devices to the profile.

update_parental_control

Update Parental Controls

Update parental control settings for a NextDNS profile. Block specific services (e.g., TikTok, Facebook) and content categories (e.g., porn, gambling), enable SafeSearch and YouTube Restricted Mode, and block bypass methods like VPNs and proxies. Add or remove blocked services and categories incrementally.

update_settings

Update Profile Settings

Update operational settings for a NextDNS profile. Configure logging (enable/disable, retention, location, privacy options), block page display, performance options (ECS, cache boost, CNAME flattening), and Web3 domain resolution. Only provide the fields you want to change.

list_profiles

List Profiles

List DNS configuration profiles in the NextDNS account. Returns a summary of each profile including its ID and name. Use this to discover available profiles before performing operations on them. Pass the returned cursor to retrieve another page.

get_logs

Get DNS Logs

Retrieve DNS query logs for a NextDNS profile. Each log entry includes the timestamp, queried domain, protocol, client IP, device info, query status, and blocking reasons. Supports filtering by date range, device, status, and domain search.

update_profile

Rename Profile

Rename a NextDNS configuration profile. Call list_profiles to discover the profile ID.

Connect Nextdns to your AI client

Every client uses the same Magic MCP URL, and so does any other MCP client. Add it once and sign in with SSO.

  1. Enable Nextdns in Metorial. In your Metorial portal, enable the Nextdns MCP server and sign in with the account that owns the data. Access stays governed by your team policies.
  2. Add a custom connector. Open Customize, then Connectors. Select Add, then Custom, then Web.
  3. Paste your Metorial MCP URL. Name it Metorial, paste your Magic MCP URL (<your-magic-mcp-url>) and continue.
  4. Sign in. Select Add and sign in to load Nextdns tools.

Run Nextdns through the Metorial gateway

One governed layer for every app your agents reach, not a separate connector per tool.

  • Give Nextdns and every other app to your whole team through one MCP gateway, behind your SSO.
  • Scope which teams and agents can use Nextdns tools with role-based access control, and trace every call.
  • Prefer to run it yourself? Metorial is open source and self-hostable.

More integrations teams use with Nextdns

GitHub

Manage repositories, issues, and pull requests. Create and configure branches, star repositories, review code, and merge changes. Automate CI/CD workflows with GitHub Actions, manage workflow runs, secrets, and artifacts. Track issues with labels, milestones, and assignees. Search across code, repositories, issues, and users. Manage organizations, teams, and memberships. Create and manage projects, gists, packages, deployments, and environments. Access security alerts including code scanning, secret scanning, and Dependabot alerts. Read and write file contents in repositories. Manage webhooks, notifications, and codespaces.

Salesforce

Manage CRM data including Accounts, Contacts, Leads, Opportunities, Cases, and custom objects. Create, read, update, and delete records. Query data using SOQL and search across objects using SOSL. Perform bulk data operations for large-scale imports, exports, and migrations. Execute composite requests to batch multiple operations in a single API call. Access analytics, reports, and dashboards. Manage files and attachments associated with records. Interact with Chatter feeds, posts, and groups for social collaboration. Manage org metadata including custom objects, fields, layouts, and workflows. Query data using GraphQL for precise data retrieval across related objects.

Sharepoint

Manage SharePoint sites, document libraries, lists, and files. Create, read, update, and delete lists and list items with custom columns. Resolve site users to numeric Person/Group LookupId values. Upload, download, move, copy, and version files in document libraries. Search across sites, files, folders, lists, and list items using Microsoft Search. Manage permissions at site, list, and item levels with granular access control. Define and manage content types and site columns. Retrieve site properties and search for sites across Microsoft 365.

Airtable

Create, read, update, and delete records in Airtable bases and tables. Manage base schemas including creating tables and fields. Filter records using formulas, sort by fields, and scope queries to specific views. Upsert records to find, create, or update in a single call. Upload attachments to records, read and write record comments, list accessible bases, and receive real-time base change events through webhooks.

Sentry

Track, manage, and resolve application errors and performance issues. List, query, and bulk-update issues and error events with filters like status, assignment, and tags. Create and manage releases, associate commits, and upload source maps. Configure issue alert rules and metric alert rules with notification actions. Set up cron monitors to detect missed or failed scheduled jobs. Build custom dashboards with configurable widgets. Run ad-hoc Discover queries across errors and transactions for performance analysis. Manage organizations, teams, projects, and members. Provision users via SCIM. Access session replay data.

Bitbucket

Manage Git repositories, pull requests, and CI/CD pipelines on Bitbucket Cloud. Create, fork, and configure repositories within workspaces and projects. Create, review, approve, merge, and decline pull requests with inline code comments. Browse source code, list commits, and manage branches and tags. Trigger, monitor, and manage Bitbucket Pipelines. List workspace members, configure repository default reviewers and branch restrictions, create and manage repository webhooks, and search code across repositories.

Technical notes for Nextdns

Manage NextDNS filtering profiles, including creating, renaming, inspecting, and deleting profiles. Configure security, privacy, parental controls, allow and deny lists, DNS rewrites, logging, and performance. Retrieve paginated DNS query logs and analytics, including time series, and clear log history.

Frequently asked questions

Common questions about connecting Nextdns to AI agents with Metorial.

  1. How many tools does the Nextdns MCP server have?
    The Nextdns MCP server exposes 15 tools, including Get Profile, Update Privacy Settings, Update Security Settings. Each one is governed and traced through Metorial.
  2. Nextdns exposes tools your agents call on demand; it does not publish event triggers yet. Everything still runs through one governed MCP URL.
  3. Any MCP client, including VS Code, Windsurf, Zed, OpenCode and Grok. Each one reaches the Nextdns MCP server through the same Metorial URL.
  4. Use role-based access control to decide which teams, users, and agents can use Nextdns and which of its tools they can call.
  5. Yes. Metorial is open source, so you can run the Nextdns MCP server yourself or use the hosted gateway.

Connect Nextdns to production AI agents

See how Metorial gives your team governed access to Nextdns, with tracing and security controls built in.