# Dnsfilter — how to use (mcp.ai)

Connect your Dnsfilter account and use 170 tools for security and identity straight from your AI agent. Connect with your own API key. DNSFilter provides cloud-based DNS security and content filtering solutions to protect networks from online threats and manage internet usage.

## Option A — via MCP (recommended)
Remote MCP endpoint (HTTP, streamable): `https://api.mcp.ai/p_dnsfilter?ms=1787293440000`
Add it as a custom/remote MCP connector in your client (Claude, Cursor, VS Code…), then authenticate when prompted. Once connected, ask the agent to use the server's tools (e.g. `dnsfilter_add_allowed_application`).

## Option B — via direct REST API
Base URL: `https://api.mcp.ai/api/dnsfilter`
Auth: `Authorization: Bearer sk_live_…` — create a workspace API key at https://mcp.ai/settings/api-keys
Discover endpoints: `GET https://api.mcp.ai/api/dnsfilter/_endpoints`

### Endpoints
- `POST https://api.mcp.ai/api/dnsfilter/add/allowed/application` — Adds a single application to the allow list of a policy in DNSFilter. Use this action when you need to permit a specific application through the filtering policy. The application will be added to the 
  - body: { id: integer, name: string, include_relationships?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/add/allowlist/domains/to/policies` — Tool to bulk add one or more domains to one or more policies' allow lists. Use when you need to permit specific domains across multiple policies efficiently, bypassing filtering rules for trusted site
  - body: { notes?: object, domains: string[], policy_ids: integer[] }
- `POST https://api.mcp.ai/api/dnsfilter/add/blacklist/category/to/policy` — Tool to add a single category to a policy's blocklist. Use when you need to block a specific content category for a DNS filtering policy. The category will be added to the existing blacklist categorie
  - body: { id: integer, category_id: integer, include_relationships?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/add/blacklist/domain/to/policy` — Tool to add a single domain to a policy's blocklist. Use when you need to block a specific domain under a DNS filtering policy. The domain will be added to the policy's blacklist and blocked from acce
  - body: { id: integer, note: string, domain: string, include_relationships?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/add/blocked/application` — Adds a single application to the block list of a policy in DNSFilter. Use this action when you need to block a specific application through the filtering policy. The application will be added to the p
  - body: { id: integer, name: string, include_relationships?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/add/blocklist/domains/to/policies` — Tool to add one or more domains to the blocklist of multiple policies at once. Use when you need to block specific domains across multiple filtering policies efficiently. The operation applies all spe
  - body: { notes?: object, domains: string[], policy_ids: integer[] }
- `POST https://api.mcp.ai/api/dnsfilter/add/whitelist/domain` — Tool to add a single domain to a policy's allowlist. Use when you need to permit a specific domain for a policy, bypassing filtering rules for that trusted site.
  - body: { id: integer, note: string, domain: string, include_relationships?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/cancel/organization` — Sets an organization as 'Canceled' in DNSFilter by its unique ID. Use this action when you need to cancel an organization's service. The organization will be marked as canceled but may not be immediat
  - body: { id: integer }
- `POST https://api.mcp.ai/api/dnsfilter/check/user/agent/bulk/updates/has/mixed` — Check if user agent attributes are mixed in a bulk selection. Use this to determine whether block pages, policies, sites, or tags differ across the selected user agents before performing bulk updates.
  - body: { ids?: string[], tags?: string[], type?: string, state?: string, search?: string, status?: string, agent_state?: string, name_search?: string, network_ids?: integer[], organization_ids?: integer[], traffic_received_last_15_mins?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/create/api/keys` — Creates a new API key in DNSFilter for authentication and API access. This action generates a new API key that can be used to authenticate API requests to DNSFilter. The API key is returned only once 
  - body: { name: string, expiry: string }
- `POST https://api.mcp.ai/api/dnsfilter/create/cyber/sight/csv/export` — Creates a CyberSight CSV export record to track export of CyberSight report information. This action initiates an export of CyberSight activity logs to CSV format. The export is processed asynchronous
  - body: { end_at: string, search?: string, app_name?: string, msp_uuid?: string, start_at: string, web_host?: string, ip_search?: string, org_uuids?: string[], report_type: string, category_ids?: integer[], web_full_url?: string, weekdays_only?: boolean, app_window_title?: string, included_columns?: string[], user_agent_uuids?: string[], activity_type_ids?: integer[], excluded_org_uuids?: string[], app_executable_path?: string, agent_local_user_uuids?: string[] }
- `POST https://api.mcp.ai/api/dnsfilter/create/ip/address` — Creates a new IP address entry in DNSFilter for network filtering and policy enforcement. This action registers an IPv4 or IPv6 address with a specific network in DNSFilter, allowing that IP to be sub
  - body: { address: string, network_id: integer, description?: string }
- `POST https://api.mcp.ai/api/dnsfilter/create/mac/address` — Creates a new MAC address entry in DNSFilter with the specified data. This action registers a MAC address with a specific organization in DNSFilter, allowing that MAC address to be subject to custom f
  - body: { mac_address: object }
- `POST https://api.mcp.ai/api/dnsfilter/create/networks` — Creates a new network with the specified configuration in DNSFilter. Networks represent locations or groups of devices that will be protected by DNSFilter's DNS filtering policies. Use this action to 
  - body: { network: object }
- `POST https://api.mcp.ai/api/dnsfilter/create/networks/bulk` — Bulk create multiple networks in DNSFilter with a single API call. Use when you need to create multiple networks at once for efficiency. Each network requires at minimum a name; optional fields like p
  - body: { networks: object[] }
- `POST https://api.mcp.ai/api/dnsfilter/create/organization/user` — Adds a new or existing user with the specified email to an organization in DNSFilter. This action creates a user association with a specific organization, assigning them a role (administrator or read_
  - body: { user: object, organization_id: integer }
- `POST https://api.mcp.ai/api/dnsfilter/create/policies` — Creates a new DNS filtering policy with the specified configuration in DNSFilter. Policies define filtering rules including blocked/allowed categories, domain lists, safe search enforcement, and appli
  - body: { policy: object, append_domains?: boolean, include_relationships?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/create/scheduled/policy` — Creates a new scheduled (time-based) policy in DNSFilter. Scheduled policies allow different filtering policies to be applied during different times of the week based on a weekly schedule divided into
  - body: { name: string, timezone: string, policy_ids: integer[], organization_id: integer }
- `POST https://api.mcp.ai/api/dnsfilter/create/scheduled/report/previews` — Creates a scheduled report preview for an organization, triggering background generation of the report. This action initiates the generation of a preview for scheduled reports in DNSFilter. The previe
  - body: { scheduled_report_preview: object }
- `POST https://api.mcp.ai/api/dnsfilter/create/scheduled/reports` — Creates a scheduled report in DNSFilter to automate regular delivery of network activity and security summaries. Use this to set up periodic reports that track web traffic, threats, and content filter
  - body: { scheduled_report: object }
- `POST https://api.mcp.ai/api/dnsfilter/create/user/agent/bulk/deletes` — Create a user agent bulk delete operation in DNSFilter. Use when you need to delete multiple user agents at once based on explicit IDs or filter criteria. This action allows you to either: 1. Delete s
  - body: { ids?: string[], tags?: string[], type?: string, state?: string, search?: string, status?: string, policy_id?: integer, agent_state?: string, exclude_ids?: string[], name_search?: string, network_ids?: integer[], agent_version?: string, block_page_id?: integer, organization_id?: integer, policy_schedule?: string, queue_uninstall?: boolean, organization_ids?: integer[], scheduled_policy_id?: integer, traffic_received_last_15_mins?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/create/user/agent/cleanup` — Creates a user agent cleanup to track bulk deletion of inactive user agents in DNSFilter. This action initiates a cleanup process that identifies and deletes user agents that have been inactive for a 
  - body: { inactive_for: integer, organization_ids: integer[] }
- `POST https://api.mcp.ai/api/dnsfilter/delete/api/key` — Tool to remove an API key by its ID. Use when you need to revoke or delete an existing API key from the DNSFilter system. Returns success on 204 No Content.
  - body: { id: integer }
- `POST https://api.mcp.ai/api/dnsfilter/delete/ip/address` — Removes an IP address from DNSFilter by its unique ID. Use this action when you need to unregister an IP address from a network, such as when decommissioning equipment or removing access.
  - body: { id: integer }
- `POST https://api.mcp.ai/api/dnsfilter/delete/mac/address` — Deletes a MAC address entry from DNSFilter by its ID. Use this action when you need to remove a MAC address from your network filtering configuration. You must provide the numeric ID of the MAC addres
  - body: { mac_address_id: integer }
- `POST https://api.mcp.ai/api/dnsfilter/delete/networks/bulk` — Bulk destroy multiple networks in DNSFilter. Use when you need to delete multiple networks at once or all networks in an organization.
  - body: { ids: string, organization_id?: integer }
- `POST https://api.mcp.ai/api/dnsfilter/delete/policies` — Deletes a DNS filtering policy from DNSFilter by its unique ID. Use this action when you need to remove a policy that is no longer needed. Note that the API performs a soft deletion, setting a deleted
  - body: { id: integer }
- `POST https://api.mcp.ai/api/dnsfilter/delete/scheduled/policies` — Removes a scheduled policy from the DNSFilter database by its unique ID. Use this action when you need to delete a scheduled policy that is no longer needed or was created in error.
  - body: { id: integer }
- `POST https://api.mcp.ai/api/dnsfilter/delete/scheduled/report` — Tool to delete a scheduled report by its ID. Use when you need to remove a scheduled report from the DNSFilter system. Returns the deleted report data.
  - body: { id: integer }
- `POST https://api.mcp.ai/api/dnsfilter/get/api/keys` — Tool to retrieve detailed information about a specific API key by its ID. Use when you need to display or verify the details of an existing API key.
  - body: { id: integer }
- `POST https://api.mcp.ai/api/dnsfilter/get/application/category` — Retrieves detailed information about a specific DNSFilter application category by its ID. Application categories group applications for filtering policies (e.g., Business, VPN And Proxy, GenAI & ML). 
  - body: { application_category_id: string }
- `POST https://api.mcp.ai/api/dnsfilter/get/billing/address` — Retrieves the billing address for a specific DNSFilter organization. Use when you need to access or verify billing contact information, shipping addresses, or organization location details for invoici
  - body: { organization_id: integer }
- `POST https://api.mcp.ai/api/dnsfilter/get/billing/information` — Retrieves billing records for a specific DNSFilter organization. Returns a list of billing records including amounts, payment status, and billing periods. Returns an empty list if no billing records e
  - body: { organization_id: string }
- `POST https://api.mcp.ai/api/dnsfilter/get/category` — Tool to get basic information of a specific category. Use when you need to retrieve details for a category by its ID.
  - body: { id: integer }
- `POST https://api.mcp.ai/api/dnsfilter/get/ip/address` — Retrieves detailed information for a specific IP address record by its ID. Use this action when you need to fetch complete metadata, network relationships, and attributes for a particular IP address t
  - body: { ip_address_id: string }
- `POST https://api.mcp.ai/api/dnsfilter/get/mac/address` — Retrieves detailed information for a specific MAC address record by its ID. Use this action when you need to fetch complete metadata and attributes for a particular MAC address that you've already ide
  - body: { mac_address_id: integer }
- `POST https://api.mcp.ai/api/dnsfilter/get/metrics/organization/usage` — Retrieves usage metrics for a DNSFilter organization over a specified date range. Returns DNS query counts, user statistics, and billing information. The maximum allowed date range is 365 days. Use th
  - body: { to: string, from: string, organization_id: integer }
- `POST https://api.mcp.ai/api/dnsfilter/get/metrics/organization/usage/detailed` — Retrieves detailed usage metrics for a specific DNSFilter organization. Use this when you need comprehensive usage statistics including user counts, WiFi networks, roaming clients, and DNS request vol
  - body: { id: integer, to_date?: string, from_date?: string }
- `POST https://api.mcp.ai/api/dnsfilter/get/my/ip/address` — Tool to retrieve the requester's IP address as reported by DNSFilter API. Use when you need to determine the public IP address from which API requests are being made.
- `POST https://api.mcp.ai/api/dnsfilter/get/networks/bulk/create` — Tool to check the status of a bulk network creation job. Use when you need to monitor the progress or completion of a bulk network creation operation, or to retrieve the results (successful, failed, a
  - body: { id: string }
- `POST https://api.mcp.ai/api/dnsfilter/get/networks/bulk/destroy` — Check the status of a bulk network destroy operation. Use this action after initiating a bulk destroy to monitor progress and see which networks were successfully destroyed, failed, or skipped.
  - body: { id: string }
- `POST https://api.mcp.ai/api/dnsfilter/get/networks/bulk/update/status` — Check the status of a bulk network update job. Use this action to monitor the progress and results of a bulk update operation after initiating it. The response indicates completion status, success/fai
  - body: { id: string }
- `POST https://api.mcp.ai/api/dnsfilter/get/networks/csv/export` — Retrieves a networks CSV export by its ID. Use this action when you need to check the status of a CSV export or get the download URL for the exported data.
  - body: { id: string }
- `POST https://api.mcp.ai/api/dnsfilter/get/notes` — Tool to retrieve notes associated with a specific resource (policy, MSP, or organization) and domain. Use when you need to fetch allow/block notes for a particular domain within a given resource conte
  - body: { id: integer, domain: string, resource: string }
- `POST https://api.mcp.ai/api/dnsfilter/get/organization` — Tool to get basic information of a specific organization by ID. Use when you need to retrieve detailed organization configuration, billing details, feature flags, and network relationships for a parti
  - body: { id: integer }
- `POST https://api.mcp.ai/api/dnsfilter/get/organizations/users` — Tool to retrieve user details and permissions for a specific organization. Use when you need to fetch information about a particular user within an organization, including their role, contact details,
  - body: { id: integer, organization_id: integer, include_auth_providers?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/get/policies` — Tool to get basic information of the specified policy. Use when you need to retrieve details for a specific policy by its ID.
  - body: { id: integer, include_relationships?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/get/policies/permissive/mode` — Tool to retrieve the permissive mode setting for a specific policy. Use when you need to check if a policy has permissive mode enabled or disabled.
  - body: { id: integer }
- `POST https://api.mcp.ai/api/dnsfilter/get/policy/ip` — Retrieves basic information for a specific Policy IP by its ID. Use this action when you need to fetch DNS server IP addresses (primary and secondary) associated with a particular policy. The response
  - body: { id: integer }
- `POST https://api.mcp.ai/api/dnsfilter/get/scheduled/report/previews` — Tool to retrieve a specific scheduled report preview by its ID. Use when you need to view the preview data for a scheduled report before it's sent.
  - body: { id: integer }
- `POST https://api.mcp.ai/api/dnsfilter/get/user` — Tool to get basic information of a specified user by ID. Use when you need to retrieve user details such as email, name, role, and verification status.
  - body: { id: string }
- `POST https://api.mcp.ai/api/dnsfilter/get/user/agent/cleanup` — Tool to get the specific user agent cleanup by ID. Use when you need to retrieve the status and details of a user agent cleanup process, including which agents are marked for deletion and whether the 
  - body: { id: integer }
- `POST https://api.mcp.ai/api/dnsfilter/get/user/agent/csv/exports` — Tool to retrieve a specific user agent CSV export by its ID. Use when you need to check the status of a CSV export and obtain the download URL once ready.
  - body: { id: integer }
- `POST https://api.mcp.ai/api/dnsfilter/get/user/agents/uninstall/pin` — Tool to get the uninstall PIN for an organization's user agents. Use when you need to retrieve the PIN required to uninstall user agents protected by PIN authentication.
  - body: { organization_id: integer }
- `POST https://api.mcp.ai/api/dnsfilter/list/all/agent/local/users` — Get all agent local users associated with a user organization. Returns basic information about agent local users including their IDs, types, and relationships. Use filters to narrow results by collect
  - body: { name?: string, sort?: string, page_size?: integer, page_number?: integer, in_a_collection?: boolean, organization_ids?: integer[] }
- `POST https://api.mcp.ai/api/dnsfilter/list/all/block/pages` — Retrieves all block pages associated with the current user. Block pages are custom HTML pages displayed when users attempt to access blocked websites. Use this when you need a complete list of all con
  - body: { organization_id?: integer }
- `POST https://api.mcp.ai/api/dnsfilter/list/all/ip/addresses` — Retrieves one page of IP addresses across all networks in your organization. Pagination is caller-driven: pass `page` and `per_page` to fetch a specific page; inspect `has_next_page` / `next_page` in 
  - body: { page?: integer, per_page?: integer }
- `POST https://api.mcp.ai/api/dnsfilter/list/api/keys` — Retrieves the list of API keys associated with the authenticated user. Use this to view all API keys, check their expiration status, or filter by specific criteria such as name or organization. Suppor
  - body: { id?: integer, name?: string, expired?: boolean, last_four?: string, organization_id?: integer }
- `POST https://api.mcp.ai/api/dnsfilter/list/application/categories` — Retrieves all available application categories from DNSFilter. Application categories group SaaS applications and services (e.g., Business, Messaging, File Sharing, VPN And Proxy) and are used to appl
- `POST https://api.mcp.ai/api/dnsfilter/list/applications/all` — Tool to list all applications basic information including deleted ones. Use when you need a comprehensive list of all application entries without filtering out deleted applications.
  - body: { page_size?: integer, page_number?: integer, category_ids?: integer[] }
- `POST https://api.mcp.ai/api/dnsfilter/list/billing` — Retrieve payment method information from Stripe for a DNSFilter organization. Returns details about the registered payment method including card information, billing address, and expiration dates. Ret
  - body: { organization_id: integer }
- `POST https://api.mcp.ai/api/dnsfilter/list/categories/all` — Tool to list all categories including internal categories from DNSFilter. Returns comprehensive category information with pagination support. Use when you need the complete set of categories including
  - body: { page?: object }
- `POST https://api.mcp.ai/api/dnsfilter/list/current/user` — Tool to fetch information about the currently authenticated user. Use when you need to retrieve the profile details of the user associated with the current API credentials, including their name, email
- `POST https://api.mcp.ai/api/dnsfilter/list/dictionary/cyber/sight/activity/types` — Tool to retrieve all available CyberSight activity types. Use when you need the complete dictionary of activity types for CyberSight reports.
- `POST https://api.mcp.ai/api/dnsfilter/list/domains/bulk/lookup` — Retrieves domain information and category classifications for multiple FQDNs in a single request. Use this action to perform bulk lookups of domain categories and classifications. This is useful when 
  - body: { fqdns: string }
- `POST https://api.mcp.ai/api/dnsfilter/list/domains/user/lookup` — Tool to look up all domains associated with a particular FQDN. Returns domain information including category classification, identifiers, and related metadata. Use when you need to retrieve domain det
  - body: { fqdn: string }
- `POST https://api.mcp.ai/api/dnsfilter/list/enterprise/connections` — List all enterprise connections for a DNSFilter organization. Use this to retrieve information about external identity provider integrations and enterprise authentication connections configured for th
  - body: { organization_id: integer }
- `POST https://api.mcp.ai/api/dnsfilter/list/invoices` — Retrieves billing invoices for a DNSFilter organization with pagination and sorting support. Returns invoice details including amounts, statuses, creation dates, and due dates. Use this when you need 
  - body: { page?: integer, sort?: string, per_page?: integer, direction?: string, organization_id: string }
- `POST https://api.mcp.ai/api/dnsfilter/list/ip/addresses/all` — Tool to retrieve all user-associated IP addresses with basic information. Use when you need to get the complete list of IP addresses using the dedicated /all endpoint with optional pagination.
  - body: { page_size?: integer, page_number?: integer }
- `POST https://api.mcp.ai/api/dnsfilter/list/mac/addresses` — Tool to list MAC addresses associated with an organization. Use when you need to retrieve basic MAC address information, optionally filtered by organization or paginated.
  - body: { page_size?: integer, page_number?: integer, organization_id?: string }
- `POST https://api.mcp.ai/api/dnsfilter/list/network/subnets` — Tool to retrieve subnets associated with a specific network. Use when you need to get subnet information for a particular network ID.
  - body: { page?: integer, page_size?: integer, network_id: integer }
- `POST https://api.mcp.ai/api/dnsfilter/list/networks/all` — Tool to retrieve ALL networks associated with the user with basic information. Use when you need a comprehensive list of all networks with optional filtering by protection status or search terms. Supp
  - body: { search?: string, page_size?: integer, protected?: boolean, basic_info?: boolean, page_number?: integer, unprotected?: boolean, count_network_ips?: boolean, force_truncate_ips?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/list/networks/geo` — Tool to retrieve networks with geographical information only. Use when you need location data (latitude, longitude, physical address) for networks in your DNSFilter organization. This action returns a
- `POST https://api.mcp.ai/api/dnsfilter/list/networks/msp/all` — Tool to retrieve ALL networks associated with the MSP user with basic information. Use when you need a comprehensive list of all MSP-managed networks for a specific organization ID. Supports paginatio
  - body: { page_size?: integer, protected?: boolean, page_number?: integer, unprotected?: boolean, organization_id: integer, count_network_ips?: boolean, force_truncate_ips?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/list/organizations/all` — Tool to get all organizations with optional filtering by type, MSP relationships, or name. Use when you need to retrieve organizations with specific criteria or pagination. Supports filtering by organ
  - body: { name?: string, page?: object, type?: string, basic_info?: boolean, owned_msp_id?: integer, managed_by_msp_id?: integer }
- `POST https://api.mcp.ai/api/dnsfilter/list/organizations/settings` — Tool to get basic information and settings of the specified organization. Use when you need to retrieve organization configuration, settings, or details.
  - body: { name?: string, msp_id?: integer, organization_id?: integer, organization_ids?: string }
- `POST https://api.mcp.ai/api/dnsfilter/list/organizations/users` — Tool to get the users for a specified organization. Use when you need to retrieve a list of all users associated with an organization, including their roles, permissions, and authentication details.
  - body: { organization_id: integer, include_auth_providers?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/list/policies` — Tool to retrieve basic information about user-associated policies. Use when you need to list all available policies for filtering configuration or policy management tasks.
  - body: { organization_id?: integer, include_global_policies?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/list/policies/all` — Tool to retrieve ALL user-associated policies with basic information. Use when you need a comprehensive list of all policies associated with the user account, with optional filtering by organization o
  - body: { page_size?: integer, page_number?: integer, organization_id?: integer, include_global_policies?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/list/policies/application` — Tool to retrieve policies information for a specific application. Use when you need to see which policies allow or block a particular application, along with application and organization details.
  - body: { name?: string, policy_ids?: integer[], application_id: integer, organization_id: integer }
- `POST https://api.mcp.ai/api/dnsfilter/list/policy/ips` — List policy IPs in your DNSFilter organization. Retrieves basic information about user-associated policy IPs including their DNS server addresses (primary and secondary). Use when you need to view all
  - body: { page?: integer, page_size?: integer }
- `POST https://api.mcp.ai/api/dnsfilter/list/qp/methods` — Tool to list all QP (Query Protection) methods available in DNSFilter. Use when you need to retrieve the dictionary of query protection methods.
- `POST https://api.mcp.ai/api/dnsfilter/list/scheduled/policies/all` — Tool to retrieve ALL scheduled policies associated with the current user. Use when you need a comprehensive list of all time-based policies with pagination support.
  - body: { page_size?: integer, page_number?: integer }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/qps` — Get queries per second (QPS) metrics for DNS traffic over a specified time period. Returns time-series data showing DNS query volume aggregated by configurable time buckets (1 minute, 15 minutes, or 1
  - body: { to?: string, from?: string, type?: string, msp_id?: integer, source?: string, nat_ips?: string, user_ids?: string, agent_ids?: string, private_ip?: string, agent_types?: string, bucket_size?: string, network_ids?: string, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, security_report?: boolean, organization_ids?: string, show_individual_networks?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/qps/active/agents` — Get queries per second (QPS) statistics for roaming clients over a time period. Returns the total number of DNS queries per second for active agents (roaming clients) with optional filtering by agent,
  - body: { to?: string, from?: string, type?: string, source?: string, nat_ips?: string, user_ids?: string, agent_ids?: string, private_ip?: string, agent_types?: string, network_ids?: string, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, security_report?: boolean, organization_ids?: string }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/qps/active/collections` — Tool to retrieve queries per second (QPS) metrics for active collections over a specified time period. Returns the total number of DNS queries per second grouped by collections. The maximum time range
  - body: { to?: string, from?: string, type?: string, source?: string, nat_ips?: string, user_ids?: string, agent_ids?: string, private_ip?: string, agent_types?: string, network_ids?: string, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, security_report?: boolean, organization_ids?: string }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/qps/active/organizations` — Retrieves the total number of queries per second (QPS) over a time period for active organizations. Use this action to analyze DNS query traffic patterns and volume for organizations. The maximum time
  - body: { to?: string, from?: string, type?: string, msp_id?: integer, source?: string, nat_ips?: string, user_ids?: string, agent_ids?: string, private_ip?: string, agent_types?: string, network_ids?: string, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, security_report?: boolean, organization_ids?: string }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/qps/active/users` — Get the total number of queries per second (QPS) in a time period (maximum 20 minutes) for active users. Use this to monitor traffic patterns and identify high-activity users. Supports filtering by us
  - body: { to?: string, from?: string, type?: string, source?: string, nat_ips?: string, user_ids?: string, agent_ids?: string, private_ip?: string, agent_types?: string, network_ids?: string, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, security_report?: boolean, organization_ids?: string }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/query/logs` — Get query raw logs from DNSFilter traffic reports in a specified period of time. Use this to retrieve detailed DNS query logs with extensive filtering options including time range, domains, networks, 
  - body: { to?: string, fqdn?: string, from?: string, page?: integer, domain?: string, result?: string, source?: string, nat_ips?: string, user_id?: integer, agent_id?: string, user_ids?: string, agent_ids?: string, page_size?: integer, network_id?: integer, private_ip?: string, network_ids?: string, category_ids?: string, collection_id?: integer, mac_addresses?: string, private_ip_to?: string, question_type?: string, collection_ids?: string, application_ids?: string, organization_id?: integer, private_ip_from?: string, security_report?: boolean, application_category_ids?: string }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/top/agents` — Get the top user agents by DNS traffic volume in a specified time period. Returns ranked list of agents with associated traffic metrics. Use this to identify most active agents, analyze agent-level us
  - body: { to?: string, from?: string, name?: string, page?: integer, size?: integer, type?: string, msp_id?: integer, source?: string, nat_ips?: string, user_ids?: string, agent_ids?: string, private_ip?: string, agent_types?: string, network_ids?: string, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, security_report?: boolean, organization_ids?: string }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/top/application/categories` — Get the top application categories domains in a period of time. Returns a paginated list of application categories ranked by DNS query volume, with support for filtering by networks, organizations, ag
  - body: { to?: string, from?: string, name?: string, page?: object, type?: string, msp_id?: integer, source?: string, user_ids?: string, agent_ids?: string, private_ip?: string, agent_types?: string, network_ids?: string, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, security_report?: string, organization_ids?: string }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/top/categories` — Get the top domain categories accessed during a specified time period. Returns category-level statistics showing which website categories (e.g., Social Networking, News, Streaming) are most frequently
  - body: { to?: string, from?: string, name?: string, page?: integer, size?: integer, type?: string, msp_id?: integer, source?: string, user_ids?: string, agent_ids?: string, private_ip?: string, agent_types?: string, network_ids?: string, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, security_report?: string, organization_ids?: string }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/top/collections` — Tool to retrieve the top collections by traffic volume over a specified time period. Returns collection-level metrics showing which collections have the most DNS query activity. Use this to identify t
  - body: { to?: string, from?: string, name?: string, type?: string, msp_id?: integer, source?: string, nat_ips?: string, user_ids?: string, agent_ids?: string, page_size?: integer, private_ip?: string, agent_types?: string, network_ids?: string, page_number?: integer, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, security_report?: boolean, organization_ids?: string }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/top/domains` — Get the top requested domains over a specified time period. Returns a list of the most frequently queried domains with request counts, helping identify popular sites, potential issues, or security con
  - body: { to?: string, fqdn?: string, from?: string, page?: integer, type?: string, domain?: string, msp_id?: integer, source?: string, user_ids?: string, agent_ids?: string, page_size?: integer, private_ip?: string, agent_types?: string, network_ids?: string, category_ids?: string, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, security_report?: string, organization_ids?: string }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/top/networks` — Get the top networks ranked by DNS traffic volume over a specified time period. Returns network traffic metrics showing which networks generated the most DNS queries. Use this to identify high-traffic
  - body: { to?: string, from?: string, name?: string, page?: object, type?: string, source?: string, nat_ips?: string, user_ids?: string, agent_ids?: string, private_ip?: string, agent_types?: string, network_ids?: string, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, security_report?: boolean, organization_ids?: string }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/top/organizations` — Gets the top organizations by DNS traffic volume over a specified time period. Use this action to identify which organizations are generating the most DNS queries. Supports pagination and extensive fi
  - body: { to?: string, from?: string, name?: string, page?: integer, size?: integer, type?: string, source?: string, nat_ips?: string, user_ids?: string, agent_ids?: string, private_ip?: string, agent_types?: string, network_ids?: string, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, security_report?: boolean, organization_ids?: string }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/top/organizations/requests` — Get the top organizations ranked by total number of DNS requests over a specified time period. Returns organizations with the highest request volumes, useful for identifying most active organizations 
  - body: { to?: string, from?: string, page?: integer, size?: integer, msp_id?: integer, bucket_size?: string, organization_id?: integer }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/top/users` — Get the top users by DNS query volume over a specified time period. Returns user activity metrics showing which users generated the most DNS traffic, with support for pagination and extensive filterin
  - body: { to?: string, from?: string, name?: string, page?: object, type?: string, msp_id?: integer, source?: string, nat_ips?: string, user_ids?: string, agent_ids?: string, private_ip?: string, agent_types?: string, network_ids?: string, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, security_report?: boolean, organization_ids?: string }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/total/applications/stats` — Get statistics of number of requests by application in a time period. Returns aggregated data showing how many requests were made to each application, useful for understanding traffic patterns and app
  - body: { to?: string, from?: string, name?: string, type?: string, msp_id?: integer, source?: string, nat_ips?: string, user_ids?: string, agent_ids?: string, private_ip?: string, agent_types?: string, network_ids?: string, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, security_report?: boolean, organization_ids?: string, application_category_ids?: string }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/total/apps/agents/stats` — Get statistics of number of requests for roaming clients by application in a period of time. Returns aggregated request counts grouped by application for active agents (roaming clients) with optional 
  - body: { to?: string, from?: string, name?: string, type?: string, source?: string, nat_ips?: string, user_ids?: string, agent_ids?: string, private_ip?: string, agent_types?: string, network_ids?: string, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, security_report?: boolean, organization_ids?: string, application_category_ids?: string }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/total/apps/collections/stats` — Get statistics of number of requests for collections by application over a specified time period. Returns aggregated data showing how many DNS requests were made for each application within different 
  - body: { to?: string, from?: string, name?: string, type?: string, source?: string, nat_ips?: string, user_ids?: string, agent_ids?: string, private_ip?: string, agent_types?: string, network_ids?: string, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, security_report?: boolean, organization_ids?: string, application_category_ids?: string }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/total/apps/networks/stats` — Get statistics showing the number of requests for sites by application across networks over a specified time period. Use this to analyze application usage patterns and DNS query volumes per applicatio
  - body: { to?: string, from?: string, name?: string, type?: string, source?: string, nat_ips?: string, user_ids?: string, agent_ids?: string, private_ip?: string, agent_types?: string, network_ids?: string, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, security_report?: boolean, organization_ids?: string, application_category_ids?: string }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/total/apps/organizations` — Tool to get statistics of number of requests for organizations by application in a period of time. Use when you need to analyze application usage patterns across different organizations within a speci
  - body: { to?: string, from?: string, name?: string, type?: string, msp_id?: integer, source?: string, nat_ips?: string, user_ids?: string, agent_ids?: string, private_ip?: string, agent_types?: string, network_ids?: string, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, security_report?: boolean, organization_ids?: string, application_category_ids?: string }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/total/apps/users/stats` — Get statistics of the number of requests for users by application within a specified time period. Returns detailed application usage data broken down by user, showing which users are accessing which a
  - body: { to?: string, from?: string, name?: string, type?: string, source?: string, nat_ips?: string, user_ids?: string, agent_ids?: string, private_ip?: string, agent_types?: string, network_ids?: string, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, security_report?: boolean, organization_ids?: string, application_category_ids?: string }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/total/categories` — Get the total number of requests by category for sites in a period of time. Returns aggregated statistics showing how many DNS requests were made to each website category during the specified time ran
  - body: { to?: string, from?: string, type?: string, msp_id?: integer, source?: string, user_ids?: string, agent_ids?: string, private_ip?: string, agent_types?: string, bucket_size?: string, network_ids?: string, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, security_report?: boolean, organization_ids?: string, show_individual_networks?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/total/categories/agents` — Get the total number of requests by category for roaming clients (user agents) during a specified time period. Use this to analyze category-level traffic patterns for roaming/mobile users, understand 
  - body: { to?: string, from?: string, type?: string, source?: string, user_ids?: string, agent_ids?: string, private_ip?: string, agent_types?: string, bucket_size?: string, network_ids?: string, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, security_report?: boolean, organization_ids?: string, show_individual_agents?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/total/categories/collections` — Get the total number of DNS requests by category for collections over a specified time period. Returns aggregated statistics showing request counts grouped by website categories across collections. Us
  - body: { to?: string, from?: string, type?: string, source?: string, user_ids?: string, agent_ids?: string, private_ip?: string, agent_types?: string, bucket_size?: string, network_ids?: string, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, security_report?: boolean, organization_ids?: string, show_individual_collections?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/total/categories/orgs` — Get the total number of DNS requests by category for organizations over a specified time period. Returns aggregated statistics showing how many requests were made to each category (e.g., Social Networ
  - body: { to?: string, from?: string, type?: string, source?: string, user_ids?: string, agent_ids?: string, private_ip?: string, agent_types?: string, bucket_size?: string, network_ids?: string, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, security_report?: boolean, organization_ids?: string, show_individual_organizations?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/total/categories/users` — Gets the total number of DNS requests by category for users in a specified time period. Returns aggregated traffic data showing which content categories were accessed and by which users. Use this to a
  - body: { to?: string, from?: string, type?: string, source?: string, user_ids?: string, agent_ids?: string, private_ip?: string, agent_types?: string, bucket_size?: string, network_ids?: string, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, security_report?: boolean, organization_ids?: string, show_individual_users?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/total/category/stats` — Tool to get the total number of stats for a category in a period of time. Use when you need to analyze category-level request statistics including allowed, blocked, and threat requests within a specif
  - body: { to?: string, from?: string, msp_id?: integer, network_ids?: string, category_ids?: string, organization_id?: integer }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/total/client/stats` — Gets the organization network, users and client stats from traffic reports. Returns total and active counts for sites, users, roaming clients, and relays. Use this when you need to understand the depl
  - body: { to?: string, from?: string, msp_id?: integer, network_ids?: string, organization_id?: integer }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/total/collections` — Get the total number of DNS requests by collection for sites over a specified time period. Returns aggregated data showing how many requests were made for each collection, optionally grouped by networ
  - body: { to?: string, from?: string, type?: string, source?: string, user_ids?: string, agent_ids?: string, private_ip?: string, agent_types?: string, bucket_size?: string, network_ids?: string, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, security_report?: boolean, organization_ids?: string, show_individual_networks?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/total/collections/agents` — Get the total number of requests by collection for roaming clients over a specified time period. Returns aggregated request counts grouped by collection with support for extensive filtering by agents,
  - body: { to?: string, from?: string, type?: string, source?: string, user_ids?: string, agent_ids?: string, private_ip?: string, agent_types?: string, bucket_size?: string, network_ids?: string, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, security_report?: boolean, organization_ids?: string, show_individual_agents?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/total/collections/orgs` — Get the total number of DNS requests by collection for organizations over a specified time period. Returns aggregated data showing how many DNS requests were made for each collection within different 
  - body: { to?: string, from?: string, type?: string, source?: string, user_ids?: string, agent_ids?: string, private_ip?: string, agent_types?: string, bucket_size?: string, network_ids?: string, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, security_report?: boolean, organization_ids?: string, show_individual_organizations?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/total/collections/users` — Get the total number of DNS requests by collection for users over a specified time period. Returns aggregated request counts grouped by collections and users, with support for time bucketing and exten
  - body: { to?: string, from?: string, type?: string, source?: string, user_ids?: string, agent_ids?: string, private_ip?: string, agent_types?: string, bucket_size?: string, network_ids?: string, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, security_report?: boolean, organization_ids?: string, show_individual_users?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/total/deployments` — Gets the organization deployments information including collections, relays, sync tools, user agents, and users. Use this to retrieve deployment metrics and statistics for an organization or filtered 
  - body: { msp_id?: integer, network_ids?: string, organization_id?: integer }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/total/domain/requests` — Get the total number of requests for a domain over a specified time period. Returns aggregate request counts for domains, helping analyze domain access patterns and traffic volumes. Supports filtering
  - body: { to?: string, from?: string, domain?: string, msp_id?: integer, network_ids?: string, organization_id?: integer }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/total/domain/stats` — Tool to get the total number of stats for a domain in a period of time. Use when you need to analyze domain-level request statistics including allowed, blocked, and threat requests within a specified 
  - body: { to?: string, fqdn?: string, from?: string, domain?: string, msp_id?: integer, network_ids?: string, organization_id?: integer }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/total/domains` — Get the total number of requests by domain for sites in a period of time. Returns aggregated statistics showing how many DNS requests were made to each domain during the specified time range. Use this
  - body: { to?: string, from?: string, type?: string, domain?: string, source?: string, user_ids?: string, agent_ids?: string, private_ip?: string, agent_types?: string, bucket_size?: string, network_ids?: string, category_ids?: string, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, security_report?: boolean, organization_ids?: string, show_individual_networks?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/total/domains/collections` — Tool to retrieve the total number of DNS requests by domain for collections within a specified time period. Use when you need to analyze which domains are being accessed most frequently, track collect
  - body: { to?: string, from?: string, type?: string, domain?: string, source?: string, user_ids?: string, agent_ids?: string, private_ip?: string, agent_types?: string, bucket_size?: string, network_ids?: string, category_ids?: string, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, security_report?: boolean, organization_ids?: string, show_individual_collections?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/total/domains/organizations` — Get the total number of DNS requests by domain for organizations over a specified time period. Returns aggregated statistics showing how many requests were made to each domain across one or more organ
  - body: { to?: string, from?: string, type?: string, domain?: string, source?: string, user_ids?: string, agent_ids?: string, private_ip?: string, agent_types?: string, bucket_size?: string, network_ids?: string, category_ids?: string, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, security_report?: boolean, organization_ids?: string, show_individual_organizations?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/total/domains/users` — Gets the total number of DNS requests by domain for users in a period of time. Use this when you need to analyze domain traffic patterns across users or generate traffic reports. At least one query pa
  - body: { show_individual_users?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/total/organizations/requests` — Get the total number of DNS requests for organizations in a specified time period. Returns time-series data showing request volumes aggregated by configurable time buckets. Use this to analyze overall
  - body: { to?: string, fqdn?: string, from?: string, name?: string, type?: string, domain?: string, msp_id?: integer, user_ids?: string, agent_ids?: string, agent_types?: string, bucket_size?: string, network_ids?: string, category_ids?: string, collection_ids?: string, application_ids?: string, organization_id?: integer, security_report?: boolean, organization_ids?: string }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/total/organizations/stats` — Retrieves aggregated DNS traffic statistics across organizations for a specified time period. Returns total request counts (allowed, blocked, threats) and the organizations included in the report. Use
  - body: { to?: string, from?: string, name?: string, type?: string, msp_id?: integer, user_ids?: string, agent_ids?: string, agent_types?: string, bucket_size?: string, collection_ids?: string, organization_id?: integer, security_report?: boolean, application_category_ids?: string }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/total/requests` — Get the total number of DNS requests over a specified time period. Returns time-series data showing DNS request volumes aggregated by configurable time buckets (15 minutes or 1 day). Use this to analy
  - body: { to?: string, from?: string, type?: string, msp_id?: integer, source?: string, nat_ips?: string, user_ids?: string, agent_ids?: string, private_ip?: string, agent_types?: string, bucket_size?: string, network_ids?: string, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, security_report?: boolean, organization_ids?: string, show_individual_networks?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/total/requests/agents` — Get the total number of requests for roaming clients (user agents) during a specified time period. Use this to analyze overall traffic volume from roaming/mobile users, track request patterns over tim
  - body: { to?: string, from?: string, type?: string, msp_id?: integer, source?: string, nat_ips?: string, user_ids?: string, agent_ids?: string, private_ip?: string, agent_types?: string, bucket_size?: string, network_ids?: string, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, security_report?: boolean, organization_ids?: string, show_individual_agents?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/total/requests/collections` — Get the total number of requests for collections over a specified time period. Returns time-series data showing collection request volumes aggregated by configurable time buckets. Use this to analyze 
  - body: { to?: string, from?: string, type?: string, source?: string, nat_ips?: string, user_ids?: string, agent_ids?: string, private_ip?: string, agent_types?: string, bucket_size?: string, network_ids?: string, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, security_report?: boolean, organization_ids?: string, show_individual_collections?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/total/requests/geo` — Gets the total number of DNS requests by geographic location for organizations in a specified time period. Used for generating heatmap visualizations on the overview dashboard. Returns network IDs, or
  - body: { to?: string, from?: string, limit: integer, msp_id?: integer, organization_ids?: string }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/total/requests/organizations` — Get the total number of DNS requests for organizations in a specified time period. Returns time-series data showing request volumes aggregated by configurable time buckets (15 minutes or 1 day). Use t
  - body: { to?: string, from?: string, type?: string, msp_id?: integer, source?: string, nat_ips?: string, user_ids?: string, agent_ids?: string, private_ip?: string, agent_types?: string, bucket_size?: string, network_ids?: string, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, security_report?: boolean, organization_ids?: string, show_individual_organizations?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/total/requests/users` — Gets the total number of requests for users in a period of time. Use this to analyze DNS traffic patterns, monitor user activity, and generate reports on request volume. Supports extensive filtering b
  - body: { to?: string, from?: string, type?: string, msp_id?: integer, source?: string, nat_ips?: string, user_ids?: string, agent_ids?: string, private_ip?: string, agent_types?: string, bucket_size?: string, network_ids?: string, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, security_report?: boolean, organization_ids?: string, show_individual_users?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/total/roaming/clients` — Gets the roaming clients information for the specified organization. Use this to retrieve roaming client statistics and deployment information across organizations.
  - body: { msp_id?: integer, organization_id?: integer }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/total/threats` — Get the total number of threats detected over a specified time period. Returns time-series data showing threat volumes aggregated by configurable time buckets (15 minutes or 1 day). Use this to monito
  - body: { to?: string, from?: string, type?: string, source?: string, user_ids?: string, agent_ids?: string, private_ip?: string, agent_types?: string, bucket_size?: string, network_ids?: string, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, organization_ids?: string, show_individual_networks?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/total/threats/agents` — Get the total number of threats for roaming clients in a period of time. Returns time-series data showing threat counts aggregated by configurable time buckets for agents (roaming clients). Use this t
  - body: { to?: string, from?: string, type?: string, source?: string, user_ids?: string, agent_ids?: string, private_ip?: string, agent_types?: string, bucket_size?: string, network_ids?: string, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, organization_ids?: string, show_individual_agents?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/total/threats/collections` — Tool to retrieve the total number of threats for collections over a specified time period. Use when you need to analyze threat patterns, generate security reports, or monitor DNS-based threats blocked
  - body: { to?: string, from?: string, type?: string, source?: string, user_ids?: string, agent_ids?: string, private_ip?: string, agent_types?: string, bucket_size?: string, network_ids?: string, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, organization_ids?: string, show_individual_collections?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/total/threats/organizations` — Get the total number of threats detected for organizations over a specified time period. Returns aggregated threat statistics showing how many malicious or dangerous DNS requests were identified acros
  - body: { to?: string, from?: string, type?: string, source?: string, user_ids?: string, agent_ids?: string, private_ip?: string, agent_types?: string, bucket_size?: string, network_ids?: string, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, organization_ids?: string, show_individual_organizations?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/list/traffic/reports/total/threats/users` — Get the total number of threats for users in a period of time. Returns aggregated statistics showing security threats detected across users during the specified time range. Use this to monitor user-le
  - body: { to?: string, from?: string, type?: string, source?: string, user_ids?: string, agent_ids?: string, private_ip?: string, agent_types?: string, bucket_size?: string, network_ids?: string, mac_addresses?: string, private_ip_to?: string, collection_ids?: string, application_ids?: string, private_ip_from?: string, organization_ids?: string, show_individual_users?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/list/user/agent/bulk/deletes/counts` — Tool to get user agent bulk delete counts by filtering criteria. Use when you need to determine how many user agents can be deleted or uninstalled and deleted based on various filters like agent state
  - body: { tags?: string[], type?: string, state?: string, search?: string, status?: string, agent_state?: string, name_search?: string, network_ids?: integer[], organization_id?: integer, traffic_received_last_15_mins?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/list/user/agent/bulk/updates/counts` — Tool to get user agent bulk delete counts by filters. Use when you need to determine how many user agents match certain criteria and whether they support remote uninstall. Returns counts of agents tha
  - body: { tags?: string[], type?: string, state?: string, search?: string, status?: string, policy_id?: integer, agent_state?: string, name_search?: string, network_ids?: integer[], block_page_id?: integer, organization_id?: integer, release_channels?: string[], scheduled_policy_id?: integer, traffic_received_last_15_mins?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/list/user/agent/releases` — Gets a list of latest user agent releases for each unique combination of agent_type, architecture, release_channels, and white label. Use this to discover available agent versions for deployment acros
- `POST https://api.mcp.ai/api/dnsfilter/list/user/agent/releases/relay` — Tool to get a list of latest relay releases for each unique combination of architecture, release channels, and white label. Use when you need to retrieve available relay agent versions for deployment 
- `POST https://api.mcp.ai/api/dnsfilter/list/user/agents/all` — Tool to retrieve ALL user agents with basic information. Use when you need a comprehensive list of all user agents, optionally filtered by network, organization, state, status, or tags. Supports pagin
  - body: { sort?: string, tags?: string[], type?: string, state?: string, search?: string, status?: string, page_size?: integer, network_ids?: string[], page_number?: integer, organization_ids?: string[] }
- `POST https://api.mcp.ai/api/dnsfilter/list/user/agents/counts` — Tool to get counts of user agents for each status. Use when you need to retrieve statistics about user agents grouped by their protection status (protected, unprotected, bypassed, etc.). Supports filt
  - body: { tags?: string[], type?: string, state?: string, msp_id?: integer, search?: string, status?: string, name_search?: string, network_ids?: integer[], new_agent_states?: boolean, organization_ids?: integer[] }
- `POST https://api.mcp.ai/api/dnsfilter/list/user/agents/csv` — Tool to export user agents as CSV data for a specific organization. Use when you need to retrieve a CSV-formatted list of user agents, optionally including suborg data.
  - body: { timezone?: string, include_suborgs?: boolean, organization_id: integer }
- `POST https://api.mcp.ai/api/dnsfilter/list/user/agents/tags` — Retrieves all tags used by user agents on a network or organization. Tags help categorize and organize user agents for easier management and policy application. Use when you need to view available tag
  - body: { msp_id?: integer, network_ids?: integer[], organization_ids?: integer[], include_used_only?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/list/users/all` — Tool to get all users basic information with optional pagination. Use when you need to retrieve a list of users in the organization with their profile details including name, email, and contact inform
  - body: { page?: object }
- `POST https://api.mcp.ai/api/dnsfilter/lookup/network/by/ip` — Tool to get basic network information based on an IP address lookup. Use when you need to identify which network an IP belongs to and retrieve its block page configuration settings.
  - body: { requesting_ip_address: string }
- `POST https://api.mcp.ai/api/dnsfilter/remove/allowed/application` — Removes a single application from the allow list of a policy in DNSFilter. Use this action when you need to revoke access for a specific application that was previously allowed. The application will b
  - body: { id: integer, name: string, include_relationships?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/remove/allowlist/domains/from/policies` — Tool to remove one or more domains from one or more policies' allow lists. Use when you need to bulk remove previously allowed domains from multiple policies at once, useful for security updates or po
  - body: { notes?: object, domains: string[], policy_ids: integer[] }
- `POST https://api.mcp.ai/api/dnsfilter/remove/blacklist/category` — Tool to remove a single category from a policy's blocklist. Use when you need to unblock a specific content category that was previously restricted in a DNS filtering policy. The category will be remo
  - body: { id: integer, category_id: integer, include_relationships?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/remove/blacklist/domain/from/policy` — Tool to remove a single domain from a policy's blocklist. Use when you need to unblock a specific domain that was previously blocked by a policy, such as when correcting false positives or updating fi
  - body: { id: integer, note: string, domain: string, include_relationships?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/remove/blocked/application` — Removes a single application from the block list of a policy in DNSFilter. Use this action when you need to unblock a specific application that was previously blocked by the filtering policy. The appl
  - body: { id: integer, name: string, include_relationships?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/remove/blocklist/domains` — Tool to remove one or more domains from one or more policy block lists in bulk. Use when you need to unblock domains across multiple policies simultaneously, such as when removing false positives or u
  - body: { notes?: object, domains: string[], policy_ids: integer[] }
- `POST https://api.mcp.ai/api/dnsfilter/remove/whitelist/domain/from/policy` — Tool to remove a single domain from a policy's whitelist/allowlist. Use when you need to revoke access for a previously allowed domain, useful for security updates or policy cleanup.
  - body: { id: integer, note: string, domain: string, include_relationships?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/resend/user/invite` — Tool to resend an invitation email to a user in a DNSFilter organization. Use when a user hasn't received their original invitation or needs a new invitation link. The invitation will be sent to the u
  - body: { id: integer, organization_id: integer }
- `POST https://api.mcp.ai/api/dnsfilter/suggest/domain/threat` — Submit a domain threat report to DNSFilter for review and potential threat categorization. Use this action when you have identified a suspicious or malicious domain that should be reported to DNSFilte
  - body: { fqdn: string, notes: string }
- `POST https://api.mcp.ai/api/dnsfilter/update/billing/address` — Updates the billing address for a DNSFilter organization. Use this when you need to modify billing contact information, shipping addresses, or invoice recipient details for an organization.
  - body: { billing_address: object, organization_id: integer }
- `POST https://api.mcp.ai/api/dnsfilter/update/current/user` — Updates profile attributes for the currently authenticated DNSFilter user. Use this action to modify the user's first name, last name, or phone number. At least one field must be provided in the updat
  - body: { user: object }
- `POST https://api.mcp.ai/api/dnsfilter/update/enterprise/connection` — Updates an existing enterprise connection for SSO authentication in DNSFilter. Use this action to modify enterprise connection settings such as display name, identity provider configuration, authorize
  - body: { id: integer, idp?: string, options?: object, role_map?: object[], display_name?: string, role_default?: string, organization_id?: integer, authorized_domains?: string[], default_organization_id?: integer }
- `POST https://api.mcp.ai/api/dnsfilter/update/ip/address` — Updates an existing IP address record in DNSFilter with new data. This action modifies an IP address entry by its ID, allowing you to change the IP address itself, reassign it to a different network o
  - body: { id: integer, ip_address: object }
- `POST https://api.mcp.ai/api/dnsfilter/update/mac/addresses` — Updates an existing MAC address entry in DNSFilter with new configuration. This action allows you to modify MAC address settings including the physical address itself, organization assignment, filteri
  - body: { id: integer, mac_address: object }
- `POST https://api.mcp.ai/api/dnsfilter/update/networks/bulk` — Tool to bulk update multiple networks with specified configuration changes. Use when you need to apply the same settings (policy, block page, VPN status) to multiple networks simultaneously instead of
  - body: { ids: string, policy_id?: integer, block_page_id?: integer, organization_id?: integer, scheduled_policy_id?: integer, is_legacy_vpn_active?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/update/organizations` — Updates an existing organization with the specified data in DNSFilter. Use this action to modify organization information such as name, billing contacts, address, licensing, MSP management settings, o
  - body: { id: integer, organization: object }
- `POST https://api.mcp.ai/api/dnsfilter/update/organizations/users` — Updates a user or permissions within an organization in DNSFilter. Use this action to modify user details such as email, name, phone, role, or organization permissions. Common use cases include updati
  - body: { id: integer, user: object, organization_id: integer }
- `POST https://api.mcp.ai/api/dnsfilter/update/policies` — Updates an existing DNS filtering policy with the specified configuration in DNSFilter. Use this action to modify filtering rules including blocked/allowed categories, domain lists, safe search enforc
  - body: { id: integer, policy: object, append_domains?: boolean, include_relationships?: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/update/policies/application` — Updates a policy with the specified application data, configuring which policies allow or block access to an application. This action assigns allow and block policy rules to a specific application, co
  - body: { allow_policies: integer[], application_id: integer, block_policies: integer[], organization_id: integer }
- `POST https://api.mcp.ai/api/dnsfilter/update/policies/permissive/mode` — Tool to update the permissive mode setting for a specific policy. Use when you need to enable or disable permissive mode for a DNS filtering policy.
  - body: { id: integer, permissive_mode: boolean }
- `POST https://api.mcp.ai/api/dnsfilter/update/scheduled/policies` — Updates an existing scheduled policy in DNSFilter with the specified data. Use this action to modify time-based policy configurations that control filtering rules based on schedules throughout the wee
  - body: { id: integer, name?: string, timezone?: string, policy_ids?: integer[], organization_id?: integer }
- `POST https://api.mcp.ai/api/dnsfilter/update/scheduled/reports` — Updates an existing scheduled report configuration in DNSFilter. Use this action to modify report frequency, delivery schedule, content options, or recipient settings. Common use cases include changin
  - body: { id: integer, scheduled_report: object }
- `POST https://api.mcp.ai/api/dnsfilter/update/user/agent/cleanups` — Updates a user agent cleanup operation in DNSFilter. Use this to modify the inactivity threshold or start/restart a cleanup job. This action allows you to: 1. Change the 'inactive_for' threshold to ad
  - body: { id: integer, start?: boolean, inactive_for?: integer }
- `POST https://api.mcp.ai/api/dnsfilter/validate/auth0/jwt` — Tool to validate a JWT with Auth0. Use when you need to confirm token validity before making DNSFilter API calls.
  - body: { jwt: string }

## Example prompts
- "What can I do in Dnsfilter?"
- "Show me a summary of my Dnsfilter account"

## More
- Page: https://mcp.ai/dnsfilter
- Agent spec (llms.txt): https://mcp.ai/dnsfilter/llms.txt
- Postman collection: https://mcp.ai/dnsfilter/postman.json