NextDNS is a DNS service that enhances internet security and privacy by blocking malicious websites, tracking scripts, and ads before they reach your device.
NextDNS is a DNS service that enhances internet security and privacy by blocking malicious websites, tracking scripts, and ads before they reach your device. On Nagent, Nextdns is exposed as a fully-configurable security & identity tools integration that any agent can call — 68 actions, and API key authentication. No code is required to wire Nextdns into your workflow — connect it once via the External Integrations panel and reuse it across every agent you build.
Agent builders use Nextdns to automate the kinds of tasks security & identity tools teams previously handled manually. Concrete examples — each one is a single agent step in Nagent — include:
Every action and trigger is paired with a structured input/output schema (visible in the sections below), so when you wire Nextdns into Helix — our agentic agent builder — the editor knows exactly what each step expects and produces. Configure once, deploy anywhere across your Nagent agents.
Every operation an agent can call against Nextdns, with input parameters and output schema. Drop these into any step of an agent built in Helix.
NEXTDNS_ADD_ALLOWLIST_ENTRYTool to add a domain to the allowlist of a NextDNS profile. Use when allowing specific domains under a profile after obtaining its ID.
Input parameters
Whether the allowlist entry is active. Defaults to true.
The domain to add to the allowlist.
The 6-character alphanumeric identifier of the NextDNS profile. Use NEXTDNS_LIST_CONFIGURATIONS to get available profile IDs.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_ADD_BLOCKED_TLDTool to add a top-level domain to the security blocklist for a NextDNS profile. Use after listing current security settings to ensure the TLD is not already blocked.
Input parameters
The top-level domain to block without the leading dot (e.g., 'io', 'xyz', 'network').
ID of the NextDNS profile to update.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_ADD_DENYLIST_DOMAINTool to add a domain to the denylist of a NextDNS profile. Use when blocking specific domains under a profile after obtaining its ID.
Input parameters
Whether the denylist entry is active. Defaults to true.
NextDNS profile configuration ID.
The domain to add to the denylist.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_ADD_PARENTAL_CONTROL_CATEGORYTool to add a content category to the parental control categories list. Use when you need to add a new category to block or allow specific content types like pornography, gambling, or social networks.
Input parameters
Whether the category block is active. Set to true to block this category, false to add it as unblocked.
The unique 6-character alphanumeric identifier of the NextDNS profile. Obtain this from the LIST_CONFIGURATIONS action.
The category identifier to add (e.g., 'porn', 'gambling', 'dating', 'piracy', 'social-networks').
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_ADD_PARENTAL_CONTROL_SERVICETool to add a service to the parental control services list of a NextDNS profile. Use when blocking specific services (like social media platforms) under a profile.
Input parameters
The service ID to add (e.g., 'tiktok', 'facebook', 'instagram').
Whether the service is blocked (true) or allowed (false). Defaults to true.
The profile ID.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_ADD_PRIVACY_BLOCKLISTTool to add a blocklist to the privacy blocklists for a NextDNS profile. Use when enabling additional privacy blocklists for a profile.
Input parameters
The blocklist ID to add. Common IDs include 'nextdns-recommended', 'oisd', 'easylist', 'adguard-dns-filter'.
NextDNS profile configuration ID.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_ADD_PRIVACY_NATIVETool to add a native tracking service to the blocked list for a NextDNS profile. Use when blocking native trackers from specific vendors.
Input parameters
The native tracking service ID to block (e.g., 'xiaomi', 'apple', 'samsung', 'huawei', 'windows', 'amazon', 'sonos', 'roku').
NextDNS profile ID to add the native tracking service to.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_ADD_REWRITETool to add a DNS rewrite rule to a NextDNS profile. Use when you need to configure custom DNS resolution for specific domains.
Input parameters
The domain name to rewrite. Can be a full domain or subdomain.
The IP address or domain to rewrite to. This is the target that the domain will resolve to.
The 6-character alphanumeric identifier of the NextDNS profile. Use NEXTDNS_LIST_CONFIGURATIONS to get available profile IDs.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_CLEAR_LOGSTool to clear DNS logs for a NextDNS profile. Use when you want to remove all existing query logs for a given profile. Note: this operation cannot be undone.
Input parameters
The unique 6-character alphanumeric ID of the NextDNS profile to clear logs for. Obtain this from NEXTDNS_LIST_CONFIGURATIONS.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_CREATE_PROFILEThis tool allows users to create a new NextDNS profile. It uses the POST method at the endpoint https://api.nextdns.io/profiles. A profile is a distinct configuration set for DNS filtering and security settings.
Input parameters
Name of the new profile.
Privacy settings for the profile.
List of domains to denylist.
Security settings for the profile.
General settings for the profile.
List of domains to allowlist.
Parental control settings for the profile.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_DELETE_ALLOWLIST_ENTRYTool to remove a domain from a NextDNS profile's allowlist. Use when you need to stop allowing a previously whitelisted domain.
Input parameters
The domain to remove from the profile's allowlist. Must exactly match a domain currently in the allowlist.
The 6-character alphanumeric ID of the NextDNS profile. Use 'List Configurations' to get available profile IDs.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_DELETE_CONFIGTool to delete a NextDNS configuration profile. Use when you need to remove an existing profile by its ID. Use after confirming the profile exists.
Input parameters
The ID of the NextDNS configuration profile to delete
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_DELETE_PARENTAL_CONTROL_CATEGORYTool to remove a category from parental control blocked categories. Use when you need to unblock a content category that was previously blocked. Use 'Get Parental Control Categories' first to verify the category is currently blocked.
Input parameters
The unique 6-character alphanumeric identifier of the NextDNS profile. Obtain this from the LIST_CONFIGURATIONS action.
The category identifier to remove from blocked categories (e.g., 'dating', 'porn', 'gambling', 'social-networks').
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_DELETE_PARENTAL_CONTROL_SERVICETool to remove a service from parental control blocked services. Use when you need to unblock a service (like TikTok, Instagram, or other apps) that was previously blocked.
Input parameters
The unique 6-character alphanumeric identifier of the NextDNS profile. Obtain this from the LIST_CONFIGURATIONS action.
The service identifier to remove from blocked services (e.g., 'tiktok', 'instagram', 'facebook', 'snapchat', 'twitter', 'youtube').
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_DELETE_PRIVACY_BLOCKLISTTool to remove a blocklist from the privacy blocklists for a NextDNS profile. Use when disabling or removing privacy blocklists from a profile.
Input parameters
The ID of the NextDNS profile. This is the unique 6-character alphanumeric identifier for the profile.
The blocklist identifier to remove. Common IDs include 'nextdns-recommended', 'oisd', 'easylist', 'adguard-dns-filter'.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_DELETE_PRIVACY_NATIVETool to remove a native tracking entry from a NextDNS profile's privacy settings. Use when you need to stop blocking a specific native app tracker (like Apple, Samsung, Huawei, etc.).
Input parameters
The 6-character alphanumeric ID of the NextDNS profile. Use 'List Configurations' to get available profile IDs.
The native tracking identifier to remove. Must exactly match a native tracker currently in the profile's privacy settings.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_DELETE_REWRITETool to delete a DNS rewrite rule from a NextDNS profile. Use when you need to remove an existing DNS rewrite rule by its ID.
Input parameters
The 6-character alphanumeric ID of the NextDNS profile. Use 'List Configurations' to get available profile IDs.
The unique identifier of the DNS rewrite rule to delete.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_DOWNLOAD_LOGSRetrieves the download URL for exported DNS query logs from a NextDNS profile. Returns a time-limited URL pointing to a CSV file containing the profile's DNS logs. Use this to export log data for analysis, backup, or compliance purposes. The profile_id can be obtained from the list_configurations action.
Input parameters
Controls the API response format. When True (default), the API returns a 302 redirect with the log file URL in the Location header. When False, the API returns a JSON response containing the 'url' field. Either way, this tool extracts and returns the URL.
ID of the NextDNS profile to download logs for (e.g., 'abc123').
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_GET_ALLOWLISTTool to retrieve the list of allowed domains for a NextDNS profile. Use when you need to view all domains currently whitelisted in a profile.
Input parameters
The 6-character alphanumeric identifier of the NextDNS profile. Use LIST_CONFIGURATIONS to get available profile IDs.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_GET_ANALYTICS_DESTINATIONSTool to retrieve destination analytics for a profile showing query destinations by country or GAFAM company. Use when you need to understand geographic distribution or big tech company query patterns.
Input parameters
Destination type: 'countries' for geographic distribution by country code, or 'gafam' for GAFAM (Google, Apple, Facebook, Amazon, Microsoft) company distribution.
Limit number of items to return (1-500)
Opaque pagination cursor for next page
Filter analytics for a specific device ID. Use '__UNIDENTIFIED__' for unidentified devices.
The 6-character alphanumeric NextDNS profile ID (e.g., 'ef5c1a'). Use LIST_CONFIGURATIONS to get available profile IDs.
Filter out entities with date newer or equal (exclusive). Same formats as from_date.
Filter out entities with date older than (inclusive). Supports ISO8601, Unix timestamps, and relative dates (e.g. '-7d').
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_GET_ANALYTICS_DEVICES2Tool to retrieve device analytics for a profile showing identified devices with names, models, and query counts. Use when you need per-device query metrics within a specific time frame.
Input parameters
Limit results per page (1-500, default: 10).
Pagination cursor for next page
Filter by specific device ID. Use '__UNIDENTIFIED__' to target unidentified devices.
ID of the NextDNS profile to query
Filter out entities with newer or equal date (exclusive). Supports same formats as from_date.
Filter out entities with older date (inclusive). Supports ISO 8601, Unix timestamps (s/ms), relative (e.g., '-7d'), or common date formats.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_GET_ANALYTICS_DNSSECTool to retrieve DNSSEC validation analytics for a profile showing validated vs non-validated query counts. Use after selecting a profile to analyze DNSSEC validation statistics.
Input parameters
Number of results per page (1-500).
Opaque pagination cursor for next page.
Filter analytics for a specific device ID. Use '__UNIDENTIFIED__' to filter unidentified devices only.
NextDNS profile ID (6-character alphanumeric identifier). Obtain from NEXTDNS_LIST_CONFIGURATIONS.
Exclusive end date filter. Same formats as from_date.
Inclusive start date filter. Supports ISO8601, Unix timestamps, and relative formats (e.g., '-7d').
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_GET_ANALYTICS_DOMAINSTool to retrieve analytics data for domains within a specific profile. Use after confirming the profile ID to get per-domain query stats.
Input parameters
Return root domains instead of full hostnames (e.g. 'icloud.com' instead of 'gateway.icloud.com').
Limit number of items to return (1-500)
Opaque pagination cursor for next page
Filter analytics for a specific device ID. Use '__UNIDENTIFIED__' for unidentified devices.
Filter domains by resolution status: 'default' (resolved normally), 'blocked' (blocked by rules/security), or 'allowed' (explicitly allowed).
The 6-character alphanumeric NextDNS profile ID (e.g., 'ef5c1a'). Use LIST_CONFIGURATIONS to get available profile IDs.
Filter out entities with date newer or equal (exclusive). Same formats as from_date.
Filter out entities with date older than (inclusive). Supports ISO8601, Unix timestamps, and relative dates (e.g. '-7d').
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_GET_ANALYTICS_ENCRYPTIONTool to retrieve encryption analytics for a profile showing encrypted vs unencrypted query counts. Use when you need to understand the breakdown of DNS queries by encryption status (DoH/DoT vs plain DNS).
Input parameters
Filter out entities with newer or equal date (exclusive). Same formats as from.
Filter out entities with older date (inclusive). Supports ISO8601, Unix timestamps, and relative dates (e.g., '-7d').
Limit number of results per page (1-500).
Pagination cursor for next page
Filter analytics for a specific device ID. Use '__UNIDENTIFIED__' for unidentified devices.
The 6-character alphanumeric NextDNS profile ID (e.g., 'ef5c1a'). Use LIST_CONFIGURATIONS to get available profile IDs.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_GET_ANALYTICS_IPSTool to retrieve analytics aggregated by client IP addresses. Use when you need to analyze DNS query distribution per client IP for a given profile.
Input parameters
Exclusive end date filter. Same formats as `from`.
Inclusive start date filter. Supports ISO8601, Unix timestamps (s/ms), relative (e.g. '-7d') or common date formats.
Limit number of items to return (1-500).
Opaque pagination cursor for next page.
Filter analytics for a specific device ID. Use '__UNIDENTIFIED__' for unidentified devices.
ID of the NextDNS profile to query
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_GET_ANALYTICS_IP_VERSIONSTool to retrieve analytics grouped by IP version within a specific profile. Use after you have a profile ID to see IPv4 vs IPv6 query counts.
Input parameters
Filter out entities with date newer or equal (exclusive). Same formats as from_date.
Filter out entities with date older than (inclusive). Supports ISO8601, Unix timestamps (s/ms), relative dates (e.g. '-7d'), or common date formats.
Limit number of items to return (1-500)
Opaque pagination cursor for next page
Filter analytics for a specific device ID. Use '__UNIDENTIFIED__' for unidentified devices.
The 6-character alphanumeric NextDNS profile ID (e.g., 'ef5c1a'). Obtain this from the list_configurations action.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_GET_ANALYTICS_PROTOCOLSTool to retrieve protocol analytics for a specific profile showing DNS protocol distribution (DNS-over-HTTPS, DNS-over-TLS, UDP). Use after confirming the profile ID to analyze protocol usage patterns.
Input parameters
Limit number of items to return (1-500)
Opaque pagination cursor for next page
Filter analytics for a specific device ID. Use '__UNIDENTIFIED__' for unidentified devices.
The 6-character alphanumeric NextDNS profile ID (e.g., 'ef5c1a'). Use LIST_CONFIGURATIONS to get available profile IDs.
Filter out entities with date newer or equal (exclusive). Same formats as from_date.
Filter out entities with date older than (inclusive). Supports ISO8601, Unix timestamps, and relative dates (e.g. '-7d').
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_GET_ANALYTICS_QUERY_TYPESTool to retrieve DNS query counts broken down by query type. Use after selecting a profile and specifying date filters to analyze distribution by type.
Input parameters
Number of results per page (1-500).
Opaque pagination cursor for next page.
Filter by device ID; use '__UNIDENTIFIED__' for unidentified devices.
ID of the NextDNS profile to query
Exclusive end date filter (exclusive). Same formats as from_date.
Inclusive start date filter (inclusive). Supports ISO 8601, Unix timestamps (s/ms), relative dates (e.g., '-7d'), or common date formats.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_GET_ANALYTICS_REASONS2Tool to retrieve blocking reasons analytics showing blocklists, native tracking protection, and other reasons for blocked queries. Use after selecting a profile to understand what categories are blocking queries.
Input parameters
Number of results per page (1-500, default: 10).
Opaque pagination cursor for next page.
Filter analytics for a specific device ID. Use '__UNIDENTIFIED__' to filter unidentified devices only.
NextDNS profile ID (6-character alphanumeric identifier). Obtain from NEXTDNS_LIST_CONFIGURATIONS.
Exclusive end date filter. Same formats as from_date.
Inclusive start date filter. Supports ISO8601, Unix timestamps, and relative formats (e.g., '-7d').
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_GET_ANALYTICS_STATUSTool to retrieve analytics status for a specific profile. Use when you need counts of DNS queries broken down by status categories.
Input parameters
Exclusive end date filter (exclusive). Same formats as `from`.
Inclusive start date filter (inclusive). Supports ISO 8601, Unix timestamps (s/ms), relative (e.g., '-7d'), or common date formats.
Number of results per page (1-500).
Pagination cursor for the next page.
Filter results by device ID. Use '__UNIDENTIFIED__' for unidentified devices.
ID of the NextDNS profile to query
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_GET_LOGSTool to retrieve logs for a specific NextDNS profile with optional filters. Use after confirming the profile ID to fetch raw or filtered DNS logs.
Input parameters
Filter out logs newer or equal to this date (exclusive). Same formats as `from`.
Return raw DNS queries instead of filtered navigational ones.
Filter out logs older than or equal to this date (inclusive). Accepts ISO8601, unix timestamps, relative (e.g. '-1d'), or common date formats.
Order of returned logs: 'asc' for oldest→newest or 'desc' for newest→oldest.
Maximum number of logs to return (10–1000).
Opaque pagination cursor from previous response.
Filter logs for a specific device ID.
Search logs by domain or substring. E.g., 'facebook' matches any domain containing that substring.
Filter logs by status.
ID of the NextDNS profile to retrieve logs for.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_GET_PARENTAL_CONTROLTool to get parental control settings for a profile. Returns services, categories, safe search, YouTube restricted mode, and bypass blocking status.
Input parameters
The unique 6-character alphanumeric identifier of the NextDNS profile. Obtain this from the LIST_CONFIGURATIONS action.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_GET_PARENTAL_CONTROL_CATEGORIESTool to get the list of blocked/allowed content categories for parental control. Use when you need to check which content categories are currently blocked or allowed for a specific profile.
Input parameters
The unique 6-character alphanumeric identifier of the NextDNS profile. Obtain this from the LIST_CONFIGURATIONS action.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_GET_PARENTAL_CONTROL_SERVICESTool to get the list of blocked/allowed services for parental control. Use when you need to review which services (like TikTok, Facebook, Netflix) are currently blocked or allowed in a profile's parental control settings.
Input parameters
The unique 6-character alphanumeric identifier of the NextDNS profile. Obtain this from the LIST_CONFIGURATIONS action.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_GET_PERFORMANCE_SETTINGSTool to get performance settings for a profile including ECS, cache boost, and CNAME flattening configuration. Use when you need to check current performance optimization settings before making changes.
Input parameters
The unique 6-character alphanumeric identifier of the NextDNS profile to retrieve performance settings for. Obtain this from the LIST_CONFIGURATIONS action.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_GET_PRIVACY_SETTINGSTool to get privacy settings for a profile including blocklists, native tracking settings, disguised trackers, and affiliate settings. Use when you need to check the current privacy configuration before making changes.
Input parameters
The unique 6-character alphanumeric identifier of the NextDNS profile to retrieve privacy settings for. Obtain this from the LIST_CONFIGURATIONS action.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_GET_PROFILERetrieves the details of a specific NextDNS profile. It requires a 'profileId' as a path parameter and returns the profile details including name, security, privacy, parental control, denylist, allowlist, and general settings.
Input parameters
The unique 6-character alphanumeric identifier of the NextDNS profile to retrieve. Obtain this from the LIST_CONFIGURATIONS action.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_GET_REWRITESTool to retrieve the list of DNS rewrites for a NextDNS profile. Use when you need to view all custom DNS rewrite rules configured in a profile.
Input parameters
The 6-character alphanumeric identifier of the NextDNS profile. Use LIST_CONFIGURATIONS to get available profile IDs.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_GET_SECURITY_TLDSTool to get the list of blocked TLDs (top-level domains) for a profile's security settings. Use when you need to retrieve only the blocked TLDs without fetching all security settings.
Input parameters
The profile ID to retrieve blocked TLDs for.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_GET_SETTINGSTool to get all settings for a NextDNS profile including logs, block page, performance, and web3 settings. Use when you need to retrieve the current configuration settings of a profile.
Input parameters
The unique 6-character alphanumeric identifier of the NextDNS profile to retrieve settings for. Obtain this from the list_profiles action.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_GET_SETTINGS_BLOCKPAGETool to retrieve the block page settings for a NextDNS profile. Use when you need to check if the block page is currently enabled or disabled for a specific profile.
Input parameters
The unique identifier of the NextDNS profile. Use LIST_CONFIGURATIONS to get available profile IDs.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_GET_SETTINGS_LOGSTool to retrieve the logging settings for a NextDNS profile. Use when you need to check logging status, data retention period, storage location, or privacy options.
Input parameters
The unique identifier of the NextDNS profile. Use LIST_CONFIGURATIONS to get available profile IDs.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_LIST_DENYLIST_DOMAINSTool to list domains in the denylist for a profile. Use after confirming the profile ID to review all blocked domains. Example: "List denylist domains for profile abc123."
Input parameters
The 6-character alphanumeric identifier of the NextDNS profile whose denylist to retrieve. Use NEXTDNS_LIST_CONFIGURATIONS to get available profile IDs.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_LIST_PROFILESList all NextDNS profiles for the authenticated user, returning profile IDs and configurations. Returns all profiles with their IDs, names, fingerprints, and user roles. Profile IDs returned by this action are used as the 'profileId' or 'config_id' parameter for other NextDNS actions (e.g., get profile details, update profile, etc.).
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_LIST_SECURITY_SETTINGSTool to list current security options for a NextDNS configuration. Use after obtaining the configuration ID to review active security settings.
Input parameters
NextDNS profile configuration ID.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_LOG_CLIENT_IPSTool to enable or disable logging of client IPs for a NextDNS configuration. Use when you need to toggle whether client IPs are recorded in DNS logs.
Input parameters
True to enable logging of client IPs, False to disable.
NextDNS configuration (profile) ID.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_LOG_DOMAINSTool to enable or disable logging of domains for a NextDNS profile. Use after retrieving profile settings when you need to adjust domain logging. Example: "Enable domain logging for profile abc123."
Input parameters
Whether to enable (True) or disable (False) logging of domains in the profile’s DNS logs.
ID of the NextDNS profile to update.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_REMOVE_BLOCKED_TLDTool to remove a top-level domain from the security blocklist for a NextDNS profile. Use after listing current security settings to confirm the TLD is currently blocked.
Input parameters
The top-level domain to unblock (without leading dot, e.g., 'io' not '.io').
ID of the NextDNS profile to update.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_REMOVE_DENYLIST_DOMAINRemoves a domain from a NextDNS profile's denylist (blocklist). The domain will no longer be blocked by the DNS filter after removal. Use 'List Denylist Domains' first to verify the domain exists in the denylist before attempting removal.
Input parameters
The domain to remove from the profile's denylist. Must exactly match a domain currently in the denylist.
The 6-character alphanumeric ID of the NextDNS profile. Use 'List Configurations' to get available profile IDs.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_RENAME_CONFIGTool to rename a NextDNS configuration (profile). Use when you need to update a profile's name after obtaining its ID. Example: RenameConfig(name="Home Profile", config_id="d46a5b")
Input parameters
The new name for the configuration. Must be non-empty and at most 100 characters.
The NextDNS configuration (profile) ID to rename.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_REPLACE_ALLOWLISTTool to replace the entire allowlist for a NextDNS profile. Use when you need to set a complete list of allowed domains, replacing all existing entries.
Input parameters
The 6-character alphanumeric identifier of the NextDNS profile. Use NEXTDNS_LIST_CONFIGURATIONS to get available profile IDs.
Array of domain objects to set as the complete allowlist. This will replace all existing allowlist entries.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_REPLACE_DENYLISTTool to replace the entire denylist (blocked domains) for a NextDNS profile. This operation completely replaces all existing denylist entries with the provided list. Use when you need to bulk update the denylist or clear all blocked domains. To add/remove individual domains, use NEXTDNS_ADD_DENYLIST_DOMAIN or NEXTDNS_REMOVE_DENYLIST_DOMAIN instead.
Input parameters
The 6-character alphanumeric identifier of the NextDNS profile whose denylist to replace. Use NEXTDNS_LIST_CONFIGURATIONS to get available profile IDs.
Array of domain objects to set as the complete denylist. This will replace all existing denylist entries. Each entry requires 'id' (domain name) and 'active' (boolean) fields. Pass an empty array to clear the denylist.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_REPLACE_PARENTAL_CONTROL_CATEGORIESTool to replace the entire list of blocked/allowed content categories for parental control. Use this to set which content categories should be blocked or allowed for a profile.
Input parameters
The 6-character alphanumeric NextDNS profile ID. Use NEXTDNS_LIST_CONFIGURATIONS to get available profile IDs.
Complete array of category objects to replace the existing list. Each object must have 'id' (category name) and 'active' (boolean) properties. This replaces the entire categories list.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_REPLACE_PARENTAL_CONTROL_SERVICESTool to replace the entire list of blocked/allowed services for parental control. Use when you need to set all service restrictions at once, replacing existing settings.
Input parameters
The 6-character alphanumeric NextDNS profile ID. Get this from NEXTDNS_LIST_CONFIGURATIONS.
Complete list of services to set. Each entry requires 'id' (service identifier) and 'active' (true to block, false to allow). Use an empty list \[\] to clear all service restrictions.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_REPLACE_PRIVACY_BLOCKLISTSTool to replace the entire list of privacy blocklists for a NextDNS profile. This operation completely replaces all existing blocklists with the provided list. Use when you need to bulk update privacy blocklists or clear all blocklists.
Input parameters
The unique 6-character alphanumeric identifier of the NextDNS profile. Obtain this from the LIST_PROFILES or LIST_CONFIGURATIONS action.
Array of blocklist objects to set as the complete privacy blocklists. This will replace all existing blocklists. Each entry requires 'id' field. Pass an empty array to clear all blocklists.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_REPLACE_PRIVACY_NATIVESTool to replace the entire list of blocked native tracking services for a NextDNS profile. This operation completely replaces all existing native tracking service blocks with the provided list. Use when you need to bulk update blocked native trackers or clear all blocks.
Input parameters
Array of native tracking service objects to set as the complete list. This will replace all existing native tracking service entries. Each entry requires an 'id' field with the service identifier. Pass an empty array to unblock all native tracking services.
The 6-character alphanumeric identifier of the NextDNS profile whose native tracking services to replace. Use NEXTDNS_LIST_CONFIGURATIONS to get available profile IDs.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_REPLACE_SECURITY_TLDSTool to replace the entire list of blocked TLDs (top-level domains) for a NextDNS profile's security settings. This operation completely replaces all existing blocked TLDs with the provided list. Use when you need to bulk update blocked TLDs or clear all TLD blocks. To add/remove individual TLDs, use NEXTDNS_ADD_BLOCKED_TLD or NEXTDNS_REMOVE_BLOCKED_TLD instead.
Input parameters
Array of TLD objects to set as the complete blocked TLD list. This will replace all existing blocked TLDs. Pass an empty array to clear all blocked TLDs.
The 6-character alphanumeric identifier of the NextDNS profile. Use NEXTDNS_LIST_CONFIGURATIONS to get available profile IDs.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_UPDATE_ALLOWLIST_ENTRYTool to update a specific allowlist entry in a NextDNS profile. Use when toggling the active status of a domain in the allowlist.
Input parameters
Whether the allowlist entry should be active (true) or inactive (false). When inactive, the domain will not be allowed through the filter.
The domain name of the allowlist entry to update. Must exactly match a domain currently in the allowlist.
The 6-character alphanumeric ID of the NextDNS profile. Use NEXTDNS_LIST_CONFIGURATIONS to get available profile IDs.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_UPDATE_DENYLIST_ENTRYUpdates a specific denylist entry in a NextDNS profile, typically to toggle its active status. Use when you need to temporarily enable or disable blocking for a domain without removing it from the denylist.
Input parameters
Whether the denylist entry should be active (true) or inactive (false). Set to false to temporarily disable blocking without removing the entry.
The domain name of the denylist entry to update. Must exactly match a domain currently in the denylist.
The 6-character alphanumeric ID of the NextDNS profile. Use 'List Configurations' to get available profile IDs.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_UPDATE_LINKED_IPUpdates the linked IP address for a NextDNS profile to the current caller's public IP. This is used for dynamic DNS setups where the profile needs to recognize the user's current IP address for DNS filtering to work properly.
Input parameters
The unique 6-character alphanumeric ID of the NextDNS profile (configuration). Obtain this from the 'List Configurations' action.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_UPDATE_PARENTAL_CONTROLTool to update parental control settings for a NextDNS profile. Use when you need to change safe search, YouTube restricted mode, or bypass blocking settings.
Input parameters
The 6-character alphanumeric NextDNS profile ID to update parental control settings for. Get this from the list_configurations action.
Enable (true) or disable (false) safe search enforcement on search engines like Google, Bing, DuckDuckGo, etc.
Block (true) or allow (false) bypass methods such as VPNs, proxies, and Tor to prevent circumventing parental controls.
Enable (true) or disable (false) YouTube Restricted Mode to filter out potentially mature content.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_UPDATE_PARENTAL_CONTROL_CATEGORYTool to update a specific category entry in parental control settings. Use when you need to enable or disable blocking for a specific content category like pornography, gambling, or social networks.
Input parameters
Whether the category block is active. Set to true to block this category, false to unblock.
NextDNS profile configuration ID. Get this from NEXTDNS_LIST_CONFIGURATIONS.
The category identifier to update (e.g., 'porn', 'gambling', 'dating', 'piracy', 'social-networks').
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_UPDATE_PARENTAL_CONTROL_SERVICETool to update a specific service entry in parental control settings. Use when toggling individual service blocks (e.g., blocking TikTok, Instagram, or other social media/gaming services).
Input parameters
Set to true to block the service, or false to allow it. When active=true, the service will be blocked by the DNS filter.
The 6-character alphanumeric NextDNS profile ID. Use NEXTDNS_LIST_CONFIGURATIONS to get available profile IDs.
The service identifier to update. Common service IDs include: tiktok, instagram, facebook, snapchat, twitter, youtube, netflix, fortnite, roblox, minecraft, discord, telegram, whatsapp, etc.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_UPDATE_PERFORMANCE_SETTINGSTool to update performance settings of a NextDNS profile. Use when adjusting performance optimizations after reviewing current settings.
Input parameters
Enable (true) or disable (false) EDNS Client Subnet (ECS).
NextDNS profile configuration ID to update.
Enable (true) or disable (false) cache boost.
Enable (true) or disable (false) CNAME flattening.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_UPDATE_PRIVACY_SETTINGSTool to update privacy settings for a profile. Use when you need to change blocklists, native trackers, disguisedTrackers, or allowAffiliate in one call.
Input parameters
NextDNS profile configuration ID to update privacy settings for. Get this from the list_configurations action.
List of native trackers to block. When provided, replaces ALL existing native trackers. Use an empty list \[\] to remove all. Common IDs: 'apple', 'samsung', 'windows', 'huawei', 'xiaomi', 'amazon', 'sonos', 'roku'.
List of blocklists to enable. When provided, replaces ALL existing blocklists. Use an empty list \[\] to remove all blocklists. Common IDs: 'nextdns-recommended', 'oisd', 'easylist', 'adguard-dns-filter'.
Allow (true) or block (false) affiliate and tracking links while preserving privacy.
Enable (true) or disable (false) blocking of disguised third-party trackers using CNAME cloaking.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_UPDATE_SECURITY_SETTINGSTool to update security settings for a profile. Use when you need to change multiple security settings like threat intelligence, AI detection, safe browsing, and other protections in one call.
Input parameters
Enable (true) or disable (false) blocking of DGA (Domain Generation Algorithm) domains often used by malware.
Enable (true) or disable (false) blocking of newly registered domains (less than 30 days old) to prevent zero-day attacks.
Enable (true) or disable (false) blocking of domains associated with child sexual abuse material (CSAM).
Enable (true) or disable (false) blocking of dynamic DNS domains often used by malware for command and control.
Enable (true) or disable (false) blocking of parked domains that display ads or redirect traffic.
NextDNS profile ID to update security settings for. Get this from the list_profiles action.
Enable (true) or disable (false) DNS rebinding protection to prevent attacks on your local network.
Enable (true) or disable (false) blocking of cryptojacking domains that mine cryptocurrency using your device.
Enable (true) or disable (false) protection against IDN homograph attacks that use look-alike characters to impersonate domains.
Enable (true) or disable (false) protection against typosquatting domains that exploit common typing mistakes.
Enable (true) or disable (false) AI-powered threat detection to identify and block emerging threats.
Enable (true) or disable (false) Google Safe Browsing for malware and phishing protection.
Enable (true) or disable (false) real-time threat intelligence feeds to block domains associated with known threats.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_UPDATE_SETTINGSTool to update settings for a NextDNS profile including logs, block page, performance, and web3 settings. Use when you need to modify multiple settings categories in one operation. Only provide the specific settings you want to change - all fields are optional except profile ID.
Input parameters
Log configuration settings for query logging and retention.
Enable (true) or disable (false) Web3 domain resolution (e.g., .eth, .crypto domains via ENS/Unstoppable Domains).
Unique identifier of the NextDNS profile to update settings for. Get this from list_profiles or list_configurations.
Block page display settings.
Performance optimization settings.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
NEXTDNS_UPDATE_SETTINGS_BLOCKPAGETool to update block page settings for a NextDNS profile. Use when you need to enable or disable the branded block page that users see when accessing blocked domains.
Input parameters
Enable (true) or disable (false) the block page. When enabled, users see a branded page when accessing blocked domains. When disabled, blocked domains return NXDOMAIN silently.
The NextDNS profile ID to update block page settings for. Use LIST_PROFILES to get available profile IDs.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
No publicly available marketplace agent is found using this tool yet. There are 64 agents privately built on Nagent that already use Nextdns.
Build on Nagent
Connect Nextdns to any Nagent agent in minutes — no API key management, no boilerplate. Just configure and deploy.
The five questions agent builders ask before adopting a new integration.
Open the External Integrations panel inside Nagent (app.nagent.ai/externalIntegration), find Nextdns, and click "Connect Now." You'll authenticate with an API key — Nagent handles credential storage and refresh automatically. Once connected, Nextdns is available to any agent in your workspace.
No. Nagent provides no-code integration for every tool. Once Nextdns is connected, you configure its 68 actions directly in the agent builder UI — no API calls, no boilerplate, no schema management.
Helix — Nagent's agentic agent builder — lets you drop Nextdns steps into any workflow visually. Pick an action (e.g., one of those listed above), fill in the inputs (Helix knows the required vs. optional schema for each parameter), and connect it to upstream/downstream steps. Triggers run as the entry point of an agent, so when a Nextdns event fires, the agent kicks off automatically.
Every Nextdns action and trigger ships with a fully-typed schema — input parameters with name, type, required flag, and description, plus the output payload shape. The schemas are documented in the sections above. Helix uses these schemas to validate your configuration at build time and to type-check the data flowing between steps.
Yes. While Nextdns ships with 68 pre-built security & identity tools actions, you can layer custom logic around them inside Helix — pre/post-processing steps, conditional branches, retries, or stitching Nextdns together with other connected tools. For deeper customization, talk to our team about Nagent's Agentic AI Lab — forward-deployed engineers who build Nextdns-based workflows tailored to your business.