Dnsfilter
DNSFilter provides cloud-based DNS security and content filtering solutions to protect networks from online threats and manage internet usage.
Verdict
Common use cases
- Block new threat domains during incident response
- Audit IP allowlists before policy rollout
- Pull billing summaries for monthly reports
- Update MAC address inventories after device refresh
- Query category rules to troubleshoot user complaints
Integration
- Vendor
- Dnsfilter
- Category
- other
- Auth
- API_KEY
- Tools
- 19
- Composio slug
dnsfilter
Tools
- Create IP Address
Tool to create a new ip address in dnsfilter. use after confirming the target network id exists.
- Get Application Category
Tool to get basic information of a specific application category. use when you need details for a given application category id.
- Get Billing Information
Tool to retrieve basic billing information for an organization. use when you need to obtain billing details for reporting or automation tasks.
- Get Category
Tool to get basic information of a specific category. use when you need to retrieve details for a category by its id.
- Get IP Address
Tool to get basic information of the specified ip address. use when you need to fetch metadata for a particular ip after authentication.
- List All Categories
Tool to list all categories including internal categories. use when you need the complete set of filtering categories.
- List All IP Addresses
Tool to list all user-associated ip addresses. use when you need a comprehensive list of all ip address entries in your organization.
- List All MAC Addresses
Tool to list all mac addresses with basic information. use when you need to retrieve all mac address entries in your organization.
- List Application Categories
Tool to list application categories with basic information. use after authentication to retrieve all categories.
- List Applications
Tool to list applications with basic information. use when you need to retrieve all applications for your dnsfilter organization.
- List Block Pages
Tool to list block pages associated with the current user. use when you need to retrieve all block pages for review or update.
- List Categories
Tool to list categories with basic information. use when retrieving all dnsfilter categories for policy configuration.
- List Invoices
Tool to list invoices for an organization, most recent first. use after obtaining the organization id when needing paginated invoice data.
- List IP Addresses
Tool to list user-associated ip addresses basic information. use when you need to retrieve paginated ip address records filtered by location or device after authentication.
- List MAC Addresses
Tool to list mac addresses associated with an organization. use when you need to retrieve basic mac address information, optionally filtered by organization or paginated.
- List Networks
Tool to list all networks. use when you need to retrieve all network configurations for your organization.
- List Organizations
Tool to list all organizations. use when you need to retrieve all organizations tied to the authenticated dnsfilter account.
- Suggest Domain Threat
Tool to suggest a fqdn as a potential threat. use after identifying a suspicious domain to verify its threat categorization.
- Validate Auth0 JWT
Tool to validate a jwt with auth0. use when you need to confirm token validity before making dnsfilter api calls.
Setup
Setup guide
- 11. In Switchy, open your workspace settings and navigate to the MCP Integrations tab. 2. Click 'Add Integration' and select DNSFilter from the catalog. 3. Log into your DNSFilter dashboard, go to Account Settings > API Keys, and generate a new key with read and write permissions. 4. Paste the API key into Switchy's connection form and click 'Connect'. 5. Switchy will verify the key and display a green checkmark when the connection succeeds. 6. Open any Space, type '@dnsfilter list all categories' in the chat, and hit send — you should see a list of filtering categories returned inline. 7. If the response is empty or errors, double-check the API key's permissions in DNSFilter and reconnect.
What teammates see: by default, memories from Dnsfilter are scoped to the Space (PROJECT visibility) - you can mark any memory PRIVATE or share it ORG-wide.
Works well with
Top models
Compatibility data appears once enough Spaces have used this MCP together with a given model.
How Switchy teams use it
Starter prompts
List All Filtering Categories
@dnsfilter list all categories. Show me the complete set so I can review our current filtering rules.Open in a Space →
Create New IP Address
@dnsfilter create a new IP address for network ID 12345 with the address 203.0.113.42. Label it 'Remote Office - Austin'.Open in a Space →
Get Billing Information
@dnsfilter get billing information for our organization. I need the current plan and usage for this month's report.Open in a Space →
List All MAC Addresses
@dnsfilter list all MAC addresses. I'm reconciling our hardware inventory and need the full list.Open in a Space →
Get Application Category Details
@dnsfilter get application category details for category ID 789. I want to confirm which apps fall under this block.Open in a Space →
Example outputs
Illustrative - representative of the model's voice and quality, not literal recordings.
@dnsfilter list all IP addresses currently registered in our organization and show their associated network IDs
Here's an illustrative summary of IP addresses in your DNSFilter organization: 203.0.113.45 (Network: Office-Main, ID: net_8x7k2), 198.51.100.12 (Network: Remote-VPN, ID: net_9m4p1), 192.0.2.88 (Network: Guest-WiFi, ID: net_3n6q5). Each entry includes the IP, network name, and internal network identifier. This list reflects active registrations; decommissioned IPs won't appear here unless explicitly archived in your account settings.
This example shows the MCP's ability to inventory network infrastructure. Requires API key with read access to IP management. Useful for auditing which addresses are under DNS filtering policy, but won't show historical or deleted entries—only current active registrations in your DNSFilter dashboard.
@dnsfilter create a new IP address 10.50.75.100 in network ID net_8x7k2 with label 'Engineering-Lab-Gateway'
IP address created successfully. 10.50.75.100 is now registered in network 'Office-Main' (net_8x7k2) with label 'Engineering-Lab-Gateway'. This IP will inherit the filtering policies assigned to the Office-Main network. Changes typically propagate within 60 seconds. You can verify the new entry by listing all IP addresses or checking your DNSFilter dashboard under the specified network.
This example demonstrates write capability—adding infrastructure to DNS filtering. Requires API key with create permissions and a valid pre-existing network ID. Side-effect: the IP immediately becomes subject to the network's content filtering rules. Always confirm the target network ID exists before attempting creation to avoid errors.
@dnsfilter retrieve our organization's billing information and summarize current subscription tier, renewal date, and any usage overages
Here's an illustrative billing summary for your DNSFilter organization: Subscription tier is 'Business Plan' with 500 protected devices. Next renewal date: March 15, 2025. Current usage: 487 devices (97% of quota). No overages detected this billing cycle. Monthly cost: $1,250. This data reflects the most recent billing snapshot; for invoice history or payment method updates, access the DNSFilter portal directly.
This example pairs the MCP's billing data retrieval with AI reasoning to produce a human-readable financial summary. Requires API key with billing read access. Useful for budget tracking or alerting on quota thresholds, but won't include granular per-device cost breakdowns—only organization-level totals and subscription metadata.
Use-case deep-dives
When DNSFilter MCP makes sense for distributed security teams
A 6-person IT team managing DNS filtering for 80 remote employees needs to bulk-update IP allowlists every Monday after VPN changes. The DNSFilter MCP wins here because the Create IP Address and List All IP Addresses tools let you script the entire sync from a Slack thread or standup doc—no logging into the web console. You'll need an API key with network write scope, and the 19-tool surface means you can also pull billing info or category lookups in the same conversation. The trade-off: if your team only touches DNS policies once a quarter, the setup overhead isn't worth it. But if you're adjusting filters weekly or responding to phishing campaigns in real time, this MCP turns a 15-minute admin task into a 90-second AI prompt.
How service providers use this MCP for monthly client reviews
A managed service provider running DNS filtering for 12 small-business clients needs to generate monthly reports showing blocked categories and IP coverage per client. The DNSFilter MCP handles this if your workflow is already in Switchy: you can pull List All Categories, Get Billing Information, and List All IP Addresses for each client org, then dump the results into a shared doc or export. The Get Application Category tool is useful when a client asks why a specific app was blocked. The boundary: if you need custom dashboards or historical trend analysis, you'll still need the DNSFilter web UI or a BI tool. This MCP is for ad-hoc lookups and scripted data pulls, not replacing your reporting stack. If that matches your cadence, it saves 20 minutes per client per month.
When this MCP speeds up security incident triage
A 3-person security team investigates a suspected malware infection and needs to check which MAC addresses hit a flagged domain in the last hour. The DNSFilter MCP's List All MAC Addresses and Get IP Address tools let you query from the incident Slack channel without context-switching to the DNSFilter portal. You can cross-reference the MAC list against your endpoint inventory in the same AI thread, then immediately create a new IP block if needed. The catch: DNSFilter's API doesn't expose real-time query logs, so you're working with metadata, not live traffic. If your incident response depends on sub-minute DNS query visibility, you need their log export or SIEM integration instead. For everything else—policy checks, bulk lookups, quick blocks—this MCP cuts triage time in half.
Frequently asked
What does the DNSFilter MCP let me do in Switchy?
It connects your team's DNSFilter account so AI agents can manage network security policies, IP addresses, and MAC addresses without switching apps. Agents can create IP entries, look up filtering categories, check billing info, and list all devices on your network. Useful for automating security workflows or building reports that pull from your DNS filtering setup.
Do I need admin access to connect DNSFilter?
Yes. You'll need an API key from your DNSFilter organization settings, which typically requires admin or owner permissions. The key authenticates all tool calls, so anyone on your Switchy team who connects it must have that level of access in DNSFilter. If you're not an admin, ask whoever manages your DNS filtering to generate the key.
Can the MCP block domains or change filtering rules?
No. The 19 tools focus on reading configuration (categories, IP addresses, MAC addresses, billing) and creating new IP entries. You can't modify existing filtering policies, block lists, or category assignments through this MCP. For those changes, you still need to log into the DNSFilter dashboard directly or use their full REST API.
Why use this instead of the DNSFilter dashboard?
Use the MCP when you want AI agents to pull network data into a larger workflow—like generating a compliance report that includes DNS filtering stats, or auto-creating IP entries when a new office opens. The dashboard is faster for one-off policy tweaks. The MCP is faster when you're chaining DNS data with other tools in Switchy.
Who on the team should connect DNSFilter?
Whoever owns network security or IT operations. They already have the API key and understand which IP ranges and categories matter. Once connected, any Switchy user can ask agents to query DNSFilter data, but only the connector's API key is used—so treat it like you would any shared admin credential.