All integrations

NextDNS

SECURITY · DEVELOPER

Profiles, blocklists, filtering settings and query logs on their own account.

Acts as the person, not as itself

Each user connects their own account. Every call carries both identities — the agent and the person it is acting for — so the agent can never reach past what that individual can already do.

Credentials never touch the agent

Tokens live in the vault and attach server-side at call time. The agent holds a session, not a secret, and revoking access does not mean rotating a key.

Every call on the record

Who asked, which agent acted, which action ran, and the verdict that let it through — one audit trail across every integration, not one per vendor.

What an agent can do

Each action is granted on its own. An agent allowed to read is not thereby allowed to write, and the scope beside each row is what the acting user must have connected for it to run at all.

nextdns_delete_profiles_by_profileWRITE

Delete profile via DELETE /profiles/{profile}

api
nextdns_delete_profiles_by_profile_denylist_by_idWRITE

Delete denylist entry via DELETE /profiles/{profile}/denylist/{id}

api
nextdns_delete_profiles_by_profile_logsWRITE

Clear logs via DELETE /profiles/{profile}/logs

api
nextdns_delete_profiles_by_profile_privacy_blocklists_by_idWRITE

Delete privacy blocklist via DELETE /profiles/{profile}/privacy/blocklists/{id}

api
nextdns_get_profiles_by_profileREAD

Get profile via GET /profiles/{profile}

api
nextdns_get_profiles_by_profile_analytics_destinationsREAD

Get analytics destinations via GET /profiles/{profile}/analytics/destinations

api
nextdns_get_profiles_by_profile_analytics_destinations_seriesREAD

Get analytics destinations series via GET /profiles/{profile}/analytics/destinations;series

api
nextdns_get_profiles_by_profile_analytics_devicesREAD

Get analytics devices via GET /profiles/{profile}/analytics/devices

api
nextdns_get_profiles_by_profile_analytics_devices_seriesREAD

Get analytics devices series via GET /profiles/{profile}/analytics/devices;series

api
nextdns_get_profiles_by_profile_analytics_dnssecREAD

Get analytics dnssec via GET /profiles/{profile}/analytics/dnssec

api
nextdns_get_profiles_by_profile_analytics_dnssec_seriesREAD

Get analytics dnssec series via GET /profiles/{profile}/analytics/dnssec;series

api
nextdns_get_profiles_by_profile_analytics_domainsREAD

Get analytics domains via GET /profiles/{profile}/analytics/domains

api
nextdns_get_profiles_by_profile_analytics_domains_seriesREAD

Get analytics domains series via GET /profiles/{profile}/analytics/domains;series

api
nextdns_get_profiles_by_profile_analytics_encryptionREAD

Get analytics encryption via GET /profiles/{profile}/analytics/encryption

api
nextdns_get_profiles_by_profile_analytics_encryption_seriesREAD

Get analytics encryption series via GET /profiles/{profile}/analytics/encryption;series

api
nextdns_get_profiles_by_profile_analytics_ipsREAD

Get analytics ips via GET /profiles/{profile}/analytics/ips

api
nextdns_get_profiles_by_profile_analytics_ips_seriesREAD

Get analytics ips series via GET /profiles/{profile}/analytics/ips;series

api
nextdns_get_profiles_by_profile_analytics_ipversionsREAD

Get analytics ip versions via GET /profiles/{profile}/analytics/ipVersions

api
nextdns_get_profiles_by_profile_analytics_ipversions_seriesREAD

Get analytics ip versions series via GET /profiles/{profile}/analytics/ipVersions;series

api
nextdns_get_profiles_by_profile_analytics_protocolsREAD

Get analytics protocols via GET /profiles/{profile}/analytics/protocols

api
nextdns_get_profiles_by_profile_analytics_protocols_seriesREAD

Get analytics protocols series via GET /profiles/{profile}/analytics/protocols;series

api
nextdns_get_profiles_by_profile_analytics_querytypesREAD

Get analytics query types via GET /profiles/{profile}/analytics/queryTypes

api
nextdns_get_profiles_by_profile_analytics_querytypes_seriesREAD

Get analytics query types series via GET /profiles/{profile}/analytics/queryTypes;series

api
nextdns_get_profiles_by_profile_analytics_reasonsREAD

Get analytics reasons via GET /profiles/{profile}/analytics/reasons

api
nextdns_get_profiles_by_profile_analytics_reasons_seriesREAD

Get analytics reasons series via GET /profiles/{profile}/analytics/reasons;series

api
nextdns_get_profiles_by_profile_analytics_statusREAD

Get analytics status via GET /profiles/{profile}/analytics/status

api
nextdns_get_profiles_by_profile_analytics_status_seriesREAD

Get analytics status series via GET /profiles/{profile}/analytics/status;series

api
nextdns_get_profiles_by_profile_denylistREAD

List denylist via GET /profiles/{profile}/denylist

api
nextdns_get_profiles_by_profile_logsREAD

List logs via GET /profiles/{profile}/logs

api
nextdns_get_profiles_by_profile_logs_downloadREAD

Download logs via GET /profiles/{profile}/logs/download

api
nextdns_get_profiles_by_profile_privacyREAD

Get privacy settings via GET /profiles/{profile}/privacy

api
nextdns_get_profiles_by_profile_privacy_blocklistsREAD

List privacy blocklists via GET /profiles/{profile}/privacy/blocklists

api
nextdns_get_profiles_by_profile_settings_performanceREAD

Get performance settings via GET /profiles/{profile}/settings/performance

api
nextdns_patch_profiles_by_profileWRITE

Update profile via PATCH /profiles/{profile}

api
nextdns_patch_profiles_by_profile_denylist_by_idWRITE

Update denylist entry via PATCH /profiles/{profile}/denylist/{id}

api
nextdns_patch_profiles_by_profile_privacyWRITE

Update privacy settings via PATCH /profiles/{profile}/privacy

api
nextdns_patch_profiles_by_profile_privacy_blocklists_by_idWRITE

Update privacy blocklist via PATCH /profiles/{profile}/privacy/blocklists/{id}

api
nextdns_patch_profiles_by_profile_settings_performanceWRITE

Update performance settings via PATCH /profiles/{profile}/settings/performance

api
nextdns_post_profilesWRITE

Create profile via POST /profiles

api
nextdns_post_profiles_by_profile_denylistWRITE

Add denylist entry via POST /profiles/{profile}/denylist

api
nextdns_post_profiles_by_profile_privacy_blocklistsWRITE

Add privacy blocklist via POST /profiles/{profile}/privacy/blocklists

api
nextdns_put_profiles_by_profile_denylistWRITE

Replace denylist via PUT /profiles/{profile}/denylist

api
nextdns_put_profiles_by_profile_privacy_blocklistsWRITE

Replace privacy blocklists via PUT /profiles/{profile}/privacy/blocklists

api

Put NextDNS behind one governed endpoint.

Same permissions, same audit trail, whatever else you connect next.