nextdns.api.* operation is listed below with parameter shapes and return types from the plugin Zod schemas.
Allowlist
add
allowlist.add
Allow a domain
Risk: write
delete
allowlist.delete
Remove a domain from the allowlist
Risk: write
get
allowlist.get
List allowed domains
Risk: read
object[]
Output full type
Output full type
replace
allowlist.replace
Replace the entire allowlist
Risk: destructive
domains full type
domains full type
object[]
Output full type
Output full type
update
allowlist.update
Toggle an allowlist entry active/inactive
Risk: write
Analytics
destinations
analytics.destinations
Get query-destination analytics
Risk: read
data full type
data full type
meta full type
meta full type
devices
analytics.devices
Get per-device analytics
Risk: read
data full type
data full type
meta full type
meta full type
dnssec
analytics.dnssec
Get DNSSEC validation analytics
Risk: read
data full type
data full type
meta full type
meta full type
domains
analytics.domains
Get per-domain analytics
Risk: read
data full type
data full type
meta full type
meta full type
encryption
analytics.encryption
Get encrypted-vs-plain DNS analytics
Risk: read
data full type
data full type
meta full type
meta full type
ips
analytics.ips
Get per-client-IP analytics
Risk: read
data full type
data full type
meta full type
meta full type
ipVersions
analytics.ipVersions
Get IPv4/IPv6 distribution analytics
Risk: read
data full type
data full type
meta full type
meta full type
protocols
analytics.protocols
Get DNS protocol distribution analytics
Risk: read
data full type
data full type
meta full type
meta full type
queryTypes
analytics.queryTypes
Get DNS query-type analytics
Risk: read
data full type
data full type
meta full type
meta full type
reasons
analytics.reasons
Get blocking-reason analytics
Risk: read
data full type
data full type
meta full type
meta full type
status
analytics.status
Get query-status analytics
Risk: read
data full type
data full type
meta full type
meta full type
Auth
login
auth.login
Verify the API key is valid
Risk: read
Denylist
add
denylist.add
Block a domain
Risk: write
list
denylist.list
List blocked domains
Risk: read
object[]
Output full type
Output full type
remove
denylist.remove
Unblock a domain
Risk: write
replace
denylist.replace
Replace the entire denylist
Risk: destructive
domains full type
domains full type
object[]
Output full type
Output full type
update
denylist.update
Toggle a denylist entry active/inactive
Risk: write
Logs
clear
logs.clear
Clear all stored query logs - cannot be undone
Risk: destructive · Irreversible
download
logs.download
Download the CSV log export
Risk: read
string
get
logs.get
Get raw or filtered DNS query logs
Risk: read
data full type
data full type
meta full type
meta full type
Parental Control
addCategory
parentalControl.addCategory
Block or allow a content category
Risk: write
addService
parentalControl.addService
Block or allow a specific service
Risk: write
deleteCategory
parentalControl.deleteCategory
Remove a content category restriction
Risk: write
deleteService
parentalControl.deleteService
Remove a service restriction
Risk: write
get
parentalControl.get
Get parental control settings
Risk: read
services full type
services full type
categories full type
categories full type
recreation full type
recreation full type
getCategories
parentalControl.getCategories
Get blocked/allowed content categories
Risk: read
object[]
Output full type
Output full type
getServices
parentalControl.getServices
Get blocked/allowed services
Risk: read
object[]
Output full type
Output full type
replaceCategories
parentalControl.replaceCategories
Replace the entire set of category restrictions
Risk: destructive
categories full type
categories full type
object[]
Output full type
Output full type
replaceServices
parentalControl.replaceServices
Replace the entire set of service restrictions
Risk: destructive
services full type
services full type
object[]
Output full type
Output full type
update
parentalControl.update
Update safe search, YouTube restricted mode, or bypass blocking
Risk: write
services full type
services full type
categories full type
categories full type
recreation full type
recreation full type
updateCategory
parentalControl.updateCategory
Toggle a content category restriction
Risk: write
updateService
parentalControl.updateService
Toggle a service restriction
Risk: write
Privacy
addBlocklist
privacy.addBlocklist
Enable an additional privacy blocklist
Risk: write
addNative
privacy.addNative
Block a native tracking service from a specific vendor
Risk: write
deleteBlocklist
privacy.deleteBlocklist
Remove a privacy blocklist
Risk: write
deleteNative
privacy.deleteNative
Unblock a native tracking service
Risk: write
get
privacy.get
Get privacy settings
Risk: read
blocklists full type
blocklists full type
natives full type
natives full type
replaceBlocklists
privacy.replaceBlocklists
Replace the entire set of enabled privacy blocklists
Risk: destructive
object[]
Output full type
Output full type
replaceNatives
privacy.replaceNatives
Replace the entire set of blocked native trackers
Risk: destructive
object[]
Output full type
Output full type
update
privacy.update
Update disguised-tracker and affiliate-link settings
Risk: write
blocklists full type
blocklists full type
natives full type
natives full type
blocklists full type
blocklists full type
natives full type
natives full type
Profiles
create
profiles.create
Create a new profile
Risk: write
security full type
security full type
privacy full type
privacy full type
parentalControl full type
parentalControl full type
settings full type
settings full type
denylist full type
denylist full type
allowlist full type
allowlist full type
rewrites full type
rewrites full type
delete
profiles.delete
Delete a profile - cannot be undone
Risk: destructive · Irreversible
get
profiles.get
Get full profile details including nested settings and lists
Risk: read
security full type
security full type
privacy full type
privacy full type
parentalControl full type
parentalControl full type
settings full type
settings full type
setup full type
setup full type
denylist full type
denylist full type
allowlist full type
allowlist full type
rewrites full type
rewrites full type
list
profiles.list
List every profile the API key can see
Risk: read
object[]
Output full type
Output full type
rename
profiles.rename
Rename a profile
Risk: write
update
profiles.update
Partially update a profile
Risk: write
security full type
security full type
privacy full type
privacy full type
parentalControl full type
parentalControl full type
settings full type
settings full type
denylist full type
denylist full type
allowlist full type
allowlist full type
rewrites full type
rewrites full type
Rewrites
add
rewrites.add
Add a DNS rewrite rule
Risk: write
delete
rewrites.delete
Delete a DNS rewrite rule
Risk: write
get
rewrites.get
List DNS rewrite rules
Risk: read
object[]
Output full type
Output full type
Security
addBlockedTld
security.addBlockedTld
Add a top-level domain to the security blocklist
Risk: write
get
security.get
Get security settings
Risk: read
tlds full type
tlds full type
getTlds
security.getTlds
Get blocked top-level domains
Risk: read
object[]
Output full type
Output full type
removeBlockedTld
security.removeBlockedTld
Remove a top-level domain from the security blocklist
Risk: write
replaceTlds
security.replaceTlds
Replace the entire blocked-TLD list
Risk: destructive
object[]
Output full type
Output full type
update
security.update
Update multiple security settings in one call
Risk: write
tlds full type
tlds full type
Settings
get
settings.get
Get all settings for a profile
Risk: read
logs full type
logs full type
blockPage full type
blockPage full type
performance full type
performance full type
getBlockPage
settings.getBlockPage
Get block page settings
Risk: read
getLogs
settings.getLogs
Get logging settings
Risk: read
drop full type
drop full type
getPerformance
settings.getPerformance
Get performance settings (ECS, cache boost, CNAME flattening)
Risk: read
logClientIps
settings.logClientIps
Enable or disable logging of client IPs
Risk: write
drop full type
drop full type
logDomains
settings.logDomains
Enable or disable logging of queried domains
Risk: write
drop full type
drop full type
update
settings.update
Update multiple settings categories in one call
Risk: write
logs full type
logs full type
blockPage full type
blockPage full type
performance full type
performance full type
logs full type
logs full type
blockPage full type
blockPage full type
performance full type
performance full type
updateBlockPage
settings.updateBlockPage
Enable or disable the branded block page
Risk: write
updateLogs
settings.updateLogs
Update log retention, storage location, and privacy options
Risk: write
drop full type
drop full type
updatePerformance
settings.updatePerformance
Update performance optimization settings
Risk: write
Setup
updateLinkedIp
setup.updateLinkedIp
Update the profile’s Linked IP to the caller’s current public IP
Risk: write