
NextDNS
Your AI agent manages DNS filtering profiles, toggles security protections like Safe Browsing and cryptojacking defense, and pulls query analytics from NextDNS on demand. Network administrators get instant control over DNS security without opening a single dashboard tab.




From blocking malicious domains to analyzing query patterns, your AI agent manages 43 NextDNS operations so your network stays protected while you focus on strategy.
NextDNS
See how IT teams use AI agents to manage DNS filtering, investigate threats, and enforce security policies across NextDNS profiles without dashboard fatigue.
A security analyst identifies a phishing domain targeting employees. They message the AI agent with the domain name. The agent adds it to the NextDNS denylist, confirms the block is active, and retrieves recent logs showing if any devices already resolved that domain. The threat is neutralized in seconds, and the analyst has forensic context immediately.
Every Monday, the IT lead asks the agent for a DNS security summary. The agent pulls analytics from NextDNS showing blocked queries by reason (malware, ads, trackers), top blocked domains, and device-level query counts for the past seven days. The team gets a security posture snapshot without building custom reports.
A regional manager opening a new office needs DNS filtering configured. They tell the AI agent the office name and security requirements. The agent creates a NextDNS profile with the specified blocklists, enables AI threat detection, activates Safe Browsing, and returns the profile ID and setup instructions. Zero IT tickets filed.

NextDNS
FAQs
The agent accesses all profiles associated with your NextDNS API key. It can list configurations, retrieve individual profile details, create new profiles, and modify settings on any profile by its ID. Each action targets a specific profile, so multi-site or multi-team setups work seamlessly.
Yes. The agent can toggle any combination of NextDNS security features in sequence, including AI threat detection, Google Safe Browsing, cryptojacking protection, DGA detection, typosquatting protection, and DNS rebinding defense. Each toggle is an independent API call targeting the profile's security settings.
The agent can pull analytics aggregated by domain, device, IP address, IP version, query type, classification reason, and query status. Each analytics query supports date range filters and device-level filtering, giving you granular visibility into DNS traffic patterns.
No. DNS logs are fetched from NextDNS in real time during conversations and displayed to the user. Tars does not persist query logs, analytics data, or profile configurations. Your DNS data stays in your NextDNS account under your chosen logging and retention policies.
Yes. The agent uses NextDNS's Add Blocked TLD endpoint to block entire top-level domains at the DNS level. Specify the TLD with a leading dot (like .zip), and the agent adds it to your profile's security blocklist. You can also remove TLD blocks through the agent.
The NextDNS dashboard requires manual navigation through settings pages. With Tars, your team manages profiles, toggles protections, and reviews analytics through natural language in Slack or any messaging channel. Bulk changes and audit queries that take minutes in the UI happen in seconds via conversation.
Yes. The agent can toggle domain logging and client IP logging independently for any NextDNS profile. This is useful for compliance scenarios where you need to enable or disable specific log data collection across profiles without modifying other settings.
The agent can delete profiles by ID. You can configure Tars to require confirmation before executing destructive operations. If the profile ID is invalid or already deleted, the agent reports the error and suggests verifying the profile ID through a list configurations call.
Don't limit your AI Agent to basic conversations. Watch how to configure and add powerful tools making your agent smarter and more functional.

Privacy & Security
At Tars, we take privacy and security very seriously. We are compliant with GDPR, ISO, SOC 2, and HIPAA.