Can I block specific domains programmatically with the NextDNS API?

Yes, use the POST /profiles/{profileId}/denylist endpoint to add domains to a profile's blocklist. The request body includes the domain ID (the domain name itself) and an active boolean. Blocked domains return NXDOMAIN responses to DNS queries. You can also retrieve the current denylist with GET /profiles/{profileId}/denylist and remove entries with DELETE /profiles/{profileId}/denylist/{domainId}. Through Jentic, agents search for 'block a malicious domain', load the schema, and execute in one flow.

What are the rate limits for the NextDNS API?

The NextDNS API documentation does not specify explicit rate limits in the OpenAPI spec. Typical usage should stay within reasonable query volumes per profile. For high-frequency analytics queries or real-time log streaming, use cursor-based pagination (limit parameter with maximum 500 for most endpoints, 1000 for logs) and implement backoff strategies. Contact NextDNS support if you need higher throughput for enterprise deployments.

How do I retrieve DNS query logs for a specific device with the NextDNS API?

Use the GET /profiles/{profileId}/logs endpoint with the device query parameter set to the device ID. NextDNS logs include device information (ID, name, model) for identified devices. Filter logs by status (default, blocked, allowed, error), time range (from and to parameters supporting ISO 8601 or relative like -6h), and search patterns. Logs support cursor-based pagination with up to 1000 entries per request. For real-time monitoring, use the GET /profiles/{profileId}/logs/stream endpoint which returns Server-Sent Events.

Can I enable threat intelligence feeds through the NextDNS API?

Yes, update security settings using PATCH /profiles/{profileId}/security. The SecuritySettings schema includes boolean flags for threatIntelligenceFeeds, aiThreatDetection, googleSafeBrowsing, cryptojacking, dnsRebinding, typosquatting, and other threat categories. Set the desired protections to true in the request body. Enabled feeds automatically block known malicious domains without requiring manual denylist updates. Retrieve current settings with GET /profiles/{profileId}/security.

Does the NextDNS API support real-time log streaming?

Yes, the GET /profiles/{profileId}/logs/stream endpoint returns DNS query logs as Server-Sent Events (text/event-stream). This enables real-time monitoring of DNS traffic with filtering by device, status, and search patterns. The stream supports resumption using the id query parameter to continue from a specific event. Combine with Jentic agent workflows to trigger automated responses when specific query patterns or blocked threats are detected.

How do I configure parental control policies with the NextDNS API?

Use PATCH /profiles/{profileId}/parentalControl to update parental control settings. The ParentalControlSettings schema includes services and categories arrays (each with id and active fields), plus booleans for safeSearch, youtubeRestrictedMode, and blockBypass. Enable content categories like adult content or gambling by setting their active flag to true. SafeSearch enforcement modifies DNS responses for search engines to filter results. Retrieve current settings with GET /profiles/{profileId}/parentalControl.