Allowlists wrongly blocked domains, reads logs to explain a block, adjusts a profile's filtering policy, and manages DNS rewrite rules.
68actions available
Every action runs live through MCP. Nothing to build, nothing to maintain.
Ayro creates a new NextDNS profile for DNS and security management. Support agents set up profiles for customers without requiring administrator intervention.
Ayro retrieves all NextDNS profiles available to the account. Support agents quickly see which profiles exist and select the right one for configuration.
Ayro enables or disables domain logging for a NextDNS profile. Support agents adjust logging preferences immediately without leaving the conversation.
Each card is one request a support team gets, and the Nextdns actions Ayro runs to close it.
Ayro checks what the profile already allows, adds the domain to the allowlist, and pulls it off the denylist if that is where it was caught, so the customer is back online in the same conversation.
Ayro reads the query log for the device, reports which rule or blocklist caught the domain, and breaks down what else that profile has been blocking, so the fix addresses the cause.
Ayro adjusts the security settings a profile enforces, adds the privacy blocklist the organisation has standardised on, and changes the parental control rules when a household's needs change.
Ayro adds the DNS rewrite that sends an internal hostname to the right address, lists the rewrites already in place, and removes one that is sending traffic somewhere it should not.
How it works
Connect once, then just ask. There is no workflow builder to learn and nothing to maintain — Ayro reads the Nextdns actions it has and picks the ones a request needs.
Authorize the Nextdns account your team already uses — one consent screen, no API keys, no mapping tables. Ayro can only do what you granted that account, and you can disconnect it at any time.
Describe the job the way you would hand it to a teammate. Ayro maps it to the Nextdns actions that close it and chains as many as the request needs.
The agent runs the actions inside the conversation the customer is already in, so nobody copies data between tabs and your team can take over at any point.
Get started freeNextdns · Ayro
What can you do in Nextdns without me setting anything up?
These, right away:
Great, let's start with the first one.
FAQ
Setup, permissions, and the limits of what Ayro can do inside Nextdns.
The one Ayro is pointed at, which is worth confirming first. List Profiles enumerates the profiles on the account, Get Profile Details and Get Profile Settings return what a specific one enforces, and Create Profile adds a new one. Households and companies usually run several, so the profile is the difference between fixing one device and changing everybody's filtering.
All 68 actions your agent can call on Nextdns, straight from the live MCP connection.
Add a domain to the allowlist of a NextDNS profile.
Add a top-level domain to the security blocklist for a NextDNS profile.
Add a domain to the denylist of a NextDNS profile.
Add a content category to the parental control categories list.
Add a service to the parental control services list of a NextDNS profile.
Add a blocklist to the privacy blocklists for a NextDNS profile.
Add a native tracking service to the blocked list for a NextDNS profile.
Add a DNS rewrite rule to a NextDNS profile.
Clear DNS logs for a NextDNS profile.
This tool allows users to create a new NextDNS profile.
Remove a domain from a NextDNS profile's allowlist.
Delete a NextDNS configuration profile.
Remove a category from parental control blocked categories.
Remove a service from parental control blocked services.
Remove a blocklist from the privacy blocklists for a NextDNS profile.
Remove a native tracking entry from a NextDNS profile's privacy settings.
Delete a DNS rewrite rule from a NextDNS profile.
Retrieves the download URL for exported DNS query logs from a NextDNS profile.
Retrieve the list of allowed domains for a NextDNS profile.
Retrieve destination analytics for a profile showing query destinations by country or GAFAM company.
Retrieve device analytics for a profile showing identified devices with names, models, and query counts.
Retrieve DNSSEC validation analytics for a profile showing validated vs non-validated query counts.
Retrieve analytics data for domains within a specific profile.
Retrieve encryption analytics for a profile showing encrypted vs unencrypted query counts.
Retrieve analytics aggregated by client IP addresses.
Retrieve analytics grouped by IP version within a specific profile.
Retrieve protocol analytics for a specific profile showing DNS protocol distribution (DNS-over-HTTPS, DNS-over-TLS, UDP).
Retrieve DNS query counts broken down by query type.
Retrieve blocking reasons analytics showing blocklists, native tracking protection, and other reasons for blocked queries.
Retrieve analytics status for a specific profile.
Same connection, same setup. Pick the next one your team already uses.
Pulls tonight's fixtures, in-match events, season stat lines, and injury news straight from the live feed the moment a fan asks for them.
Checks rankings, runs on-page audits, sizes keyword demand, and pulls how ChatGPT and Gemini answer questions about a domain.
Pulls the latest public threat collections, returns the IP reputation and URL category taxonomies, and reports the connected account's profile.
Finds the right dataset in NASA's catalogs, pulls imagery by date, reads space weather and event feeds, and graphs a time series on request.
Triggers transactional surveys after a resolved conversation, reads scores and individual responses, and honours opt-outs immediately.
Resolves sport keys, lists fixtures and participants, returns bookmaker prices and market coverage for an event, and reports live scores.

Authorize the account and your agent has all 68 actions from the first conversation.
