Perform a DNS-over-HTTPS lookup using a NextDNS profile.

This tool performs a DNS query through NextDNS's DoH endpoint, allowing you to test how a specific profile would resolve a domain name. This is useful for:

• Testing if a domain is blocked by your profile settings

• Verifying DNS resolution behavior

• Debugging DNS-related issues

• Testing allowlist/denylist configurations

Retrieves a list of all NextDNS profiles accessible with the provided API key.

Creates a new NextDNS profile with the specified configuration.

Retrieves detailed information about a specific profile.

DANGER: Permanently deletes a NextDNS profile and all its configuration.

This action is irreversible. The profile and all its settings, lists, and analytics data will be permanently removed.

Safety Warning: Only delete profiles that you own and are certain you want to remove.

Updates profile properties such as name and configuration.

Retrieves the configuration settings for a profile.

Updates configuration settings for a profile. Only provided fields will be updated.

Safety Note: Only use with designated test profiles.

Retrieves log retention and configuration settings.

Updates log retention period and configuration.

Retrieves block page configuration.

Enables or disables the block page for blocked domains.

Retrieves performance optimization settings.

Updates performance optimization configuration.

Retrieves analytics data about DNS query response status codes.

Retrieves time-series analytics data about DNS query response status codes for charting.

Retrieves statistics about the most queried domains.

Retrieves statistics about DNS query types (A, AAAA, CNAME, etc).

Retrieves time-series statistics about DNS query types for charting.

Retrieves statistics about why queries were blocked.

Retrieves time-series statistics about why queries were blocked for charting.

Retrieves statistics about client IP addresses.

Retrieves time-series statistics about client IP addresses for charting.

Retrieves statistics about DNSSEC validation.

Retrieves time-series statistics about DNSSEC validation for charting.

Retrieves statistics about encrypted vs unencrypted queries.

Retrieves time-series statistics about encrypted vs unencrypted queries for charting.

Retrieves statistics about IPv4 vs IPv6 usage.

Retrieves time-series statistics about IPv4 vs IPv6 usage for charting.

Retrieves statistics about DNS protocol usage (DoH, DoT, DoQ, UDP, TCP).

Retrieves time-series statistics about DNS protocol usage for charting.

Retrieves the most queried destination domains.

Retrieves time-series statistics for the most queried destination domains for charting.

Retrieves query statistics by device.

Retrieves time-series query statistics by device for charting.

Retrieves all domains in the profile's denylist.

Replaces the entire denylist with the provided list of domains.

Warning: This operation removes all existing entries and replaces them. Safety Note: Only use with designated test profiles.

Adds a domain to the profile's denylist (blocks the domain).

Safety Note: Only use with designated test profiles.

Removes a domain from the profile's denylist.

Safety Note: Only use with designated test profiles.

Updates properties of a denylist entry (e.g., enable/disable).

Safety Note: Only use with designated test profiles.

Retrieves all domains in the profile's allowlist.

Replaces the entire allowlist with the provided list of domains.

Warning: This operation removes all existing entries and replaces them. Safety Note: Only use with designated test profiles.

Adds a domain to the profile's allowlist (bypasses all blocking for the domain).

Safety Note: Only use with designated test profiles.

Removes a domain from the profile's allowlist.

Safety Note: Only use with designated test profiles.

Updates properties of an allowlist entry (e.g., enable/disable).

Safety Note: Only use with designated test profiles.

Retrieves blocked services (e.g., TikTok, Facebook, etc.).

Replaces the entire list of blocked services.

Adds a service to the parental control blocklist.

Safety Note: Only use with designated test profiles.

Removes a service from the parental control blocklist.

Safety Note: Only use with designated test profiles.

Updates properties of a parental control service entry (e.g., enable/disable).

Safety Note: Only use with designated test profiles.

Retrieves blocked content categories (e.g., gambling, adult content, etc.).

Replaces the entire list of blocked categories.

Adds a category to the parental control blocklist.

Safety Note: Only use with designated test profiles.

Removes a category from the parental control blocklist.

Safety Note: Only use with designated test profiles.

Updates properties of a parental control category entry (e.g., enable/disable).

Safety Note: Only use with designated test profiles.

Retrieves security configuration including threat blocking and DNSSEC.

Updates security configuration options.

Retrieves privacy protection configuration.

Updates privacy protection options.

Retrieves parental control configuration.

Updates parental control configuration options.

Retrieves the list of top-level domains blocked for security reasons.

Replaces the entire security TLD blocklist with the provided list.

Warning: This operation removes all existing entries and replaces them. Safety Note: Only use with designated test profiles.

Adds a top-level domain to the security blocklist.

Safety Note: Only use with designated test profiles.

Removes a top-level domain from the security blocklist.

Safety Note: Only use with designated test profiles.

Retrieves the list of privacy protection blocklists enabled for the profile.

Replaces the entire privacy blocklists collection with the provided list.

Warning: This operation removes all existing entries and replaces them. Safety Note: Only use with designated test profiles.

Adds a privacy protection blocklist to the profile.

Safety Note: Only use with designated test profiles.

Removes a privacy protection blocklist from the profile.

Safety Note: Only use with designated test profiles.

Retrieves the list of native tracking protection blockers enabled for the profile.

Replaces the entire native tracking protection collection with the provided list.

Warning: This operation removes all existing entries and replaces them. Safety Note: Only use with designated test profiles.

Adds a native tracking protection blocker to the profile (e.g., Alexa, Roku, Samsung, etc.).

Safety Note: Only use with designated test profiles.

Removes a native tracking protection blocker from the profile.

Safety Note: Only use with designated test profiles.

Retrieves DNS query logs for a profile with filtering and pagination support.

Supports filtering by date range, device, status, and text search.

WARNING: Permanently deletes all query logs for this profile.

This action cannot be undone. Use with caution.

Safety Note: Only use with designated test profiles.