Get DNS query statistics for a time period. Returns total queries, cached, blocked, failure counts, plus top clients, top domains, and top blocked domains.

Quick health check of the DNS server. Returns version, uptime, forwarder config, blocking status, and last hour failure rate.

Check if a newer version of Technitium DNS Server is available.

Test DNS resolution for a domain name. Resolves using the Technitium server itself or a specified external server.

List all DNS zones configured on the server. Returns zone name, type (Primary/Secondary/Stub/Forwarder), status, and record count.

Create a new DNS zone. Use 'Primary' for hosting records locally, 'Forwarder' for conditional forwarding.

Delete a DNS zone and all its records. Requires confirm=true to execute.

Get the configuration options for a specific zone including DNSSEC, transfer, and notify settings.

Enable a disabled DNS zone.

Disable a DNS zone. The zone will stop responding to queries but its records are preserved.

Set configuration options for a zone. Pass the zone name plus any option key/value pairs to update (e.g. notify settings, zone transfer ACLs).

Export a DNS zone file in standard BIND format. Returns the zone file as text.

List DNS records in a zone. Optionally filter by a specific domain name within the zone. When no domain is specified, returns all records across all zones matching the zone name (including subzones like app.example.com when zone=example.com). When domain is specified, returns records for that exact domain only.

Add a DNS record to a zone. Creates the zone automatically if it doesn't exist for Primary type.

Update an existing DNS record.

Delete a specific DNS record from a zone. Requires confirm=true to execute.

List blocked DNS zones (domains that are denied). Returns a hierarchical tree — call with no domain to see top-level zones, then pass a domain (e.g. 'com') to drill into subdomains.

Block a domain name. Queries to this domain will be denied by the DNS server.

List allowed DNS zones (domains that bypass block lists). Returns a hierarchical tree — call with no domain to see top-level zones, then pass a domain (e.g. 'com') to drill into subdomains.

Allow a domain name, bypassing any block lists. Useful for whitelisting false positives.

Remove a domain from the allow list. The domain will no longer bypass block lists.

Remove a domain from the block list. The domain will no longer be denied.

Flush the entire allow list. All allowed domains will be removed. Requires confirm=true to execute.

Flush the entire custom block list. All manually blocked domains will be removed. Requires confirm=true to execute.

Flush the entire DNS cache. Forces all subsequent queries to be resolved fresh from upstream. Requires confirm=true to execute.

List zones in the DNS cache. Returns a hierarchical tree — call with no domain to see top-level zones, then pass a domain (e.g. 'com') to drill into cached subdomains.

Delete a specific domain from the DNS cache. Unlike flush, this only removes the specified domain.

Get the current DNS server settings including forwarders, blocking configuration, protocols, logging, cache settings, and proxy configuration.

Update DNS server settings. Pass key/value pairs for any settings to change (e.g. forwarders, blocking, recursion, cache). Use dns_get_settings first to see current values and available keys.

Force an immediate update of all configured block lists. Normally block lists update every 24 hours.

Temporarily disable domain blocking for a specified number of minutes. Blocking re-enables automatically after the timer expires.

Query DNS server logs with optional filters. Returns recent DNS queries and their responses. Requires the Query Logs app to be installed.

List installed DNS apps on the server and their current status.

List all available apps from the Technitium DNS app store with versions and descriptions.

Download and install a DNS app from the Technitium app store. Use dns_list_app_store to see available apps.

Uninstall a DNS app from the server. Requires confirm=true to execute.

Get the configuration for an installed DNS app.

Get DNSSEC properties for a zone including signing status, key details, and algorithm info.

Get the DS (Delegation Signer) records for a DNSSEC-signed zone. These are needed by the parent zone registrar.