---
title: "Dnsfilter integration for LuumenAI"
url: "https://www.luumen.ai/integrations/dnsfilter/"
entity: SoftwareIntegration
category: "Identity & security"
audience: "SRE, DevOps, platform engineering, IT operations"
---

# Dnsfilter integration for LuumenAI

Read DNS filtering policy and usage, then change block lists with approval

## What LuumenAI can do with Dnsfilter

LuumenAI connects to Dnsfilter with an API token and exposes 170 tools (120 read-only · 33 write · 17 destructive). Reads answer immediately; writes are shown as a plan and require approval by default, configurable per tool by an administrator.

## Key facts

- Authentication: API token
- Tools available: 170 tools (120 read-only · 33 write · 17 destructive)
- Plan: available on all plans
- Category: Identity & security

## About Dnsfilter with LuumenAI

Connect DNSFilter and Luumen can read your categories, policies, IP and MAC address records, and organization usage metrics while you work in the terminal. When a domain needs blocking or a category needs adding to a policy, Luumen shows the exact change first and asks before it writes. Authentication is by API key.

## Example tools

Read-only (120 in total):

- `DNSFILTER_CHECK_USER_AGENT_BULK_UPDATES_HAS_MIXED` — Check if user agent attributes are mixed in a bulk selection.
- `DNSFILTER_CREATE_CYBER_SIGHT_CSV_EXPORT` — Creates a CyberSight CSV export record to track export of CyberSight report information.
- `DNSFILTER_GET_API_KEYS` — Retrieve detailed information about a specific API key by its ID.
- `DNSFILTER_GET_APPLICATION_CATEGORY` — Retrieves detailed information about a specific DNSFilter application category by its ID.
- `DNSFILTER_GET_BILLING_ADDRESS` — Retrieves the billing address for a specific DNSFilter organization.
- `DNSFILTER_GET_BILLING_INFORMATION` — Retrieves billing records for a specific DNSFilter organization.
- `DNSFILTER_GET_CATEGORY` — Get basic information of a specific category.
- `DNSFILTER_GET_IP_ADDRESS` — Retrieves detailed information for a specific IP address record by its ID.

Write and destructive (50 in total, approval required by default):

- `DNSFILTER_ADD_ALLOWED_APPLICATION` — Adds a single application to the allow list of a policy in DNSFilter.
- `DNSFILTER_ADD_ALLOWLIST_DOMAINS_TO_POLICIES` — Bulk add one or more domains to one or more policies' allow lists.
- `DNSFILTER_ADD_BLACKLIST_CATEGORY_TO_POLICY` — Add a single category to a policy's blocklist.
- `DNSFILTER_ADD_BLACKLIST_DOMAIN_TO_POLICY` — Add a single domain to a policy's blocklist.
- `DNSFILTER_ADD_BLOCKED_APPLICATION` — Adds a single application to the block list of a policy in DNSFilter.
- `DNSFILTER_ADD_BLOCKLIST_DOMAINS_TO_POLICIES` — Add one or more domains to the blocklist of multiple policies at once.
- `DNSFILTER_ADD_WHITELIST_DOMAIN` — Add a single domain to a policy's allowlist.
- `DNSFILTER_CANCEL_ORGANIZATION` — Sets an organization as 'Canceled' in DNSFilter by its unique ID.

## Frequently asked questions

### How does LuumenAI connect to Dnsfilter?

Authorize once with API token. Luumen lists the scopes each action needs before you approve the connection, and credentials never appear in the chat.

### Can LuumenAI change things in Dnsfilter on its own?

Read actions answer immediately. Anything that writes is shown as a plan and requires approval by default, including the 17 actions classified as destructive. Administrators configure that per tool.

### Is there an audit trail?

Every call to Dnsfilter — read or write, approved or declined — is recorded with the actor, the input, and the result.

Full page: https://www.luumen.ai/integrations/dnsfilter/