// MCP TOOL REFERENCE

TECHNITIUM MCP SECURE TOOLS

39 tools from the Technitium MCP Secure MCP Server, categorised by risk level.

// ALL 39 TECHNITIUM MCP SECURE TOOLS

READ 18 tools

Read dns_check_update Check if a newer version of Technitium DNS Server is available. Read dns_dnssec_info Get DNSSEC properties for a zone including signing status, key details, and algorithm info. Read dns_get_app_config Get the configuration for an installed DNS app. Read dns_get_ds Get the DS (Delegation Signer) records for a DNSSEC-signed zone. These are needed by the parent zone regist... Read dns_get_settings Get the current DNS server settings including forwarders, blocking configuration, protocols, logging, cache... Read dns_get_stats Get DNS query statistics for a time period. Returns total queries, cached, blocked, failure counts, plus to... Read dns_health_check Quick health check of the DNS server. Returns version, uptime, forwarder config, blocking status, and last ... Read dns_list_allowed List allowed DNS zones (domains that bypass block lists). Returns a hierarchical tree — call with no domain... Read dns_list_app_store List all available apps from the Technitium DNS app store with versions and descriptions. Read dns_list_apps List installed DNS apps on the server and their current status. Read dns_list_blocked List blocked DNS zones (domains that are denied). Returns a hierarchical tree — call with no domain to see ... Read dns_list_cache List zones in the DNS cache. Returns a hierarchical tree — call with no domain to see top-level zones, then... Read dns_list_records List DNS records in a zone. Optionally filter by a specific domain name within the zone. Read dns_list_zones List all DNS zones configured on the server. Returns zone name, type (Primary/Secondary/Stub/Forwarder), st... Read dns_query_logs Query DNS server logs with optional filters. Returns recent DNS queries and their responses. Requires the Q... Read dns_zone_options Get the configuration options for a specific zone including DNSSEC, transfer, and notify settings. Read dns_export_zone Export a DNS zone file in standard BIND format. Returns the zone file as text. Read dns_resolve Test DNS resolution for a domain name. Resolves using the Technitium server itself or a specified external ...

WRITE 11 tools

Write dns_remove_blocked Remove a domain from the block list. The domain will no longer be denied. Write dns_allow_domain Allow a domain name, bypassing any block lists. Useful for whitelisting false positives. Write dns_block_domain Block a domain name. Queries to this domain will be denied by the DNS server. Write dns_add_record Add a DNS record to a zone. Creates the zone automatically if it doesn Write dns_create_zone Create a new DNS zone. Use Write dns_disable_zone Disable a DNS zone. The zone will stop responding to queries but its records are preserved. Write dns_enable_zone Enable a disabled DNS zone. Write dns_set_settings Update DNS server settings. Pass key/value pairs for any settings to change (e.g. forwarders, blocking, rec... Write dns_set_zone_options Set configuration options for a zone. Pass the zone name plus any option key/value pairs to update (e.g. no... Write dns_temp_disable_blocking Temporarily disable domain blocking for a specified number of minutes. Blocking re-enables automatically af... Write dns_update_record Update an existing DNS record.

DESTRUCTIVE 7 tools

Destructive dns_delete_cached Delete a specific domain from the DNS cache. Unlike flush, this only removes the specified domain. Destructive dns_delete_record Delete a specific DNS record from a zone. Requires confirm=true to execute. Destructive dns_delete_zone Delete a DNS zone and all its records. Requires confirm=true to execute. Destructive dns_remove_allowed Remove a domain from the allow list. The domain will no longer bypass block lists. Destructive dns_uninstall_app Uninstall a DNS app from the server. Requires confirm=true to execute. Destructive dns_flush_allowed Flush the entire allow list. All allowed domains will be removed. Requires confirm=true to execute. Destructive dns_flush_blocked Flush the entire custom block list. All manually blocked domains will be removed. Requires confirm=true to ...

EXECUTE 3 tools

Execute dns_flush_cache Flush the entire DNS cache. Forces all subsequent queries to be resolved fresh from upstream. Requires conf... Execute dns_install_app Download and install a DNS app from the Technitium app store. Use dns_list_app_store to see available apps. Execute dns_update_blocklists Force an immediate update of all configured block lists. Normally block lists update every 24 hours.

// FAQ

How many tools does the Technitium MCP Secure MCP server have? +

The Technitium MCP Secure MCP server exposes 39 tools across 4 categories: Read, Write, Destructive, Execute.

How do I enforce policies on Technitium MCP Secure tools? +

Route the Technitium MCP Secure server through the PolicyLayer gateway. Define allow, deny, or approval rules per tool in the dashboard; they are enforced on every call before it reaches the server.

What risk categories do Technitium MCP Secure tools fall into? +

Technitium MCP Secure tools are categorised as Read (18), Write (11), Destructive (7), Execute (3). Each category has a recommended default policy.

Enforce policy on every Technitium MCP Secure tool call.

Start from Technitium MCP Secure, add the rest of your stack, and see everything your agents can call. Then put policy on all of it.

CHECK YOUR STACK →

Free to start. No card required.

43,000+ MCP servers and 220,000+ tools scanned and risk-classified.