Configure DNS like you configure infrastructure.

Quickstart

# Mint a scoped key from the dashboard or via API
curl -X POST https://api.olladns.com/api/v1/api-keys \
  -H "x-api-key: $ADMIN_KEY" \
  -H "content-type: application/json" \
  -d '{"label":"ci-deploy","scopes":["policies:write"]}'

# Block a domain
curl -X PUT https://api.olladns.com/api/v1/policies/custom-rules \
  -H "x-api-key: $CI_KEY" \
  -H "content-type: application/json" \
  -d '{"block":["evil.example.com"],"allow":[]}'

# Register a device — get its DoH URL back
curl -X POST https://api.olladns.com/api/v1/devices \
  -H "x-api-key: $CI_KEY" \
  -H "content-type: application/json" \
  -d '{"slug":"bob-laptop","display_name":"Bob - Macbook Pro"}'

# → {"id":7, ..., "doh_url":"https://dns.olladns.com/dns-query/<uuid>--bob-laptop"}

Endpoint surface (selected)

Connect from Claude Code

# ~/.claude/mcp.json
{
  "mcpServers": {
    "olladns": {
      "url": "https://mcp.olladns.com",
      "headers": {
        "x-api-key": "qd_..."
      }
    }
  }
}

# Then in Claude:
> List all DGA-flagged domains in the last 24h and
> block any with a score above 0.85.

# Claude calls top_dga, filters, then set_custom_rules.
# Every action lands in /audit-logs with actor=api_key #N.

Available MCP tools (selected)

Subscribe

curl -X POST https://api.olladns.com/api/v1/webhooks \
  -H "x-api-key: $K" \
  -H "content-type: application/json" \
  -d '{
    "url":"https://soc.example.com/hooks/olladns",
    "events":["policy.*","threat.*","device.create"]
  }'

# Event names use dotted-prefix wildcards.
# "*" subscribes to every event.

Verify in your receiver

# Headers on every POST:
#   X-Olladns-Signature: sha256=<hex>
#   X-Olladns-Timestamp: <unix-seconds>
#   X-Olladns-Event:     policy.custom_rules.update

import hmac, hashlib

def verify(body, sig, secret):
    expected = hmac.new(
        secret.encode(),
        body, hashlib.sha256
    ).hexdigest()
    return hmac.compare_digest(
        f"sha256={expected}", sig
    )