Agentic AI-native multi-tier DNS routing, live packet tracing, and failover bypass engine for Pi-hole, CoreDNS, dnsdist, Unbound, Stubby, DNSCrypt-Proxy, and VPN DNS.

Install

openclaw skills install @dedsecorg/agentic-dns

agentic-dns Skill

agentic-dns provides a zero-dependency POSIX Bash and Rust engine for inspecting, diagnosing, routing, and failing over multi-tier DNS infrastructure.

CLI Commands

CommandSyntaxDescription
statusagentic-dns statusShow status of all DNS services, addresses, listening ports, and active chain.
queryagentic-dns query <domain>Resolve domain through entrypoint DNS.
traceagentic-dns trace <domain>Execute simultaneous tcpdump packet capture on loopback and network interfaces.
routesagentic-dns routesShow active rules in dnsdist config.
route addagentic-dns route add <name> <addr:port>Add new upstream server to dnsdist.
route removeagentic-dns route remove <name>Remove upstream server from dnsdist.
bypassagentic-dns bypass <failing> [backup]Bypass a failing resolver and prioritize backup.
enforceagentic-dns enforce <on|off|status|clean> [target_ip]Intercept encrypted DNS (DoT port 853 -> pihole, DROP DoQ UDP/443).
pihole-logagentic-dns pihole-logQuery recent DNS log and top clients from Pi-hole SQLite database.
healthagentic-dns healthRun health check sweep across listeners.
tagagentic-dns tagShow service classification tags.
apiagentic-dns apiStart REST API server on port 8099.
mcpagentic-dns mcpStart stdio MCP JSON-RPC Server for AI agents.

Standard Workflows

1. Diagnose DNS Connectivity Outage

bash
agentic-dns status
agentic-dns health
agentic-dns trace google.com

2. Bypass Failing Upstream

bash
agentic-dns bypass stubby unbound

3. MCP JSON-RPC Configuration for Agents

json
{
  "mcpServers": {
    "agentic-dns": {
      "command": "agentic-dns",
      "args": ["mcp"]
    }
  }
}