koru-shield — Claude Code MCP server for DNS filtering
Manage Koru Shield DNS protection from an AI assistant: edit domain rules, inspect queries, and check whether a domain would be blocked.
claude mcp add --transport http koru-shield https://mcp.korushield.com/mcpWhat koru-shield does
The MCP server connects an assistant to a Koru Shield account. It can inspect profiles and enrolled devices, add or remove domain rules, change filtering categories, and test a domain against the current policy. It also provides DNS query logs, analytics summaries, schedules, plan details, and a referral code.
You need a Koru Shield API key. It grants account control, including the ability to delete rules and schedules, so treat it like a password. The server runs with npx -y korushield-mcp-server; Claude Code can connect over HTTP or stdio. For a stdio setup, pass the key through KORU_SHIELD_API_KEY.
The server sends the key only to the Koru Shield API and does not write it to logs. Because the key allows changes to account settings, consider its access before connecting an assistant.
What it helps with
- block a domain for a chosen profile
- check whether a site would be filtered now
- inspect blocked DNS queries
- set a schedule for a profile
- change DNS filtering categories
Example prompts for the agent
- Block
tiktok.comon the Kids profile. - Check whether
youtube.comwould be blocked on Kids right now. - Show the DNS queries blocked today.
How to install koru-shield
1Platform CLI: remote server
claude mcp add --transport http koru-shield https://mcp.korushield.com/mcp2Platform CLI
claude mcp add --env KORU_SHIELD_API_KEY=<KORU_SHIELD_API_KEY> --transport stdio koru-shield -- npx -y korushield-mcp-serverReplace <…> with your own values
1Platform CLI: remote server
codex mcp add koru-shield --url https://mcp.korushield.com/mcp2Platform CLI
codex mcp add koru-shield --env KORU_SHIELD_API_KEY=<KORU_SHIELD_API_KEY> -- npx -y korushield-mcp-serverReplace <…> with your own values
Config file
{
"mcpServers": {
"koru-shield": {
"url": "https://mcp.korushield.com/mcp"
}
}
}{
"mcpServers": {
"koru-shield": {
"command": "npx",
"args": [
"-y",
"korushield-mcp-server"
],
"env": {
"KORU_SHIELD_API_KEY": "<KORU_SHIELD_API_KEY>"
}
}
}
}Replace <…> with your own values
Config file
{
"servers": {
"koru-shield": {
"type": "http",
"url": "https://mcp.korushield.com/mcp"
}
}
}{
"servers": {
"koru-shield": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"korushield-mcp-server"
],
"env": {
"KORU_SHIELD_API_KEY": "<KORU_SHIELD_API_KEY>"
}
}
}
}Replace <…> with your own values
1Platform CLI: remote server
gemini mcp add -t http koru-shield https://mcp.korushield.com/mcp2Platform CLI
gemini mcp add -e KORU_SHIELD_API_KEY=<KORU_SHIELD_API_KEY> koru-shield npx -y korushield-mcp-serverReplace <…> with your own values
Step by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about koru-shield
How do I install koru-shield in Claude Code?
For a stdio connection, run claude mcp add --env KORU_SHIELD_API_KEY=<KORU_SHIELD_API_KEY> --transport stdio koru-shield -- npx -y korushield-mcp-server. Replace the placeholder with your Koru Shield API key.
What does koru-shield do?
It gives an AI assistant access to Koru Shield DNS protection, including domain rules, filtering categories, and schedules. The assistant can also check policies and inspect DNS queries.
Why does koru-shield need an API key?
The key grants access to the Koru Shield account, including permission to remove rules and schedules. Pass it to the server with KORU_SHIELD_API_KEY.
