> ## Documentation Index
> Fetch the complete documentation index at: https://docs.neoagent.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Connecting ScoutDNS to Neo

> Create a ScoutDNS API key and save it in Neo

You connect ScoutDNS once at the MSP level. One API key covers every organization in your ScoutDNS account.

## 1. Create the API key

**1. Open API Access Management**

Sign in to [cloud.scoutdns.com](https://cloud.scoutdns.com) as an account admin, and open **API Access Management**.

**2. Create the key**

Create an API key for Neo. A read and write key lets Neo change allow and block lists; a read-only key lets Neo research and answer questions, and ScoutDNS refuses every change Neo would make with it.

**3. Copy the key**

Copy the key.

> [!WARNING]
>
> Deleting the key in ScoutDNS cuts Neo off at once. Save the new key here when you replace it.

## 2. Add the key in Neo

**1. Open Integrations**

In the Neo Dashboard, open **Integrations** and find the ScoutDNS card, under DNS & Web Filtering.

**2. Save the key**

Paste the API key and click **Save settings**. Neo checks it against ScoutDNS before saving, so a wrong key is rejected straight away.

**3. Check the mapping**

Open the card's **Organization Mapping** tab and confirm each ScoutDNS organization is matched to the right PSA company. A ticket run acts only for a mapped organization.

## 3. Route review requests to tickets

When the block page lets users request a review, ScoutDNS emails each request. To have an agent research them, send those emails to your PSA's support mailbox, so each one opens a "ScoutDNS Domain Review Request" ticket on the customer's company.

## 4. Turn ScoutDNS on per agent

Open the agent, go to its **Tools & Settings** tab, click **DNS & Web Filtering**, and expand the **ScoutDNS** block. Pick one of its **Presets**, or set each area yourself:

| Area | Access levels you can pick | Notes |
| - | - | - |
| **Reports and Query Logs** | Disabled, Read Only | Query logs, threats, top domains and categories, statistics. Turn on for an agent that researches review requests. |
| **Allow and Block Lists** | Disabled, Read Only, Read / Write | The lists and the policies that use each; adding a domain to one. |
| **Policies, TLD Filters and Block Pages** | Disabled, Read Only, Read / Write | Policy settings, TLD filters and block pages. |
| **Locations, Networks and Relays** | Disabled, Read Only, Read / Write | Sites, their WAN addresses and relays. |
| **Roaming Clients and Profiles** | Disabled, Read Only, Read / Write | Roaming clients, their status and policy, and client profiles. |
| **Roaming Client Installers** | Disabled, Read Only, Read / Write | Installers and install bundles. Neo keeps the install key out of the run log. |
| **Customer Organizations** | Disabled, Read Only, Read / Write | Your organizations and the locations and profiles in each. |
| **Console Users** | Disabled, Read Only, Read / Write | ScoutDNS console users and their roles. |
| **Log Streams** | Disabled, Read Only, Read / Write | Streams that send query logs to a SIEM. |
| **Usage and Billing** | Disabled, Read Only | Query and seat usage per organization. |

| Preset | What runs on its own | What asks a technician |
| - | - | - |
| **Read Only** | Every read except installers | No write is allowed |
| **Helpdesk** | Every read except installers, console users and log streams | Every allow and block list change; no other write is allowed |
| **IT Admin** | Every read, and location, network, roaming client, installer and organization changes | List, policy, console user and log stream changes, and the changes that always ask |
| **Full Automation** | Every read and write | The changes that always ask |

See [ScoutDNS API](https://docs.neoagent.io/agents/tools/security/scoutdns-api.md) for what the agent can read and change.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.