DNSFilter Traffic Reports API

The Traffic Reports API from DNSFilter — 53 operation(s) for traffic reports.

Operations 53

GET /v1/traffic_reports/total_requests Total requests/time #
GET /v1/traffic_reports/total_requests_geo Total requests geo #
GET /v1/traffic_reports/total_requests_organizations Total requests/organizations #
GET /v1/traffic_reports/total_requests_agents Total requests clients #
GET /v1/traffic_reports/total_requests_users Total requests users #
GET /v1/traffic_reports/total_requests_collections Total requests collections #
GET /v1/traffic_reports/total_threats Total threats/time #
GET /v1/traffic_reports/total_threats_organizations Total threats organizations #
GET /v1/traffic_reports/total_threats_agents Total threats clients #
GET /v1/traffic_reports/total_threats_users Total threats users #
GET /v1/traffic_reports/total_threats_collections Total threats collections #
GET /v1/traffic_reports/total_categories Total category requests #
GET /v1/traffic_reports/total_categories_organizations Category reqs organizations #
GET /v1/traffic_reports/total_categories_agents Category reqs clients #
GET /v1/traffic_reports/total_categories_users Category reqs users #
GET /v1/traffic_reports/total_categories_collections Category reqs collections #
GET /v1/traffic_reports/total_domains Total domain reqs #
GET /v1/traffic_reports/total_domains_organizations Domain reqs organizations #
GET /v1/traffic_reports/total_domains_users Domain reqs users #
GET /v1/traffic_reports/total_domains_collections Domain reqs collections #
GET /v1/traffic_reports/total_collections Total collection reqs #
GET /v1/traffic_reports/total_collections_organizations Collection reqs orgs #
GET /v1/traffic_reports/total_collections_agents Collection reqs clients #
GET /v1/traffic_reports/total_collections_users Collection reqs users #
GET /v1/traffic_reports/qps Queries per second #
GET /v1/traffic_reports/qps_active_organizations QPS organizations #
GET /v1/traffic_reports/qps_active_agents QPS clients #
GET /v1/traffic_reports/qps_active_users QPS users #
GET /v1/traffic_reports/qps_active_collections QPS collections #
GET /v1/traffic_reports/top_domains Top domains #
GET /v1/traffic_reports/top_categories Top categories #
GET /v1/traffic_reports/top_application_categories Top application categories #
GET /v1/traffic_reports/top_organizations Top organizations #
GET /v1/traffic_reports/top_networks Top networks #
GET /v1/traffic_reports/top_agents Top agents #
GET /v1/traffic_reports/top_users Top users #
GET /v1/traffic_reports/top_collections Top collections #
GET /v1/traffic_reports/query_logs Query Logs #
GET /v1/traffic_reports/total_organizations_stats Organization stats #
GET /v1/traffic_reports/total_domain_stats Domain stats #
GET /v1/traffic_reports/total_category_stats Category stats #
GET /v1/traffic_reports/total_organizations_requests Total Org Requests #
GET /v1/traffic_reports/total_domain_requests Total Domain Requests #
GET /v1/traffic_reports/top_organizations_requests Top Organizations Requests #
GET /v1/traffic_reports/total_client_stats Total client stats #
GET /v1/traffic_reports/total_deployments Deployments #
GET /v1/traffic_reports/total_roaming_clients Roaming clients #
GET /v1/traffic_reports/total_applications_stats Application requests #
GET /v1/traffic_reports/total_applications_organizations_stats Application reqs org #
GET /v1/traffic_reports/total_applications_networks_stats Applications reqs networks #
GET /v1/traffic_reports/total_applications_agents_stats Application reqs clients #
GET /v1/traffic_reports/total_applications_users_stats Application reqs users #
GET /v1/traffic_reports/total_applications_collections_stats Application reqs collections #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/dnsfilter-traffic-reports-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

dnsfilter-traffic-reports-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: DNSFilter Agent Local User Bulk Deletes Traffic Reports API
  description: "\n**Note:** If you are a distributor integrating with DNSFilter, please check\n          out our [Distributors Development Guide](/docs/distributors).\n\n### Authentication\n\n- Authentication is required for most, but not all, endpoints.\n\n- Authentication is done by setting the `Authorization` request header.\n  The header value is the API key itself.\n  For example: `Authorization: eyJ...`\n\n- An API key can be obtained through the DNSFilter dashboard under\n  Account Settings. For additional information see\n  [this KB article](https://help.dnsfilter.com/hc/en-us/articles/21169189058323-API-Tokens).\n\n### Rate Limiting\n\n- All endpoints are rate limited.\n\n- The limits may vary by endpoint, but are generally consistent.\n\n- When the rate limit is exceeded the API will return the standard `429` HTTP status.\n\n- The following headers will also be provided in the response:\n  `Retry-After`, `RateLimit-Policy`, `RateLimit`, `RateLimit-Limit`, `RateLimit-Remaining`, `RateLimit-Reset`.\n  For details on the values of these headers, see the following articles\n  [here](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Retry-After),\n  [here](https://www.ietf.org/archive/id/draft-ietf-httpapi-ratelimit-headers-08.html),\n  and [here](https://www.ietf.org/archive/id/draft-polli-ratelimit-headers-05.html).\n\n- For additional information see [this KB article](https://help.dnsfilter.com/hc/en-us/articles/38202811088403-API-Rate-Limits).\n\n### Error Handling\n\n- The API uses standard HTTP status codes to indicate success or failure.\n\n- For _V1_ endpoints the response format is:\n  ```json\n  { \"error\": \"string\", \"type\": \"string(optional)\" }\n  ```\n- For _V2_ endpoints the response format is:\n  ```json\n  { \"error\": { \"message\": \"string\", \"type\": \"string(optional)\" } }\n  ```\n\n### Pagination\n\nFor the _V1_ endpoints, the pagination parameters are nested. That is to say,\nif passed as JSON they look like this: `{\"page[number]\": 1, \"page[size]\": 10}`.\n\nTo pass this information in the URL query string, it would be formatted like\nthis: `...?page%5Bnumber%5D=1&page%5Bsize%5D=10`.\n\nIn this guide, the UI will indicate that `page` is an `object` and if you\nwant to set values when trying the request, you must enter it as if it was\nthe JSON above.\n\n### A Quick Example\n\nThe following will return information about the currently\nauthenticated user.\n\n```bash\n% curl -H 'Authorization: ***' https://api.dnsfilter.com/v1/users/self\n\n{ \"data\": {\n    \"id\": \"12345\",\n    \"type\": \"users\",\n    \"attributes\": {\n      \"name\": \"John Doe\",\n      \"email\": \"john@example.com\",\n      ...additional fields...\n}}}\n```\n"
  version: '2026-07-13'
servers:
- url: https://api.dnsfilter.com
  description: Production
tags:
- name: Traffic Reports
  description: ''
paths:
  /v1/traffic_reports/total_requests:
    get:
      tags:
      - Traffic Reports
      operationId: V1_Traffic_Reports-total_requests
      parameters:
      - name: agent_ids
        description: Comma separated list of user agent UUIDs, defaults to all
        required: false
        in: query
        schema:
          type: string
      - name: agent_types
        description: Comma separated list of user agent types, defaults to all
        required: false
        in: query
        schema:
          type: string
      - name: application_ids
        description: Comma separated list of application IDs, defaults to all
        required: false
        in: query
        schema:
          type: string
      - name: bucket_size
        description: "Desired bucket size, possible values: *auto*, *15min*, *1day*, defaults to *auto*\n*Auto*:\n  If report from/to range is less than 24 hours (ex.: \"Today\" and \"Yesterday\"), bucket size is fifteen minutes\n  If report from/to range is greater than 24 hours (ex.: \"Last 7 days\" and \"Last 14 days\"), bucket size is one day"
        required: false
        in: query
        schema:
          type: string
      - name: collection_ids
        description: Comma separated list of collection IDs, defaults to all
        required: false
        in: query
        schema:
          type: string
      - name: from
        description: Report UTC lower limit, format YYYY-MM-DDThh:mm:ss or YYYY-MM-DDThh:mm:ssZ, defaults to current UTC datetime minus 1 day or if format is not recognized
        required: false
        in: query
        schema:
          type: string
      - name: mac_addresses
        description: Comma separated list of MAC addresses (without colons) or filter values, defaults to all
        required: false
        in: query
        schema:
          type: string
      - name: msp_id
        description: MSP ID
        required: false
        in: query
        schema:
          type: integer
      - name: nat_ips
        description: Comma separated list of NAT IPs, defaults to all (valid integer list from 101 to 106)
        required: false
        in: query
        schema:
          type: string
      - name: network_ids
        description: Comma separated list of networks IDs, defaults to all
        required: false
        in: query
        schema:
          type: string
      - name: organization_ids
        description: Comma separated list of organization IDs, defaults to user organization ID
        required: false
        in: query
        schema:
          type: string
      - name: private_ip
        description: Private LAN IP
        required: false
        in: query
        schema:
          type: string
      - name: private_ip_from
        description: Private LAN IP range, lower limit
        required: false
        in: query
        schema:
          type: string
      - name: private_ip_to
        description: Private LAN IP range, upper limit
        required: false
        in: query
        schema:
          type: string
      - name: security_report
        description: Threats report true/false, *both* (threats and non-threats) if it is empty or not sent
        required: false
        in: query
        schema:
          type: boolean
      - name: show_individual_networks
        description: Group report result by network id, defaults to false
        required: false
        in: query
        schema:
          type: boolean
      - name: source
        description: Comma separated list of desired traffic source (networks, user agents, proxies), defaults to all
        required: false
        in: query
        schema:
          type: string
          enum:
          - all
          - networks
          - agents
          - proxies
      - name: to
        description: Report UTC upper limit, format YYYY-MM-DDThh:mm:ss or YYYY-MM-DDThh:mm:ssZ, defaults to current UTC datetime or if format is not recognized
        required: false
        in: query
        schema:
          type: string
      - name: type
        description: Type of report (all, allowed, blocked), defaults to all
        required: false
        in: query
        schema:
          type: string
          enum:
          - all
          - allowed
          - blocked
      - name: user_ids
        description: Comma separated list of local user IDs, defaults to all
        required: false
        in: query
        schema:
          type: string
      responses:
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '200':
          description: Report result
          content:
            application/json:
              schema:
                type: object
                properties:
                  data:
                    $ref: '#/components/schemas/TrafficReportsTotalRequests'
      description: Gets the total number of requests for sites in a period of time.
      summary: Total requests/time
      security:
      - header_authorization: []
      x-controller: v1/traffic_reports
      x-action: total_requests
  /v1/traffic_reports/total_requests_geo:
    get:
      tags:
      - Traffic Reports
      operationId: V1_Traffic_Reports-total_requests_geo
      parameters:
      - name: from
        description: Report UTC lower limit, format YYYY-MM-DDThh:mm:ss or YYYY-MM-DDThh:mm:ssZ, defaults to current UTC datetime minus 1 day or if format is not recognized
        required: false
        in: query
        schema:
          type: string
      - name: limit
        description: Limit the size of the response
        required: true
        in: query
        schema:
          type: integer
      - name: msp_id
        description: MSP ID
        required: false
        in: query
        schema:
          type: integer
      - name: organization_ids
        description: Comma separated list of organization IDs, defaults to user organization ID
        required: false
        in: query
        schema:
          type: string
      - name: to
        description: Report UTC upper limit, format YYYY-MM-DDThh:mm:ss or YYYY-MM-DDThh:mm:ssZ, defaults to current UTC datetime or if format is not recognized
        required: false
        in: query
        schema:
          type: string
      responses:
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '200':
          description: Report result
          content:
            application/json:
              schema:
                type: object
                properties:
                  data:
                    $ref: '#/components/schemas/TrafficReportsTotalRequestsGeo'
      description: 'Gets the total number of requests for organizations in a period of time

        for the heatmap on overview.'
      summary: Total requests geo
      security:
      - header_authorization: []
      x-controller: v1/traffic_reports
      x-action: total_requests_geo
  /v1/traffic_reports/total_requests_organizations:
    get:
      tags:
      - Traffic Reports
      operationId: V1_Traffic_Reports-total_requests_organizations
      parameters:
      - name: agent_ids
        description: Comma separated list of user agent UUIDs, defaults to all
        required: false
        in: query
        schema:
          type: string
      - name: agent_types
        description: Comma separated list of user agent types, defaults to all
        required: false
        in: query
        schema:
          type: string
      - name: application_ids
        description: Comma separated list of application IDs, defaults to all
        required: false
        in: query
        schema:
          type: string
      - name: bucket_size
        description: "Desired bucket size, possible values: *auto*, *15min*, *1day*, defaults to *auto*\n*Auto*:\n  If report from/to range is less than 24 hours (ex.: \"Today\" and \"Yesterday\"), bucket size is fifteen minutes\n  If report from/to range is greater than 24 hours (ex.: \"Last 7 days\" and \"Last 14 days\"), bucket size is one day"
        required: false
        in: query
        schema:
          type: string
      - name: collection_ids
        description: Comma separated list of collection IDs, defaults to all
        required: false
        in: query
        schema:
          type: string
      - name: from
        description: Report UTC lower limit, format YYYY-MM-DDThh:mm:ss or YYYY-MM-DDThh:mm:ssZ, defaults to current UTC datetime minus 1 day or if format is not recognized
        required: false
        in: query
        schema:
          type: string
      - name: mac_addresses
        description: Comma separated list of MAC addresses (without colons) or filter values, defaults to all
        required: false
        in: query
        schema:
          type: string
      - name: msp_id
        description: MSP ID
        required: false
        in: query
        schema:
          type: integer
      - name: nat_ips
        description: Comma separated list of NAT IPs, defaults to all (valid integer list from 101 to 106)
        required: false
        in: query
        schema:
          type: string
      - name: network_ids
        description: Comma separated list of networks IDs, defaults to all
        required: false
        in: query
        schema:
          type: string
      - name: organization_ids
        description: Comma separated list of organization IDs, defaults to user organization ID
        required: false
        in: query
        schema:
          type: string
      - name: private_ip
        description: Private LAN IP
        required: false
        in: query
        schema:
          type: string
      - name: private_ip_from
        description: Private LAN IP range, lower limit
        required: false
        in: query
        schema:
          type: string
      - name: private_ip_to
        description: Private LAN IP range, upper limit
        required: false
        in: query
        schema:
          type: string
      - name: security_report
        description: Threats report true/false, *both* (threats and non-threats) if it is empty or not sent
        required: false
        in: query
        schema:
          type: boolean
      - name: show_individual_organizations
        description: Group report result by organization id, defaults to false
        required: false
        in: query
        schema:
          type: boolean
      - name: source
        description: Comma separated list of desired traffic source (networks, user agents, proxies), defaults to all
        required: false
        in: query
        schema:
          type: string
          enum:
          - all
          - networks
          - agents
          - proxies
      - name: to
        description: Report UTC upper limit, format YYYY-MM-DDThh:mm:ss or YYYY-MM-DDThh:mm:ssZ, defaults to current UTC datetime or if format is not recognized
        required: false
        in: query
        schema:
          type: string
      - name: type
        description: Type of report (all, allowed, blocked), defaults to all
        required: false
        in: query
        schema:
          type: string
          enum:
          - all
          - allowed
          - blocked
      - name: user_ids
        description: Comma separated list of local user IDs, defaults to all
        required: false
        in: query
        schema:
          type: string
      responses:
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '200':
          description: Report result
          content:
            application/json:
              schema:
                type: object
                properties:
                  data:
                    $ref: '#/components/schemas/TrafficReportsTotalRequestsOrganizations'
      description: Gets the total number of requests for organizations in a period of time.
      summary: Total requests/organizations
      security:
      - header_authorization: []
      x-controller: v1/traffic_reports
      x-action: total_requests_organizations
  /v1/traffic_reports/total_requests_agents:
    get:
      tags:
      - Traffic Reports
      operationId: V1_Traffic_Reports-total_requests_agents
      parameters:
      - name: agent_ids
        description: Comma separated list of user agent UUIDs, defaults to all
        required: false
        in: query
        schema:
          type: string
      - name: agent_types
        description: Comma separated list of user agent types, defaults to all
        required: false
        in: query
        schema:
          type: string
      - name: application_ids
        description: Comma separated list of application IDs, defaults to all
        required: false
        in: query
        schema:
          type: string
      - name: bucket_size
        description: "Desired bucket size, possible values: *auto*, *15min*, *1day*, defaults to *auto*\n*Auto*:\n  If report from/to range is less than 24 hours (ex.: \"Today\" and \"Yesterday\"), bucket size is fifteen minutes\n  If report from/to range is greater than 24 hours (ex.: \"Last 7 days\" and \"Last 14 days\"), bucket size is one day"
        required: false
        in: query
        schema:
          type: string
      - name: collection_ids
        description: Comma separated list of collection IDs, defaults to all
        required: false
        in: query
        schema:
          type: string
      - name: from
        description: Report UTC lower limit, format YYYY-MM-DDThh:mm:ss or YYYY-MM-DDThh:mm:ssZ, defaults to current UTC datetime minus 1 day or if format is not recognized
        required: false
        in: query
        schema:
          type: string
      - name: mac_addresses
        description: Comma separated list of MAC addresses (without colons) or filter values, defaults to all
        required: false
        in: query
        schema:
          type: string
      - name: msp_id
        description: MSP ID
        required: false
        in: query
        schema:
          type: integer
      - name: nat_ips
        description: Comma separated list of NAT IPs, defaults to all (valid integer list from 101 to 106)
        required: false
        in: query
        schema:
          type: string
      - name: network_ids
        description: Comma separated list of networks IDs, defaults to all
        required: false
        in: query
        schema:
          type: string
      - name: organization_ids
        description: Comma separated list of organization IDs, defaults to user organization ID
        required: false
        in: query
        schema:
          type: string
      - name: private_ip
        description: Private LAN IP
        required: false
        in: query
        schema:
          type: string
      - name: private_ip_from
        description: Private LAN IP range, lower limit
        required: false
        in: query
        schema:
          type: string
      - name: private_ip_to
        description: Private LAN IP range, upper limit
        required: false
        in: query
        schema:
          type: string
      - name: security_report
        description: Threats report true/false, *both* (threats and non-threats) if it is empty or not sent
        required: false
        in: query
        schema:
          type: boolean
      - name: show_individual_agents
        description: Group report result by agent id, defaults to false
        required: false
        in: query
        schema:
          type: boolean
      - name: source
        description: Comma separated list of desired traffic source (networks, user agents, proxies), defaults to all
        required: false
        in: query
        schema:
          type: string
          enum:
          - all
          - networks
          - agents
          - proxies
      - name: to
        description: Report UTC upper limit, format YYYY-MM-DDThh:mm:ss or YYYY-MM-DDThh:mm:ssZ, defaults to current UTC datetime or if format is not recognized
        required: false
        in: query
        schema:
          type: string
      - name: type
        description: Type of report (all, allowed, blocked), defaults to all
        required: false
        in: query
        schema:
          type: string
          enum:
          - all
          - allowed
          - blocked
      - name: user_ids
        description: Comma separated list of local user IDs, defaults to all
        required: false
        in: query
        schema:
          type: string
      responses:
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '200':
          description: Report result
          content:
            application/json:
              schema:
                type: object
                properties:
                  data:
                    $ref: '#/components/schemas/TrafficReportsTotalRequestsAgents'
      description: Gets the total number of requests for roaming clients in a period of time.
      summary: Total requests clients
      security:
      - header_authorization: []
      x-controller: v1/traffic_reports
      x-action: total_requests_agents
  /v1/traffic_reports/total_requests_users:
    get:
      tags:
      - Traffic Reports
      operationId: V1_Traffic_Reports-total_requests_users
      parameters:
      - name: agent_ids
        description: Comma separated list of user agent UUIDs, defaults to all
        required: false
        in: query
        schema:
          type: string
      - name: agent_types
        description: Comma separated list of user agent types, defaults to all
        required: false
        in: query
        schema:
          type: string
      - name: application_ids
        description: Comma separated list of application IDs, defaults to all
        required: false
        in: query
        schema:
          type: string
      - name: bucket_size
        description: "Desired bucket size, possible values: *auto*, *15min*, *1day*, defaults to *auto*\n*Auto*:\n  If report from/to range is less than 24 hours (ex.: \"Today\" and \"Yesterday\"), bucket size is fifteen minutes\n  If report from/to range is greater than 24 hours (ex.: \"Last 7 days\" and \"Last 14 days\"), bucket size is one day"
        required: false
        in: query
        schema:
          type: string
      - name: collection_ids
        description: Comma separated list of collection IDs, defaults to all
        required: false
        in: query
        schema:
          type: string
      - name: from
        description: Report UTC lower limit, format YYYY-MM-DDThh:mm:ss or YYYY-MM-DDThh:mm:ssZ, defaults to current UTC datetime minus 1 day or if format is not recognized
        required: false
        in: query
        schema:
          type: string
      - name: mac_addresses
        description: Comma separated list of MAC addresses (without colons) or filter values, defaults to all
        required: false
        in: query
        schema:
          type: string
      - name: msp_id
        description: MSP ID
        required: false
        in: query
        schema:
          type: integer
      - name: nat_ips
        description: Comma separated list of NAT IPs, defaults to all (valid integer list from 101 to 106)
        required: false
        in: query
        schema:
          type: string
      - name: network_ids
        description: Comma separated list of networks IDs, defaults to all
        required: false
        in: query
        schema:
          type: string
      - name: organization_ids
        description: Comma separated list of organization IDs, defaults to user organization ID
        required: false
        in: query
        schema:
          type: string
      - name: private_ip
        description: Private LAN IP
        required: false
        in: query
        schema:
          type: string
      - name: private_ip_from
        description: Private LAN IP range, lower limit
        required: false
        in: query
        schema:
          type: string
      - name: private_ip_to
        description: Private LAN IP range, upper limit
        required: false
        in: query
        schema:
          type: string
      - name: security_report
        description: Threats report true/false, *both* (threats and non-threats) if it is empty or not sent
        required: false
        in: query
        schema:
          type: boolean
      - name: show_individual_users
        description: Group report result by user id, defaults to false
        required: false
        in: query
        schema:
          type: boolean
      - name: source
        description: Comma separated list of desired traffic source (networks, user agents, proxies), defaults to all
        required: false
        in: query
        schema:
          type: string
          enum:
          - all
          - networks
          - agents
          - proxies
      - name: to
        description: Report UTC upper limit, format YYYY-MM-DDThh:mm:ss or YYYY-MM-DDThh:mm:ssZ, defaults to current UTC datetime or if format is not recognized
        required: false
        in: query
        schema:
          type: string
      - name: type
        description: Type of report (all, allowed, blocked), defaults to all
        required: false
        in: query
        schema:
          type: string
          enum:
          - all
          - allowed
          - blocked
      - name: user_ids
        description: Comma separated list of local user IDs, defaults to all
        required: false
        in: query
        schema:
          type: string
      responses:
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '200':
          description: Report result
          content:
            application/json:
              schema:
                type: object
                properties:
                  data:
                    $ref: '#/components/schemas/TrafficReportsTotalRequestsUsers'
      description: Gets the total number of requests for users in a period of time.
      summary: Total requests users
      security:
      - header_authorization: []
      x-controller: v1/traffic_reports
      x-action: total_requests_users
  /v1/traffic_reports/total_requests_collections:
    get:
      tags:
      - Traffic Reports
      operationId: V1_Traffic_Reports-total_requests_collections
      parameters:
      - name: agent_ids
        description: Comma separated list of user agent UUIDs, defaults to all
        required: false
        in: query
        schema:
          type: string
      - name: agent_types
        description: Comma separated list of user agent types, defaults to all
        required: false
        in: query
        schema:
          type: string
      - name: application_ids
        description: Comma separated list of application IDs, defaults to all
        required: false
        in: query
        schema:
          type: string
      - name: bucket_size
        description: "Desired bucket size, possible values: *auto*, *15min*, *1day*, defaults to *auto*\n*Auto*:\n  If report from/to range is less than 24 hours (ex.: \"Today\" and \"Yesterday\"), bucket size is fifteen minutes\n  If report from/to range is greater than 24 hours (ex.: \"Last 7 days\" and \"Last 14 days\"), bucket size is one day"
        required: false
        in: query
        schema:
          type: string
      - name: collection_ids
        description: Comma separated list of collection IDs, defaults to all
        required: false
        in: query
        schema:
          type: string
      - name: from
        description: Report UTC lower limit, format YYYY-MM-DDThh:mm:ss or YYYY-MM-DDThh:mm:ssZ, defaults to current UTC datetime minus 1 day or if format is not recognized
        required: false
        in: query
        schema:
          type: string
      - name: mac_addresses
        description: Comma separated list of MAC addresses (without colons) or filter values, defaults to all
        required: false
        in: query
        schema:
          type: string
      - name: nat_ips
        description: Comma separated list of NAT IPs, defaults to all (valid integer list from 101 to 106)
        required: false
        in: query
        schema:
          type: string
      - name: network_ids
        description: Comma separated list of networks IDs, defaults to all
        required: false
        in: query
        schema:
          type: string
      - name: organization_ids
        description: Comma separated list of organization IDs, defaults to user organization ID
        required: false
        in: query
        schema:
          type: string
      - name: private_ip
        description: Private LAN IP
        required: false
        in: query
        schema:
          type: string
      - name: private_ip_from
        description: Private LAN IP range, lower limit
        required: false
        in: query
        schema:
          type: string
      - name: private_ip_to
        description: Private LAN IP range, upper limit
        required: false
        in: query
        schema:
          type: string
      - name: security_report
        description: Threats report true/false, *both* (threats and non-threats) if it is empty or not sent
        required: false
        in: query
        schema:
          type: boolean
      - name: show_individual_collections
        description: Group report result by collection id, defaults to false
        required: false
        in: query
        schema:
          type: boolean
      - name: source
        description: Comma separated list of desired traffic source (networks, user agents, proxies), defaults to all
        required: false
        in: query
        schema:
          type: string
          enum:
          - all
          - networks
          - agents
          - proxies
      - name: to
        description: Report UTC upper limit, format YYYY-MM-DDThh:mm:ss or YYYY-MM-DDThh:mm:ssZ, defaults to current UTC datetime or if format is not recognized
        required: false
        in: query
        schema:
          type: string
      - name: type
        description: Type of report (all, allowed, blocked), defaults to all
        required: false
        in: query
        schema:
          type: string
          enum:
          - all
          - allowed
          - blocked
      - name: user_ids
        description: Comma separated list of local user IDs, defaults to all
        required: false
        in: query
        schema:
          type: string
      responses:
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '200':
          description: Report result
          content:
            application/json:
              schema:
                type: object
                properties:
                  data:
                    $ref: '#/components/schemas/TrafficReportsTotalRequestsCollectionsResult'
      description: Gets the total number of requests for collections in a period of time.
      summary: Total requests collections
      security:
      - header_authorization: []
      x-controller: v1/traffic_reports
      x-action: total_requests_collections
  /v1/traffic_reports/total_threats:
    get:
      tags:
      - Traffic Reports
      operationId: V1_Traffic_Reports-total_threats
      parameters:
      - name: agent_ids
        description: Comma separated list of user agent UUIDs, defaults to all
        required: false
        in: query
        schema:
          type: string
      - name: agent_types
        description: Comma separated list of user agent types, defaults to all
        required: false
        in: query
        schema:
          type: string
      - name: application_ids
        description: Comma separated list of application IDs, defaults to all
        required: false
        in: query
        schema:
          type: string
      - name: bucket_size
        description: "Desired bucket size, possible values: *auto*, *15min*, *1day*, defaults to *auto*\n*Auto*:\n  If re

# --- truncated at 32 KB (355 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/dnsfilter/refs/heads/main/openapi/dnsfilter-traffic-reports-api-openapi.yml