AI Chatbot Blocklist
for Student Devices

<!-- Jamf Pro — Web Content Filter Payload for Student iPads -->
<!-- Profile → Restrictions → Content Filter → Limit Adult Content -->

<?xml version="1.0" encoding="UTF-8"?>
<plist version="1.0">
<dict>
  <key>PayloadContent</key>
  <array><dict>
    <key>PayloadType</key>
    <string>com.apple.webcontent-filter</string>
    <key>AutoFilterEnabled</key>
    <true/>
    <key>FilterType</key>
    <string>BuiltIn</string>
    <key>BlacklistedURLs</key>
    <array>
      <string>chatgpt.com</string>
      <string>chat.openai.com</string>
      <string>claude.ai</string>
      <string>gemini.google.com</string>
      <string>copilot.microsoft.com</string>
      <string>character.ai</string>
      <string>perplexity.ai</string>
      <string>poe.com</string>
      <string>quillbot.com</string>
      <string>you.com</string>
      <!-- Full feed: import via Jamf Pro API script -->
    </array>
  </dict></array>
</dict>
</plist>

# Intune / Defender for Endpoint — AI Chatbot Domain Indicators
# Run via Azure Automation or a scheduled task on your management server

$apiKey = "YOUR_API_KEY"
$feedUrl = "https://feeds.aitoolsblocklist.com/v1/domains/chatbots.json"

# Fetch the latest AI chatbot domains
$headers = @{ "Authorization" = "Bearer $apiKey" }
$response = Invoke-RestMethod -Uri $feedUrl -Headers $headers
$domains = $response.domains

Write-Host "Fetched $($domains.Count) AI chatbot domains"

# Create custom indicators in Defender for Endpoint
foreach ($domain in $domains) {
    $indicator = @{
        indicatorValue  = $domain.url
        indicatorType   = "Url"
        action          = "Block"
        title           = "AI Chatbot: $($domain.name)"
        description     = "Category: $($domain.category)"
        severity        = "Medium"
        recommendedActions = "Blocked by district AI policy"
    }

    Invoke-RestMethod -Uri "https://api.securitycenter.microsoft.com/api/indicators" `
        -Method Post -Headers $defenderHeaders `
        -Body ($indicator | ConvertTo-Json) `
        -ContentType "application/json"
}

Write-Host "Updated $($domains.Count) Defender URL indicators"

#!/bin/bash
# /opt/scripts/testing-period-switch.sh
# Cron: 0 5 * * * /opt/scripts/testing-period-switch.sh

API_KEY="YOUR_API_KEY"
BASE_URL="https://feeds.aitoolsblocklist.com/v1/domains"
CONFIG="/etc/ai-blocklist/testing-periods.conf"
OUTPUT_DIR="/var/lib/mdm-sync/blocklists"
TODAY=$(date +%Y-%m-%d)
TESTING_MODE="false"

# testing-periods.conf format: START_DATE END_DATE LABEL
# 2025-03-10 2025-03-21 State_Assessment
# 2025-05-05 2025-05-16 AP_Exams
# 2025-06-02 2025-06-06 Final_Exams

while IFS=' ' read -r start end label; do
    [[ "$start" == "#"* ]] && continue
    if [[ "$TODAY" >= "$start" && "$TODAY" <= "$end" ]]; then
        TESTING_MODE="true"
        echo "[$(date)] TESTING PERIOD ACTIVE: $label ($start to $end)"
        break
    fi
done < "$CONFIG"

if [ "$TESTING_MODE" = "true" ]; then
    echo "[$(date)] Deploying FULL BLOCK to all tiers"
    for tier in elementary middle-school high-school; do
        curl -s -H "Authorization: Bearer $API_KEY" \
             "$BASE_URL/all.txt" \
             -o "$OUTPUT_DIR/$tier.txt"
    done
else
    echo "[$(date)] Deploying TIER-BASED blocking"
    # Each tier gets its normal category-filtered feed
    curl -s -H "Authorization: Bearer $API_KEY" \
         "$BASE_URL/all.txt" -o "$OUTPUT_DIR/elementary.txt"
    curl -s -H "Authorization: Bearer $API_KEY" \
         "$BASE_URL/all.txt?exclude=education-learning" \
         -o "$OUTPUT_DIR/middle-school.txt"
    curl -s -H "Authorization: Bearer $API_KEY" \
         "$BASE_URL/all.txt?exclude=education-learning,code-development,data-research,security-detection" \
         -o "$OUTPUT_DIR/high-school.txt"
fi

# Trigger MDM profile refresh (example: Jamf Pro API)
curl -s -X POST "https://your-jamf.jamfcloud.com/api/v1/mdm/renew-profile" \
     -H "Authorization: Bearer $JAMF_TOKEN"

echo "[$(date)] Feed deployment complete. Testing mode: $TESTING_MODE"