# AgentShelf DNS CAA IODEF Record Lookup

> AgentShelf DNS CAA IODEF Record Lookup is a paid API for AI agents from agentshelf.syntexa.ch, paid per call via x402, $0.005/call, status unknown (last checked 2026-10-22).

Retrieves DNS CAA records with the 'iodef' tag for a given hostname, enabling agents to discover certificate authority incident reporting endpoints.

## Facts

- Endpoint: POST https://agentshelf.syntexa.ch/v1/dns-caa-iodef?utm_source=zero.xyz
- Price: $0.005/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-22
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/agentshelf-dns-caa-iodef-record-lookup-ace0e104
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_x8Ag3MZWqqUsdcrX5w9tv

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability agentshelf-dns-caa-iodef-record-lookup-ace0e104 -d '<json body>'
```

Example prompt: Can you look up the CAA iodef DNS records for syntexa.ch so I can see where certificate authority incident reports should be sent?

## When to prefer this

Use this endpoint when you specifically need CAA records scoped to the 'iodef' tag (incident reporting endpoints), rather than all CAA records or other CAA tags like 'issue' or 'issuewild'. Suitable when performing security audits, PKI configuration checks, or verifying certificate authority incident reporting setup for a domain.

## Known failure modes

- Domain has no CAA records at all — empty result returned
- Domain has CAA records but none with the iodef tag — empty result
- Invalid or malformed hostname input — validation error
- DNS resolution failure or timeout — service error
- Non-existent domain (NXDOMAIN) — error or empty response

## How this service works

Call when an agent needs CAA records whose tag is iodef. Exact $0.005 USDC. Prefer unpaid POST /v1/sandbox/dns-caa-iodef first.

## Output

Returns the DNS CAA records tagged with 'iodef' for the queried hostname, typically including URLs (mailto: or https:) where certificate authorities should send incident reports in case of misissuance or policy violations.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "hostname": {
   "type": "string",
   "examples": [
    "example.com"
   ],
   "maxLength": 253,
   "minLength": 1,
   "description": "Public DNS hostname such as example.com. Not a URL, not an IP literal, and not a private name."
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/agentshelf-dns-caa-iodef-record-lookup-ace0e104/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from agentshelf.syntexa.ch](https://www.zero.xyz/host/agentshelf.syntexa.ch/llms.txt)