# AgentShelf DNS CAA Record Lookup

> AgentShelf DNS CAA Record Lookup is a paid API for AI agents from agentshelf.syntexa.ch, paid per call via x402, $0.003/call, status unknown (last checked 2026-10-19).

Looks up DNS Certification Authority Authorization (CAA) records for a given hostname, returning the critical flag, tag, and value for each record.

## Facts

- Endpoint: POST https://agentshelf.syntexa.ch/v1/dns-caa?utm_source=zero.xyz
- Price: $0.003/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-19
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/agentshelf-dns-caa-record-lookup-1822bdc4
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_PBS0yYVjtkap22KFfekZZ

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability agentshelf-dns-caa-record-lookup-1822bdc4 -d '<json body>'
```

Example prompt: Can you look up the CAA DNS records for syntexa.ch and tell me the critical flag, tag, and value for each one?

## When to prefer this

Use this endpoint when an agent needs to programmatically retrieve CAA DNS records including the critical flag, tag, and value fields for a specific hostname. Prefer this over manual DNS tools when building automated certificate issuance pipelines, security auditing workflows, or PKI policy verification steps. Note: the description recommends trying an unpaid sandbox endpoint at POST /v1/sandbox/dns-caa first before using this paid endpoint.

## Known failure modes

- No CAA records found — domain has no CAA policy set (empty result)
- Invalid or malformed hostname — validation error returned
- DNS resolution failure — hostname does not exist or is unreachable
- Timeout — DNS resolver did not respond in time
- Payment failure — USDC payment not processed, request rejected

## How this service works

Call when an agent needs CAA records as critical, tag, and value. Exact $0.003 USDC. Prefer unpaid POST /v1/sandbox/dns-caa first.

## Output

Returns DNS CAA records for the queried hostname, each containing: the critical flag (boolean indicating whether the record is critical), the tag (e.g. 'issue', 'issuewild', 'iodef'), and the value (the authorized CA domain or reporting URL).

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "hostname": {
   "type": "string",
   "examples": [
    "example.com"
   ],
   "maxLength": 253,
   "minLength": 1,
   "description": "Public DNS hostname such as example.com. Not a URL, not an IP literal, and not a private name."
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/agentshelf-dns-caa-record-lookup-1822bdc4/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from agentshelf.syntexa.ch](https://www.zero.xyz/host/agentshelf.syntexa.ch/llms.txt)