# dns-caa-via-adguard

> dns-caa-via-adguard is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-21).

Retrieves CAA DNS records for a domain using AdGuard DNS over HTTPS, returning records, TTL, response code, DNSSEC validation status, and resolver answer time.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/caa/via/adguard?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dns-caa-via-adguard-2049a276
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_oOU6GZyE984ArzBN-73F6

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dns-caa-via-adguard-2049a276
```

Example prompt: Can you look up the CAA records for example.com using AdGuard DNS and tell me which certificate authorities are authorized, what TTL they have, whether DNSSEC was validated, and how fast AdGuard responded?

## When to prefer this

Choose this endpoint when you specifically need CAA record data as seen by AdGuard DNS, particularly for comparing resolver-specific answers, checking for propagation lag, detecting filtering behavior, or auditing DNSSEC validation status across resolvers. Use this over generic DNS tools when AdGuard's perspective is the target of interest.

## Known failure modes

- NXDOMAIN returned if the domain does not exist or has no CAA records
- SERVFAIL if AdGuard DNS cannot resolve the domain
- Empty record set if no CAA records are configured for the domain
- Network timeout if AdGuard DoH endpoint is unreachable
- Invalid domain input may result in an error or malformed query response

## How this service works

CAA records for a domain as answered by AdGuard DNS (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resolvers to spot propagation lag, filtering or split-horizon answers. $0.01 per lookup.

## Output

Returns the CAA records for the queried domain as seen by AdGuard DNS, including the record values, TTL, DNS response code (NOERROR, NXDOMAIN, or SERVFAIL), a flag indicating whether DNSSEC was validated, and the resolver's answer time in milliseconds.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dns-caa-via-adguard-2049a276/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)