# dns-caa-via-dnspod

> dns-caa-via-dnspod is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-21).

Retrieves CAA DNS records for a domain via DNSPod (doh.pub) DNS-over-HTTPS, returning records, TTL, DNSSEC validation status, response code, and resolver answer time.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/caa/via/dnspod?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dns-caa-via-dnspod-f3c34e6d
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_YoA5ksfeo6R6jzA3zPUWi

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dns-caa-via-dnspod-f3c34e6d
```

Example prompt: Can you look up the CAA records for example.com using the DNSPod resolver and tell me what certificate authorities are authorized, whether DNSSEC was validated, and how fast it responded?

## When to prefer this

Use this endpoint when you specifically need to see CAA records as resolved by DNSPod (doh.pub), a major Chinese DNS provider, to detect geographic/resolver-specific propagation lag, split-horizon DNS behavior, or filtering differences compared to other public resolvers. Ideal for multi-resolver comparison workflows or when validating certificate authority authorization policies from the perspective of users in China or regions where DNSPod is the dominant resolver.

## Known failure modes

- Domain does not exist — returns NXDOMAIN response code
- DNSPod resolver itself is unreachable — returns SERVFAIL
- No CAA records set for the domain — returns NOERROR with empty answer section
- DNSSEC validation failure — may return SERVFAIL with validation flag false
- Malformed or missing domain parameter — request rejected with input validation error

## How this service works

CAA records for a domain as answered by DNSPod (doh.pub) (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resolvers to spot propagation lag, filtering or split-horizon answers. $0.01 per lookup.

## Output

Returns the CAA DNS records for the queried domain as seen by DNSPod, including the record values, TTL, DNS response code (NOERROR, NXDOMAIN, or SERVFAIL), whether the resolver performed DNSSEC validation, and the resolver's answer latency in milliseconds.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dns-caa-via-dnspod-f3c34e6d/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)