# dns-cname-via-mullvad

> dns-cname-via-mullvad is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-21).

Resolves CNAME records for a domain using Mullvad's DNS over HTTPS resolver, returning records, TTL, response code, DNSSEC validation status, and answer time.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/cname/via/mullvad?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dns-cname-via-mullvad-244c2531
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_UxJpkwirJWirSfvI8YN3B

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dns-cname-via-mullvad-244c2531
```

Example prompt: What CNAME records does Mullvad's DNS resolver return for example.com, and did it validate DNSSEC?

## When to prefer this

Choose this endpoint when you specifically need to see how Mullvad's privacy-focused DNS resolver handles a CNAME query — especially useful for comparing against other resolvers (Google, Cloudflare, AliDNS) to detect propagation differences, split-horizon configurations, or resolver-level filtering. Prefer this over generic DNS lookup tools when DNSSEC validation status and per-resolver answer timing are important.

## Known failure modes

- Domain does not exist: returns NXDOMAIN response code with no records
- Domain has no CNAME records: returns NOERROR but empty record set
- Mullvad resolver is unreachable or times out: may return SERVFAIL or timeout error
- Invalid domain name format: request rejected or malformed response
- DNSSEC validation failure: resolver may indicate bogus/failed DNSSEC state

## How this service works

CNAME records for a domain as answered by Mullvad DNS (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resolvers to spot propagation lag, filtering or split-horizon answers. $0.01 per lookup.

## Output

Returns the CNAME records for the queried domain as seen by Mullvad's DNS resolver, including the record values, TTL, DNS response code (NOERROR, NXDOMAIN, or SERVFAIL), whether the resolver performed DNSSEC validation, and the time taken for the resolver to answer.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dns-cname-via-mullvad-244c2531/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)