# DNS DNSKEY Lookup via NextDNS (DoH)

> DNS DNSKEY Lookup via NextDNS (DoH) is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-21).

Fetches DNSKEY records for a domain using NextDNS as the DNS-over-HTTPS resolver, returning records, TTL, response code, DNSSEC validation status, and answer latency.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/dnskey/via/nextdns?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dns-dnskey-lookup-via-nextdns-doh-d6580573
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_wf0i4bX2v3az90E8RQaau

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dns-dnskey-lookup-via-nextdns-doh-d6580573
```

Example prompt: Can you look up the DNSKEY records for example.com using NextDNS as the resolver and tell me the records, TTL, response code, and whether DNSSEC was validated?

## When to prefer this

Choose this endpoint when you specifically need DNSKEY records as seen by the NextDNS resolver, particularly to check DNSSEC key publication, validate DNSSEC chain of trust through NextDNS, detect resolver-level filtering of DNSKEY records, or compare NextDNS's DNSKEY answer against other resolver siblings on this platform. Prefer sibling endpoints for other record types (A, TXT, SOA) or other resolvers (AdGuard, Mullvad, DNSPod).

## Known failure modes

- Domain does not exist — NXDOMAIN response code returned
- Domain exists but has no DNSKEY records — empty record set with NOERROR
- NextDNS filters the domain — may return SERVFAIL or empty response
- Network timeout reaching NextDNS DoH endpoint — resolver answer time may be unavailable
- Invalid domain format in query parameter — may return an error or empty result

## How this service works

DNSKEY records for a domain as answered by NextDNS (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resolvers to spot propagation lag, filtering or split-horizon answers. $0.01 per lookup.

## Output

Returns the DNSKEY resource records for the queried domain as answered by NextDNS DoH, including: the record data (public key, flags, protocol, algorithm), TTL value, DNS response code (NOERROR, NXDOMAIN, SERVFAIL), a boolean indicating whether the resolver performed DNSSEC validation, and the resolver's answer latency in milliseconds.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dns-dnskey-lookup-via-nextdns-doh-d6580573/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)