# dns-dnskey-via-cleanbrowsing

> dns-dnskey-via-cleanbrowsing is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-21).

Fetches DNSKEY records for a domain as answered by CleanBrowsing's security-filtering DNS resolver over HTTPS, returning records, TTL, response code, DNSSEC validation status, and answer time.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/dnskey/via/cleanbrowsing?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dns-dnskey-via-cleanbrowsing-dd1187b9
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_0WnA5F1TxzCvHQSWDc0UA

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dns-dnskey-via-cleanbrowsing-dd1187b9
```

Example prompt: What DNSKEY records does CleanBrowsing return for example.com, and does it validate DNSSEC?

## When to prefer this

Use this endpoint when you specifically need to see how CleanBrowsing's security-filtering resolver handles DNSKEY records — especially when comparing resolver behavior, detecting filtering effects, auditing DNSSEC key propagation, or investigating split-horizon DNS differences between resolvers. Prefer this over generic DNS tools when CleanBrowsing's security filtering behavior is itself the subject of inquiry.

## Known failure modes

- Domain does not exist — returns NXDOMAIN response code
- CleanBrowsing blocks or filters the domain — may return SERVFAIL or empty answer
- No DNSKEY records published for the domain — returns NOERROR with empty record set
- Resolver temporarily unavailable — returns SERVFAIL
- Network timeout — no response or connection error

## How this service works

DNSKEY records for a domain as answered by CleanBrowsing (security filter) (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resolvers to spot propagation lag, filtering or split-horizon answers. $0.01 per lookup.

## Output

Returns the DNSKEY records for the queried domain as resolved by CleanBrowsing DNS over HTTPS, including the full record set, TTL, DNS response code (NOERROR, NXDOMAIN, or SERVFAIL), whether CleanBrowsing performed DNSSEC validation, and the resolver's answer time in milliseconds.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dns-dnskey-via-cleanbrowsing-dd1187b9/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)