# dns-dnskey-via-cloudflare

> dns-dnskey-via-cloudflare is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-21).

Retrieves DNSKEY records for a domain as answered by Cloudflare 1.1.1.1 via DNS over HTTPS, including TTL, response code, DNSSEC validation status, and resolver answer time.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/dnskey/via/cloudflare?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dns-dnskey-via-cloudflare-a7258ca5
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_Ko615UspN6BWWbazaHNRK

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dns-dnskey-via-cloudflare-a7258ca5
```

Example prompt: What DNSKEY records does Cloudflare 1.1.1.1 return for example.com, and does it validate DNSSEC?

## When to prefer this

Choose this endpoint when you specifically need DNSKEY records as resolved by Cloudflare 1.1.1.1, especially when comparing DNSSEC key material across resolvers, detecting propagation lag, investigating DNSSEC validation failures, or auditing whether Cloudflare filters or modifies DNSKEY responses for a domain.

## Known failure modes

- Domain does not exist (NXDOMAIN response code returned)
- Domain has no DNSKEY records (empty answer section with NOERROR)
- Resolver encountered an error (SERVFAIL response code)
- Network timeout reaching Cloudflare DoH endpoint
- Invalid or malformed domain name input

## How this service works

DNSKEY records for a domain as answered by Cloudflare 1.1.1.1 (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resolvers to spot propagation lag, filtering or split-horizon answers. $0.01 per lookup.

## Output

Returns the DNSKEY resource records for the queried domain as seen by Cloudflare 1.1.1.1, along with the TTL, the DNS response code (NOERROR, NXDOMAIN, or SERVFAIL), a boolean indicating whether Cloudflare validated DNSSEC, and the resolver's answer latency in milliseconds.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dns-dnskey-via-cloudflare-a7258ca5/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)