# dns-dnskey-via-dnspod

> dns-dnskey-via-dnspod is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-21).

Retrieves DNSKEY records for a domain via DNSPod (doh.pub) DNS over HTTPS, returning records, TTL, response code, DNSSEC validation status, and resolver answer time.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/dnskey/via/dnspod?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dns-dnskey-via-dnspod-9b76d15e
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_px_PP6mIa83Z2FWffXMTE

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dns-dnskey-via-dnspod-9b76d15e
```

Example prompt: What DNSKEY records does DNSPod (doh.pub) return for example.com, and does DNSPod validate DNSSEC for it?

## When to prefer this

Use this endpoint when you specifically need to see what DNSKEY records the DNSPod (doh.pub) resolver returns, particularly for comparing resolver-specific views of DNSSEC keys, detecting propagation lag at DNSPod, or auditing whether DNSPod performs DNSSEC validation. Prefer this over generic DNS tools when DNSPod coverage or Chinese resolver perspective is relevant.

## Known failure modes

- NXDOMAIN returned if the domain does not exist or has no DNSKEY records
- SERVFAIL if DNSPod cannot resolve the domain or encounters an upstream error
- Empty record set if the domain is not DNSSEC-signed
- Network timeout if DNSPod is unreachable
- Invalid domain input may result in an error or empty response

## How this service works

DNSKEY records for a domain as answered by DNSPod (doh.pub) (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resolvers to spot propagation lag, filtering or split-horizon answers. $0.01 per lookup.

## Output

Returns the DNSKEY resource records (key tag, algorithm, flags, public key), TTL, DNS response code (NOERROR, NXDOMAIN, or SERVFAIL), a boolean indicating whether DNSPod validated DNSSEC for the response, and the resolver's answer time in milliseconds.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dns-dnskey-via-dnspod-9b76d15e/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)