# dns-dnskey-via-mullvad

> dns-dnskey-via-mullvad is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-21).

Retrieves DNSKEY records for a domain via Mullvad DNS over HTTPS, returning records, TTL, response code, DNSSEC validation status, and resolver answer time.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/dnskey/via/mullvad?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dns-dnskey-via-mullvad-badb0d28
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_GinSi5zxqUsMJ0hoc3_IO

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dns-dnskey-via-mullvad-badb0d28
```

Example prompt: Look up the DNSKEY records for example.com using Mullvad DNS over HTTPS and tell me the records, TTL, whether DNSSEC was validated, and how fast the resolver responded.

## When to prefer this

Choose this endpoint when you specifically need DNSKEY records as seen through the Mullvad DNS resolver, especially when comparing resolver behavior across providers, checking DNSSEC validation status from a privacy-focused resolver, or detecting propagation lag and split-horizon DNS differences. Prefer this over generic DNS tools when Mullvad's resolver perspective is important for your security or infrastructure analysis.

## Known failure modes

- Domain does not exist — returns NXDOMAIN response code with empty records
- Mullvad resolver is temporarily unavailable — may return SERVFAIL
- Domain has no DNSKEY records published — returns NOERROR with empty answer section
- Network timeout reaching the Mullvad DoH endpoint — request may fail or return an error
- Malformed domain input — request may be rejected or return an error response

## How this service works

DNSKEY records for a domain as answered by Mullvad DNS (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resolvers to spot propagation lag, filtering or split-horizon answers. $0.01 per lookup.

## Output

Returns the DNSKEY records for the queried domain as resolved by Mullvad DNS over HTTPS, including the record data, TTL, DNS response code (NOERROR, NXDOMAIN, or SERVFAIL), whether the resolver performed DNSSEC validation, and the resolver's answer latency in milliseconds.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dns-dnskey-via-mullvad-badb0d28/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)