# DNS DS Record Lookup via NextDNS (DoH)

> DNS DS Record Lookup via NextDNS (DoH) is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-21).

Retrieves DS (Delegation Signer) DNS records for a domain as answered by NextDNS via DNS over HTTPS, including TTL, response code, DNSSEC validation status, and resolver answer time.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/ds/via/nextdns?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dns-ds-record-lookup-via-nextdns-doh-a95f4e79
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_oMXFQw7Lvc19IWd66AoL3

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dns-ds-record-lookup-via-nextdns-doh-a95f4e79
```

Example prompt: Can you look up the DS records for example.com using the NextDNS resolver and tell me the records, TTL, response code, whether DNSSEC was validated, and how fast NextDNS answered?

## When to prefer this

Use this endpoint when you specifically need to query DS records via the NextDNS resolver for DNSSEC chain-of-trust verification, propagation lag comparison, or to detect resolver-specific filtering. Prefer this over generic DS lookups when you need NextDNS's perspective specifically, or when comparing multiple resolvers side by side.

## Known failure modes

- NXDOMAIN if the domain does not exist
- SERVFAIL if NextDNS encounters an error resolving the domain
- Empty DS record set if the domain has no DS records published
- Network timeout if NextDNS is temporarily unreachable
- Invalid domain input returning an error response

## How this service works

DS records for a domain as answered by NextDNS (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resolvers to spot propagation lag, filtering or split-horizon answers. $0.01 per lookup.

## Output

Returns the DS records for the queried domain as seen by NextDNS, including the record values, TTL, DNS response code (NOERROR, NXDOMAIN, or SERVFAIL), whether DNSSEC was validated by the resolver, and the resolver's answer time in milliseconds.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dns-ds-record-lookup-via-nextdns-doh-a95f4e79/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)