# dns-ds-via-alidns

> dns-ds-via-alidns is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-21).

Retrieves DS (Delegation Signer) DNS records for a domain as answered by AliDNS (223.5.5.5) via DNS over HTTPS, including TTL, response code, DNSSEC validation status, and answer time.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/ds/via/alidns?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dns-ds-via-alidns-45b141b1
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_KYdv5cjp7O7cpsOndBFS_

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dns-ds-via-alidns-45b141b1
```

Example prompt: What DS records does AliDNS return for example.com? I want to see the TTL, response code, whether DNSSEC was validated, and how fast it answered.

## When to prefer this

Use this endpoint when you specifically need to see DS records as answered by AliDNS (223.5.5.5), particularly for comparing resolver behavior, detecting propagation lag, verifying DNSSEC delegation, or spotting filtering/split-horizon differences on the AliDNS resolver specifically. Prefer this over generic DNS tools when AliDNS coverage (common in China and Asia-Pacific) is relevant to your analysis.

## Known failure modes

- NXDOMAIN response if the domain does not exist or has no DS records
- SERVFAIL if AliDNS encounters an upstream error or DNSSEC validation failure
- Network timeout if AliDNS is unreachable
- Empty record set if the domain exists but has no DS records configured
- Invalid domain name input causing a malformed query

## How this service works

DS records for a domain as answered by AliDNS 223.5.5.5 (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resolvers to spot propagation lag, filtering or split-horizon answers. $0.01 per lookup.

## Output

Returns the DS records (if any) for the queried domain as answered by AliDNS 223.5.5.5, along with the TTL, DNS response code (NOERROR, NXDOMAIN, or SERVFAIL), a flag indicating whether the resolver validated DNSSEC, and the resolver's answer latency.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dns-ds-via-alidns-45b141b1/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)
