# dns-ds-via-cloudflare

> dns-ds-via-cloudflare is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-21).

Looks up DS (Delegation Signer) records for a domain via Cloudflare 1.1.1.1 DNS over HTTPS, returning the records, TTL, response code, DNSSEC validation status, and resolver answer time.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/ds/via/cloudflare?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dns-ds-via-cloudflare-fee2466a
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_lgu83p3uj7jWeqPovk623

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dns-ds-via-cloudflare-fee2466a
```

Example prompt: What DS records does Cloudflare 1.1.1.1 return for example.com, and did the resolver validate DNSSEC?

## When to prefer this

Choose this endpoint when you specifically need DS record data as seen by Cloudflare 1.1.1.1, for DNSSEC chain-of-trust validation, propagation monitoring after registrar changes, or when comparing Cloudflare's resolver view against other resolvers like Google or NextDNS. It is the right choice when DNSSEC status and resolver-specific latency matter, not just raw DNS answers.

## Known failure modes

- Domain does not exist — returns NXDOMAIN response code with no DS records
- Resolver fails to answer — returns SERVFAIL response code
- Domain has no DS records published — returns NOERROR with empty answer section
- Network or upstream Cloudflare DoH unavailability causing timeout or error
- Invalid or malformed domain name input causing request failure

## How this service works

DS records for a domain as answered by Cloudflare 1.1.1.1 (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resolvers to spot propagation lag, filtering or split-horizon answers. $0.01 per lookup.

## Output

Returns the DS records for the queried domain as seen by Cloudflare 1.1.1.1 via DNS over HTTPS, including the full record data, TTL, response code (NOERROR, NXDOMAIN, or SERVFAIL), whether Cloudflare validated DNSSEC for the response, and the resolver's answer latency.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dns-ds-via-cloudflare-fee2466a/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)