# dns-ds-via-dnspod

> dns-ds-via-dnspod is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-22).

Retrieves DS (Delegation Signer) DNS records for a domain using DNSPod (doh.pub) via DNS over HTTPS, including TTL, response code, DNSSEC validation status, and resolver latency.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/ds/via/dnspod?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-22
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dns-ds-via-dnspod-621299a5
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_ua4TVZQPKel1Eroopo4Ej

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dns-ds-via-dnspod-621299a5
```

Example prompt: What DS records does DNSPod return for example.com — including the TTL, response code, whether DNSSEC was validated, and how fast the resolver answered?

## When to prefer this

Use this endpoint when you specifically need DS records as seen by the DNSPod (doh.pub) resolver, particularly when comparing DNSSEC delegation signer records across multiple resolvers to detect propagation lag, resolver-specific filtering, or split-horizon DNS configurations. It is ideal for DNSSEC auditing workflows where per-resolver visibility and latency data are required.

## Known failure modes

- Domain not found — NXDOMAIN response code returned when domain does not exist
- Resolver error — SERVFAIL returned if DNSPod cannot resolve the query
- No DS records present — NOERROR returned but empty answer section if domain has no DS records
- Network timeout — resolver answer time field may indicate slow or failed upstream response
- Invalid domain input — malformed domain name may produce an error response

## How this service works

DS records for a domain as answered by DNSPod (doh.pub) (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resolvers to spot propagation lag, filtering or split-horizon answers. $0.01 per lookup.

## Output

Returns the DS records for the queried domain as seen by DNSPod (doh.pub), including: the record data (key tag, algorithm, digest type, digest), TTL, DNS response code (NOERROR, NXDOMAIN, or SERVFAIL), a flag indicating whether DNSSEC was validated by the resolver, and the resolver's answer time in milliseconds.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dns-ds-via-dnspod-621299a5/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)