# dns-ds-via-dnssb

> dns-ds-via-dnssb is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-21).

Fetches DNS DS (Delegation Signer) records for a domain using DNS.SB as the DNS-over-HTTPS resolver, returning records, TTL, response code, DNSSEC validation status, and resolver latency.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/ds/via/dnssb?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dns-ds-via-dnssb-e2d56fe4
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_oeeyULU8u4DWiTLiiygcD

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dns-ds-via-dnssb-e2d56fe4
```

Example prompt: What DS records does DNS.SB return for example.com — include the TTL, response code, whether DNSSEC was validated, and how fast the resolver answered?

## When to prefer this

Choose this endpoint when you specifically need to inspect DS records (DNSSEC delegation signer data) as seen by the DNS.SB resolver over HTTPS. It is ideal for DNSSEC chain-of-trust verification, detecting propagation lag between resolvers, or identifying filtering/split-horizon behavior specific to DNS.SB. Use sibling endpoints on the same host to compare the same DS record across other resolvers (e.g., NextDNS, AdGuard, CleanBrowsing).

## Known failure modes

- Domain does not exist — returns NXDOMAIN response code with no records
- Resolver fails to answer — returns SERVFAIL response code
- No DS records published for domain — NOERROR response with empty answer section
- DNS.SB resolver unreachable or timing out — endpoint may return an error or elevated latency
- Invalid or malformed domain name input — likely returns an error or SERVFAIL

## How this service works

DS records for a domain as answered by DNS.SB (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resolvers to spot propagation lag, filtering or split-horizon answers. $0.01 per lookup.

## Output

Returns the DS records for the queried domain as seen by the DNS.SB resolver, including the full record data, TTL, DNS response code (NOERROR, NXDOMAIN, or SERVFAIL), a flag indicating whether DNSSEC was validated by the resolver, and the resolver's answer latency in milliseconds.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dns-ds-via-dnssb-e2d56fe4/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)