# dns-ds-via-mullvad

> dns-ds-via-mullvad is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-21).

Retrieves DS (Delegation Signer) DNS records for a domain as answered by Mullvad's DNS over HTTPS resolver, including DNSSEC validation status and response timing.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/ds/via/mullvad?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dns-ds-via-mullvad-3e78d36d
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_HjFckZuO82zzPm3ZH96XW

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dns-ds-via-mullvad-3e78d36d
```

Example prompt: Look up the DS records for example.com using Mullvad's DNS over HTTPS resolver and tell me whether DNSSEC is validated, what the TTL is, and how long the resolver took to answer.

## When to prefer this

Use this endpoint when you specifically need DS records as seen by the Mullvad DNS over HTTPS resolver — ideal for comparing DNSSEC delegation signer records across resolvers, auditing DNSSEC chain-of-trust integrity, detecting propagation lag after DS record updates, or identifying split-horizon/filtering behavior unique to Mullvad's resolver. Choose this over generic DNS lookups when resolver identity and DNSSEC validation status matter.

## Known failure modes

- Domain does not exist — returns NXDOMAIN response code with empty records
- Mullvad resolver is temporarily unreachable — may return SERVFAIL or timeout
- Domain has no DS records — returns NOERROR with empty answer section
- Malformed domain name input — may result in resolver error or no response
- DNSSEC validation failure at resolver — SERVFAIL with DO bit set

## How this service works

DS records for a domain as answered by Mullvad DNS (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resolvers to spot propagation lag, filtering or split-horizon answers. $0.01 per lookup.

## Output

Returns the DS records for the queried domain as resolved by Mullvad DNS over HTTPS, including the record values, TTL, DNS response code (NOERROR, NXDOMAIN, or SERVFAIL), a flag indicating whether the resolver performed DNSSEC validation, and the resolver's answer latency in milliseconds.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dns-ds-via-mullvad-3e78d36d/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)