# dns-ns-via-cleanbrowsing

> dns-ns-via-cleanbrowsing is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-21).

Looks up NS (nameserver) records for a domain using CleanBrowsing's security-filtering DNS over HTTPS resolver and returns the records, TTL, response code, DNSSEC validation status, and answer latency.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/ns/via/cleanbrowsing?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dns-ns-via-cleanbrowsing-96de0a39
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_sqVPelaHYF6fHS3p_LD6K

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dns-ns-via-cleanbrowsing-96de0a39
```

Example prompt: What nameserver records does CleanBrowsing return for example.com — include the TTL, response code, whether DNSSEC was validated, and how fast it responded?

## When to prefer this

Choose this endpoint when you specifically need NS records as seen by CleanBrowsing's security-filtering resolver, particularly to detect DNS filtering, compare resolver behavior for split-horizon or propagation analysis, or audit DNSSEC validation on nameserver records. Prefer it over generic DNS tools when the security-filtering perspective of CleanBrowsing is relevant to your use case.

## Known failure modes

- Domain does not exist — returns NXDOMAIN response code with no records
- CleanBrowsing filters or blocks the domain — may return NXDOMAIN or altered response rather than true NS records
- SERVFAIL if the authoritative nameserver is unreachable or misconfigured
- Missing domain parameter — request likely returns a 400 or error response
- Network timeout — resolver answer time may be unavailable or elevated

## How this service works

NS records for a domain as answered by CleanBrowsing (security filter) (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resolvers to spot propagation lag, filtering or split-horizon answers. $0.01 per lookup.

## Output

Returns the NS records (nameserver hostnames) for the queried domain as answered by CleanBrowsing's DoH resolver, along with the TTL of those records, the DNS response code (NOERROR, NXDOMAIN, or SERVFAIL), a boolean indicating whether DNSSEC validation was performed, and the resolver's answer time in milliseconds.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dns-ns-via-cleanbrowsing-96de0a39/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)