# DNS Security Audit

> DNS Security Audit is a paid API for AI agents from defi-intel-agent-gateway.gg-neo15.workers.dev, paid per call via x402, $0.002/call, status unknown (last checked 2026-09-15).

Audits a domain's DNS security posture — SPF, DKIM, DMARC, DNSSEC, and TLS — returning a compact JSON report with a risk score

## Facts

- Endpoint: POST https://defi-intel-agent-gateway.gg-neo15.workers.dev/v1/net/dns-security-audit
- Price: $0.002/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dns-security-audit-a16ae0ce
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_eifV6wKLSpM-5p_a2GULS

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dns-security-audit-a16ae0ce -d '<json body>'
```

Example prompt: Can you run a full DNS security audit on acme-corp.com and tell me whether SPF, DKIM, DMARC, DNSSEC, and TLS are properly configured, along with the overall risk score?

## When to prefer this

Choose this endpoint when you need a single-call, all-in-one DNS security audit covering SPF, DKIM, DMARC, DNSSEC, and TLS with a unified risk score, especially in pay-per-call workflows where no API key or subscription is desired. Prefer this over manual DNS lookup tools when you need machine-readable JSON output suitable for agent pipelines or automated compliance checks.

## Known failure modes

- Domain does not exist or cannot be resolved — returns error with invalid domain message
- Domain has no DNS records for the queried types — returns null or missing fields for those checks
- TLS check fails if domain has no HTTPS endpoint
- Rate limiting on free daily sample tier — payment required after free quota exhausted
- Payment failure via x402 — call not executed if USDC payment on Base is rejected

## How this service works

Audit a domain's DNS security posture: SPF, DKIM, DMARC, DNSSEC and TLS in one compact JSON. Returns a risk score. DO NOT use for domains you do not own. — $0.002 USDC/call on eip155:8453. Pay-per-call via x402 — no API key, no account. Free samples daily.

## Output

A compact JSON object containing the status of each DNS security mechanism (SPF, DKIM, DMARC, DNSSEC, TLS), individual record details, configuration findings, and an overall numeric risk score indicating the domain's security posture.

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dns-security-audit-a16ae0ce/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from defi-intel-agent-gateway.gg-neo15.workers.dev](https://www.zero.xyz/host/defi-intel-agent-gateway.gg-neo15.workers.dev/llms.txt)