# DNS SOA Record Lookup via NextDNS (DoH)

> DNS SOA Record Lookup via NextDNS (DoH) is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-21).

Retrieves SOA (Start of Authority) DNS records for a domain using NextDNS as the DNS-over-HTTPS resolver, returning records, TTL, response code, DNSSEC validation status, and answer time.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/soa/via/nextdns?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dns-soa-record-lookup-via-nextdns-doh-b2e1a30f
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_1jQablRYtF9zXeUTIEp9x

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dns-soa-record-lookup-via-nextdns-doh-b2e1a30f
```

Example prompt: What SOA record does NextDNS return for example.com — give me the record details, TTL, response code, whether DNSSEC was validated, and how fast NextDNS answered?

## When to prefer this

Choose this endpoint when you specifically want to see how NextDNS resolves SOA records — particularly useful for comparing resolver behavior, detecting propagation lag, spotting split-horizon DNS, or auditing whether NextDNS's filtering affects zone authority responses. Use sibling endpoints for other record types or other resolvers.

## Known failure modes

- NXDOMAIN if the domain does not exist or has no SOA record
- SERVFAIL if NextDNS cannot resolve the domain
- Empty records array if the domain has no SOA entry
- Missing domain parameter returns an error
- NextDNS filtering may suppress or alter responses for certain domains

## How this service works

SOA records for a domain as answered by NextDNS (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resolvers to spot propagation lag, filtering or split-horizon answers. $0.01 per lookup.

## Output

Returns the SOA record fields (primary nameserver, responsible mailbox, serial, refresh, retry, expire, minimum TTL), the DNS TTL, the response code (NOERROR, NXDOMAIN, or SERVFAIL), whether NextDNS validated DNSSEC for the response, and the resolver's answer time in milliseconds.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dns-soa-record-lookup-via-nextdns-doh-b2e1a30f/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)