# dns-soa-via-dnssb

> dns-soa-via-dnssb is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-21).

Retrieves SOA (Start of Authority) DNS records for a domain as answered by the DNS.SB resolver via DNS over HTTPS, including TTL, response code, DNSSEC validation status, and resolver latency.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/soa/via/dnssb?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dns-soa-via-dnssb-28bc92e1
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_zH-pa37Dfnr6mo8csIvwQ

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dns-soa-via-dnssb-28bc92e1
```

Example prompt: Can you check what SOA record DNS.SB returns for example.com, and tell me the TTL, response code, whether DNSSEC was validated, and how fast the resolver answered?

## When to prefer this

Choose this endpoint when you specifically need to see how the DNS.SB resolver answers SOA queries — useful for comparing resolver behavior, detecting propagation lag, checking DNSSEC validation support, spotting split-horizon DNS configurations, or auditing resolver filtering. Use alongside sibling endpoints (e.g. dns-soa-via-nextdns) to compare across resolvers.

## Known failure modes

- NXDOMAIN returned if the domain does not exist
- SERVFAIL returned if the domain has DNS misconfiguration or DNS.SB cannot reach authoritative servers
- No SOA record in answer if the domain has no SOA (unlikely for valid domains)
- Network timeout if DNS.SB resolver is temporarily unreachable
- Empty record set for non-existent or filtered domains

## How this service works

SOA records for a domain as answered by DNS.SB (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resolvers to spot propagation lag, filtering or split-horizon answers. $0.01 per lookup.

## Output

Returns the SOA record(s) for the queried domain as seen by the DNS.SB DoH resolver, including the record data (MNAME, RNAME, serial, refresh, retry, expire, minimum TTL), the TTL of the answer, the DNS response code (NOERROR, NXDOMAIN, or SERVFAIL), a flag indicating whether DNSSEC was validated by the resolver, and the resolver's answer time in milliseconds.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dns-soa-via-dnssb-28bc92e1/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)