# dns-sshfp-via-adguard

> dns-sshfp-via-adguard is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-21).

Looks up SSHFP DNS records for a domain using AdGuard DNS over HTTPS, returning records, TTL, response code, DNSSEC validation status, and answer latency.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/sshfp/via/adguard?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dns-sshfp-via-adguard-7635e2fd
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap__In_r_7QJnViMAmV1Dw74

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dns-sshfp-via-adguard-7635e2fd
```

Example prompt: Can you look up the SSHFP records for example.com using AdGuard DNS and tell me the records, TTL, whether DNSSEC was validated, and how fast AdGuard responded?

## When to prefer this

Use this endpoint when you specifically need SSHFP records as seen by AdGuard DNS, particularly to compare resolver behavior, detect filtering, check DNSSEC validation, or diagnose propagation lag. Prefer this over generic DNS tools when AdGuard's perspective (e.g. privacy-focused, ad-blocking resolver) is relevant to your use case.

## Known failure modes

- Domain does not exist — returns NXDOMAIN response code
- No SSHFP records published for domain — empty answer with NOERROR
- SERVFAIL if AdGuard cannot reach authoritative nameservers
- AdGuard may filter or block certain domains, returning unexpected responses
- Network timeout if the DoH endpoint is unreachable
- Invalid or missing domain input parameter returns an error

## How this service works

SSHFP records for a domain as answered by AdGuard DNS (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resolvers to spot propagation lag, filtering or split-horizon answers. $0.01 per lookup.

## Output

Returns the SSHFP records (algorithm, fingerprint type, fingerprint), TTL, DNS response code (NOERROR, NXDOMAIN, or SERVFAIL), a boolean indicating whether the resolver validated DNSSEC, and the AdGuard resolver's answer time in milliseconds.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dns-sshfp-via-adguard-7635e2fd/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)