# dns-sshfp-via-cleanbrowsing

> dns-sshfp-via-cleanbrowsing is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-21).

Fetches SSHFP DNS records for a domain as answered by the CleanBrowsing security-filtering resolver via DNS over HTTPS, returning records, TTL, response code, DNSSEC validation status, and answer latency.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/sshfp/via/cleanbrowsing?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dns-sshfp-via-cleanbrowsing-80405d33
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_0L12p7Hg8OhGHLIyyk8pq

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dns-sshfp-via-cleanbrowsing-80405d33
```

Example prompt: Check what SSHFP records the CleanBrowsing security resolver returns for github.com — include the TTL, response code, whether DNSSEC was validated, and how fast it answered.

## When to prefer this

Choose this endpoint when you specifically need to see how the CleanBrowsing security-filtering resolver answers SSHFP queries — useful for comparing against other resolvers to detect filtering, split-horizon DNS, or propagation lag. Prefer it over generic DNS tools when DNSSEC validation status and resolver-specific answer latency are important, or when you suspect a security filter is suppressing SSH fingerprint records.

## Known failure modes

- Domain not found returns NXDOMAIN response code with empty records
- SERVFAIL if CleanBrowsing cannot resolve the domain or encounters an upstream error
- No SSHFP records published returns NOERROR with empty record set
- CleanBrowsing security filter may suppress or alter records for flagged domains
- Network timeout if the resolver is unreachable, resulting in an error response
- Invalid or missing domain parameter may return a 400 Bad Request

## How this service works

SSHFP records for a domain as answered by CleanBrowsing (security filter) (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resolvers to spot propagation lag, filtering or split-horizon answers. $0.01 per lookup.

## Output

Returns the SSHFP DNS records (algorithm, fingerprint type, fingerprint data) for the queried domain as answered by CleanBrowsing, along with the record TTL, DNS response code (NOERROR, NXDOMAIN, or SERVFAIL), a flag indicating whether the resolver performed DNSSEC validation, and the resolver's answer latency in milliseconds.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dns-sshfp-via-cleanbrowsing-80405d33/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)