# dns-sshfp-via-mullvad

> dns-sshfp-via-mullvad is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-21).

Looks up SSHFP DNS records for a domain using Mullvad's DNS over HTTPS resolver, returning records, TTL, response code, DNSSEC validation status, and answer time.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/sshfp/via/mullvad?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dns-sshfp-via-mullvad-6da53de1
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_umfsFvRyIw2M7S3cscxjU

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dns-sshfp-via-mullvad-6da53de1
```

Example prompt: What SSHFP records does Mullvad DNS return for example.com, and does it validate DNSSEC for them?

## When to prefer this

Choose this endpoint when you specifically want to see how Mullvad's privacy-focused DoH resolver answers SSHFP queries, particularly for comparing against other resolvers to detect propagation lag, split-horizon DNS, or resolver-level filtering. Prefer it over generic SSHFP lookups when Mullvad's perspective or DNSSEC validation status matters.

## Known failure modes

- Domain does not exist — NXDOMAIN response code returned
- Mullvad resolver fails to answer — SERVFAIL response code returned
- DNSSEC validation failure — indicated by validation flag being false
- No SSHFP records published for domain — empty record set with NOERROR
- Network timeout reaching Mullvad DoH endpoint — request error returned

## How this service works

SSHFP records for a domain as answered by Mullvad DNS (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resolvers to spot propagation lag, filtering or split-horizon answers. $0.01 per lookup.

## Output

Returns the SSHFP DNS records for the queried domain as seen by Mullvad's DoH resolver, including the record data, TTL, DNS response code (NOERROR, NXDOMAIN, or SERVFAIL), whether DNSSEC was validated, and the resolver's measured answer time.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dns-sshfp-via-mullvad-6da53de1/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)