# dns-sshfp-via-nextdns

> dns-sshfp-via-nextdns is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-21).

Looks up SSHFP DNS records for a domain using NextDNS (DNS-over-HTTPS) and returns the records, TTL, response code, DNSSEC validation status, and resolver answer time.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/sshfp/via/nextdns?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dns-sshfp-via-nextdns-029a6d7c
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_qq-XrCDeDnFxf98uGaxe3

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dns-sshfp-via-nextdns-029a6d7c
```

Example prompt: What SSHFP records does NextDNS return for example.com? I want to see the TTL, response code, whether DNSSEC was validated, and how fast the resolver answered.

## When to prefer this

Use this endpoint when you specifically need SSHFP records as resolved by NextDNS, such as when comparing resolver behavior across providers, auditing DNSSEC validation for SSH fingerprint records, or debugging propagation issues specific to the NextDNS resolver. Prefer this over generic DNS tools when you need resolver-specific metadata (DNSSEC status, answer time) or want to detect NextDNS filtering or split-horizon behavior.

## Known failure modes

- Domain does not exist — returns NXDOMAIN response code with empty records
- No SSHFP records published for domain — returns NOERROR with empty answer section
- Resolver error — returns SERVFAIL response code
- Network timeout to NextDNS DoH endpoint — request may fail or time out
- DNSSEC validation failure — DNSSEC flag will be false with possible SERVFAIL

## How this service works

SSHFP records for a domain as answered by NextDNS (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resolvers to spot propagation lag, filtering or split-horizon answers. $0.01 per lookup.

## Output

Returns the SSHFP DNS records for the queried domain as answered by NextDNS via DNS-over-HTTPS, including the record data (algorithm, fingerprint type, fingerprint), TTL, DNS response code (NOERROR, NXDOMAIN, or SERVFAIL), a boolean indicating whether DNSSEC was validated, and the resolver's answer latency.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dns-sshfp-via-nextdns-029a6d7c/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)