# dns-sshfp-via-opendns

> dns-sshfp-via-opendns is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-21).

Retrieves SSHFP DNS records for a domain using OpenDNS over HTTPS, returning records, TTL, response code, DNSSEC validation status, and answer latency.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/sshfp/via/opendns?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dns-sshfp-via-opendns-e7ce2466
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_B2Cjcj61cI6lMiAQaJmGW

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dns-sshfp-via-opendns-e7ce2466
```

Example prompt: What SSHFP records does OpenDNS return for github.com — include whether DNSSEC was validated and how fast the resolver answered?

## When to prefer this

Choose this endpoint when you specifically need to see how OpenDNS resolves SSHFP records — particularly to compare resolver behavior, detect filtering or split-horizon DNS, check DNSSEC validation status from OpenDNS's perspective, or monitor propagation of SSHFP record changes to the OpenDNS resolver specifically. If you need SSHFP records from other resolvers (Cloudflare, Google, AdGuard, etc.), use the sibling endpoints for those resolvers.

## Known failure modes

- Domain does not exist — returns NXDOMAIN response code with empty records
- No SSHFP records published for domain — returns NOERROR with empty answer section
- OpenDNS resolver temporarily unavailable — may return SERVFAIL
- DNSSEC validation failure — resolver may return SERVFAIL with AD flag false
- Invalid or malformed domain name in query — request may be rejected
- Network timeout reaching OpenDNS — latency metric may be elevated or request may fail

## How this service works

SSHFP records for a domain as answered by OpenDNS (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resolvers to spot propagation lag, filtering or split-horizon answers. $0.01 per lookup.

## Output

Returns the SSHFP DNS records for the queried domain as answered by the OpenDNS resolver, including: the raw record data (algorithm, fingerprint type, fingerprint), TTL, DNS response code (NOERROR, NXDOMAIN, or SERVFAIL), a boolean indicating whether DNSSEC was validated, and the resolver's answer time in milliseconds.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dns-sshfp-via-opendns-e7ce2466/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)