# dns-tlsa-via-cloudflare

> dns-tlsa-via-cloudflare is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-21).

Looks up TLSA DNS records for a domain using Cloudflare 1.1.1.1 DNS over HTTPS, returning records, TTL, response code, DNSSEC validation status, and resolver answer time.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/tlsa/via/cloudflare?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dns-tlsa-via-cloudflare-56a88d4b
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_FATR9-GBthagFwF17zezV

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dns-tlsa-via-cloudflare-56a88d4b
```

Example prompt: What TLSA records does Cloudflare 1.1.1.1 return for example.com — include the TTL, whether DNSSEC was validated, and how fast it answered?

## When to prefer this

Choose this endpoint when you specifically need to see how Cloudflare 1.1.1.1 resolves TLSA records for a domain, particularly for DANE certificate validation, DNSSEC verification workflows, or comparing Cloudflare's answer against other resolvers to detect propagation lag, filtering, or split-horizon DNS differences.

## Known failure modes

- Domain does not exist — returns NXDOMAIN response code
- No TLSA record published for domain — returns NOERROR with empty answer section
- Resolver fails to answer — returns SERVFAIL
- Invalid or malformed domain name input — likely returns an error or SERVFAIL
- Payment not processed — endpoint returns 402 before any DNS query is made

## How this service works

TLSA records for a domain as answered by Cloudflare 1.1.1.1 (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resolvers to spot propagation lag, filtering or split-horizon answers. $0.01 per lookup.

## Output

Returns the TLSA DNS records for the queried domain as answered by Cloudflare 1.1.1.1 via DNS over HTTPS, including the record data, TTL, DNS response code (NOERROR, NXDOMAIN, or SERVFAIL), whether DNSSEC validation was performed, and the resolver's answer latency.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dns-tlsa-via-cloudflare-56a88d4b/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)