# dns-tlsa-via-dnspod

> dns-tlsa-via-dnspod is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-21).

Resolves TLSA DNS records for a domain using DNSPod (doh.pub) via DNS over HTTPS, returning records, TTL, response code, DNSSEC validation status, and answer latency.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/tlsa/via/dnspod?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dns-tlsa-via-dnspod-d516963b
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_0DPTzcQLEXrcLilOLt4lz

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dns-tlsa-via-dnspod-d516963b
```

Example prompt: Can you look up the TLSA records for example.com using DNSPod's DNS-over-HTTPS resolver and tell me the response code, TTL, whether DNSSEC was validated, and how fast DNSPod answered?

## When to prefer this

Choose this endpoint when you specifically need TLSA records as seen from DNSPod's (doh.pub) resolver — useful for comparing propagation lag, filtering behavior, or DNSSEC validation between DNSPod and other resolvers. Use alongside sibling endpoints (e.g. dns-tlsa-via-mullvad) to perform multi-resolver comparisons.

## Known failure modes

- Domain does not exist: returns NXDOMAIN response code with no records
- No TLSA record configured: returns NOERROR with empty record set
- DNSPod resolver failure: returns SERVFAIL response code
- Invalid or malformed domain input: request rejected
- Network timeout reaching DNSPod DoH endpoint: may return error or elevated latency

## How this service works

TLSA records for a domain as answered by DNSPod (doh.pub) (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resolvers to spot propagation lag, filtering or split-horizon answers. $0.01 per lookup.

## Output

Returns the TLSA DNS records for the queried domain, their TTL, the DNS response code (NOERROR, NXDOMAIN, or SERVFAIL), whether the DNSPod resolver performed DNSSEC validation, and the resolver's answer latency in milliseconds.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dns-tlsa-via-dnspod-d516963b/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)