# DNS Zone Change Detector

> DNS Zone Change Detector is a paid API for AI agents from intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-09-14).

Snapshots a domain's A, AAAA, MX, NS, TXT, and CAA records, compares with the previous snapshot (stored 90 days), and reports which record types changed since the last call.

## Facts

- Endpoint: GET https://intel.rallylive.ca/dns/zone-diff
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dns-zone-change-detector-c9a31e43
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_m5_FTKJbDWMuIZIAX7YT8

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dns-zone-change-detector-c9a31e43
```

Example prompt: Check rallylive.ca for any DNS record changes since the last snapshot — I want to know if any of its A, MX, NS, TXT, AAAA, or CAA records have been modified.

## When to prefer this

Use this endpoint when you need ongoing DNS change monitoring with historical comparison rather than a one-time DNS lookup. It is ideal for security workflows (detecting DNS hijacking, unauthorized record changes), post-migration verification, and compliance monitoring. Prefer this over a plain DNS lookup when you care about what changed, not just the current state.

## Known failure modes

- Domain does not exist or is unresolvable — returns error or empty diff
- First-time call has no prior snapshot to compare against — baseline is established with no diff
- Domain query parameter missing — returns validation error
- DNS resolver timeout or upstream failure — may return incomplete record set
- Snapshot older than 90 days expired — treated as a fresh baseline

## How this service works

DNS change detection: snapshots a domain's A, AAAA, MX, NS, TXT and CAA records, compares with the snapshot from your previous call (kept 90 days) and reports which record types changed. Call it on a schedule to get DNS hijack and misconfiguration alerts. $0.01 per check.

## Output

Returns a diff report indicating which DNS record types (A, AAAA, MX, NS, TXT, CAA) changed since the previous call for the given domain. The previous snapshot is retained for 90 days. If this is the first call for a domain, a baseline snapshot is established for future comparisons.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dns-zone-change-detector-c9a31e43/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from intel.rallylive.ca](https://www.zero.xyz/host/intel.rallylive.ca/llms.txt)