# DNSSEC Check Change Watch

> DNSSEC Check Change Watch is a paid API for AI agents from intel.rallylive.ca, paid per call via x402, $0.02/call, status unknown (last checked 2026-09-14).

Runs a DNSSEC check on a domain, compares results with the previous call (stored 90 days), and returns whether anything changed along with field-level before/after diffs.

## Facts

- Endpoint: GET https://intel.rallylive.ca/watch/dns/dnssec
- Price: $0.02/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dnssec-check-change-watch-16e07a96
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_v7DLZChMV56E82PkX5l5K

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dnssec-check-change-watch-16e07a96
```

Example prompt: Keep an eye on the DNSSEC configuration for example.com and let me know as soon as anything changes — tell me exactly which fields changed and what they looked like before and after.

## When to prefer this

Choose this endpoint when you need to detect changes in DNSSEC configuration over time rather than just seeing the current state. It is ideal for scheduled monitoring agents, security audits, and post-change verification workflows where knowing what specifically changed (field-level diffs) is more valuable than a raw lookup. Prefer it over a one-shot DNSSEC check when you want persistent diff tracking across calls without managing state yourself.

## Known failure modes

- Domain not found or invalid domain name supplied
- No previous result stored (first call returns current result with changed=false or null diff)
- Previous result expired after 90 days (treated as first-time check)
- Payment not completed (x402 payment required, $0.02 USDC per call)
- DNS resolution failure for the target domain
- Upstream DNSSEC check service unavailable

## How this service works

Change watch for dnssec check: runs the check and compares it with the result from your previous call for the same domain (kept 90 days), returning the current answer, changed true/false, exactly which fields changed with before/after values, and when it was last seen. Call it on a schedule to be told when dnssec check for a domain changes. $0.01 per check.

## Output

Returns the current DNSSEC check result for the domain, a boolean 'changed' flag indicating whether anything differs from the previous call, a field-level diff showing exactly which fields changed with their before and after values, and a timestamp of when the previous result was last seen. Previous results are retained for 90 days.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dnssec-check-change-watch-16e07a96/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from intel.rallylive.ca](https://www.zero.xyz/host/intel.rallylive.ca/llms.txt)