# KPASSWD TCP SRV Record Lookup

> KPASSWD TCP SRV Record Lookup is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-22).

Discovers the kpasswd service endpoint for a domain via _kpasswd._tcp SRV DNS records using Cloudflare DoH

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/srv/kpasswd-tcp?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-22
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/kpasswd-tcp-srv-record-lookup-9fc87162
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_9TMc7UA_aCaQ6Yu3Cf4Aj

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability kpasswd-tcp-srv-record-lookup-9fc87162
```

Example prompt: Can you find the kpasswd service location for example.com — I need the hostname, port, priority, and weight from its _kpasswd._tcp SRV records?

## When to prefer this

Use this endpoint when you need to programmatically discover where a domain's Kerberos password change (kpasswd) service is hosted, without manually guessing hostnames. Ideal for Kerberos infrastructure automation, AD environment discovery, pre-migration validation, or diagnosing kpasswd connectivity issues. Prefer this over a generic DNS resolver when you specifically need structured SRV output for the kpasswd TCP service with reliable DoH resolution via Cloudflare.

## Known failure modes

- Domain has no _kpasswd._tcp SRV records (NXDOMAIN or empty answer)
- Domain does not exist or is mistyped
- Cloudflare DoH upstream unavailable or rate-limited
- Malformed domain input causing query failure
- SERVFAIL from authoritative DNS server

## How this service works

KPASSWD service discovery (_kpasswd._tcp.<domain>): SRV records with priority, weight, port and target host, from Cloudflare DoH. Tells a client where the domain's kpasswd service lives without guessing hosts. $0.01 per lookup.

## Output

Returns SRV record data for the _kpasswd._tcp service under the queried domain, including one or more records each containing the priority, weight, port number, and target hostname of the kpasswd server. Sourced via Cloudflare DNS over HTTPS.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/kpasswd-tcp-srv-record-lookup-9fc87162/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)