# NetIntel DNS Lookup

> NetIntel DNS Lookup is a paid API for AI agents from netintel.dev, paid per call via x402, $0.002/call, status unknown (last checked 2026-09-14).

Performs a comprehensive DNS lookup for a domain, returning all record types plus email security (SPF/DKIM/DMARC) and propagation consistency across major resolvers

## Facts

- Endpoint: GET https://netintel.dev/dns/lookup
- Price: $0.002/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/netintel-dns-lookup-46e790cf
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_jtWqBCRD9Du85r6jq_18Z

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability netintel-dns-lookup-46e790cf
```

Example prompt: Can you do a full DNS lookup for github.com — I want to see all the records including A, MX, NS, TXT, and also check their SPF, DKIM, and DMARC configuration, and whether it's resolving consistently across Google, Cloudflare, and Quad9?

## When to prefer this

Use this endpoint when you need a comprehensive, one-call DNS audit for a domain — especially when email security (SPF/DKIM/DMARC) and multi-resolver propagation checks are needed in addition to basic record types. Prefer this over raw dig/nslookup when you want structured JSON output with security record parsing and propagation consistency in a single paid call.

## Known failure modes

- Invalid or malformed domain name returns an error
- Non-existent domain (NXDOMAIN) may return empty record sets
- Payment failure (402) if USDC balance is insufficient
- Timeout if the domain has slow or unresponsive nameservers
- Missing DKIM record if the domain has not published one

## How this service works

DNS lookup / nslookup / dig API — resolve the common DNS record types (A, AAAA, MX, TXT, NS, CNAME, SOA, PTR) for a domain. Parses SPF/DMARC from TXT plus DKIM at the default._domainkey selector, and cross-checks A records across Google/Cloudflare/Quad9 resolvers for propagation consistency.

## Output

A JSON object containing the domain's full DNS record set (A, AAAA, MX, NS, TXT, CNAME, PTR, SOA), parsed email security records (SPF mechanisms and qualifier, DKIM public key and algorithm, DMARC policy and reporting addresses), and propagation results from Google (8.8.8.8), Cloudflare (1.1.1.1), and Quad9 (9.9.9.9) with a consistency flag.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "domain"
     ],
     "properties": {
      "domain": {
       "type": "string",
       "description": "Domain name to query (e.g. example.com)"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object",
     "properties": {
      "domain": {
       "type": "string"
      },
      "records": {
       "type": "object"
      },
      "security": {
       "type": "object"
      },
      "propagation": {
       "type": "object"
      }
     }
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "domain": "example.com",
  "records": {
   "A": [
    "93.184.216.34"
   ],
   "MX": [
    {
     "exchange": "mail.example.com",
     "priority": 10
    }
   ],
   "NS": [
    "ns1.example.com",
    "ns2.example.com"
   ],
   "PTR": [],
   "SOA": {
    "mname": "ns1.example.com",
    "retry": 900,
    "rname": "admin.example.com",
    "expire": 604800,
    "serial": 2024010101,
    "minimum": 86400,
    "refresh": 3600
   },
   "TXT": [
    "v=spf1 include:_spf.google.com ~all"
   ],
   "AAAA": [
    "2606:2800:220:1:248:1893:25c8:1946"
   ],
   "CNAME": []
  },
  "security": {
   "spf": {
    "raw": "v=spf1 include:_spf.google.com ~all",
    "version": "spf1",
    "mechanisms": [
     "include:_spf.google.com"
    ],
    "all_qualifier": "~all"
   },
   "dkim": {
    "raw": "v=DKIM1; k=rsa; p=MIIBIjAN...",
    "version": "DKIM1",
    "key_type": "rsa",
    "public_key": "MIIBIjAN..."
   },
   "dmarc": {
    "pct": null,
    "raw": "v=DMARC1; p=reject; rua=mailto:dmarc@example.com",
    "rua": "mailto:dmarc@example.com",
    "ruf": null,
    "policy": "reject",
    "version": "DMARC1",
    "subdomain_policy": null
   }
  },
  "propagation": {
   "resolvers": [
    {
     "A": [
      "93.184.216.34"
     ],
     "ip": "8.8.8.8",
     "resolver": "Google"
    },
    {
     "A": [
      "93.184.216.34"
     ],
     "ip": "1.1.1.1",
     "resolver": "Cloudflare"
    },
    {
     "A": [
      "93.184.216.34"
     ],
     "ip": "9.9.9.9",
     "resolver": "Quad9"
    }
   ],
   "consistent": true
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/netintel-dns-lookup-46e790cf/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from netintel.dev](https://www.zero.xyz/host/netintel.dev/llms.txt)