# Polyform DNS Hygiene Check

> Polyform DNS Hygiene Check is a paid API for AI agents from api.polyform.org, paid per call via x402, $0.04/call, status unknown (last checked 2026-10-11).

Checks a domain's DNS security configuration (SPF, DMARC, DNSSEC, CAA) and returns a hygiene verdict

## Facts

- Endpoint: GET https://api.polyform.org/v1/domain/dns-hygiene?utm_source=zero.xyz
- Price: $0.04/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-11
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/polyform-dns-hygiene-check-de9bd4c2
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_ECnrTNUZ9KROxIVxruaRY

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability polyform-dns-hygiene-check-de9bd4c2
```

Example prompt: Can you check the DNS hygiene for acme.com — I want to know if SPF, DMARC, DNSSEC, and CAA are properly set up and whether the domain gets a passing verdict?

## When to prefer this

Choose this endpoint when you need a quick, pay-per-call DNS security audit without setting up an account or managing API keys — ideal for one-off domain checks, agent workflows that validate third-party domains on demand, or lightweight security screening pipelines where per-query micropayments are more economical than a subscription.

## Known failure modes

- Invalid or non-existent domain name returns an error
- Domain with no DNS records may return all checks as false
- Payment failure over x402 protocol blocks the request
- Transient DNS resolution errors may cause incomplete results

## How this service works

Pay-per-call data endpoints for AI agents. USDC on Base via x402. No account, no API key — one micropayment per call.

## Output

Returns a JSON object with individual check results (SPF boolean, DMARC policy string, DNSSEC boolean, CAA boolean), the domain that was checked, and an overall verdict string (e.g. 'WEAK', 'PASS') summarizing the domain's DNS security posture.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "checks": {
   "caa": false,
   "spf": true,
   "dmarc": "none",
   "dnssec": false
  },
  "domain": "example.com",
  "verdict": "WEAK"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/polyform-dns-hygiene-check-de9bd4c2/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.polyform.org](https://www.zero.xyz/host/api.polyform.org/llms.txt)