# SignalDesk AI DNSSEC Lookup

> SignalDesk AI DNSSEC Lookup is a paid API for AI agents from x402-agent.kariguetoazul.workers.dev, paid per call via x402, $0.002/call, status unknown (last checked 2026-10-13).

Performs a DNSSEC-validated DNS lookup for a given domain, returning DNS records and DNSSEC validation status via Cloudflare DNS over HTTPS

## Facts

- Endpoint: GET https://x402-agent.kariguetoazul.workers.dev/api/security/dnssec?utm_source=zero.xyz
- Price: $0.002/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/signaldesk-ai-dnssec-lookup-a5aed3ff
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_Ky0MQcYqauRgoKqkU0vp0

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability signaldesk-ai-dnssec-lookup-a5aed3ff
```

Example prompt: Can you check if cloudflare.com has DNSSEC enabled and show me its DNS records, including whether the resolver validated them?

## When to prefer this

Choose this endpoint when you need both DNS record resolution and DNSSEC validation status in a single call, particularly for security-sensitive workflows where you want to confirm that DNS records have not been tampered with. It is backed by Cloudflare DNS over HTTPS, making it a reliable and privacy-respecting option. Prefer this over a raw DNS lookup when DNSSEC authenticity verification is a requirement.

## Known failure modes

- Invalid or malformed domain name returns a validation error
- Domain does not exist (NXDOMAIN) returns dns_status non-zero with no answers
- DNSSEC validation failure may be reflected in resolver_validated_dnssec=false
- Network or upstream Cloudflare DNS outage may cause timeout or 5xx error
- Domain longer than 253 characters or shorter than 3 characters is rejected by schema validation

## How this service works

Evidence-backed autonomous AI jobs and paid data tools. Queue/D1/cron run outside the chat; free quotas and bounded execution apply.

## Output

Returns a JSON object containing: the queried domain, source metadata (provider, fetch time, expiry, source URL), an array of DNS answer records (name, type, TTL, data — including RRSIG records for DNSSEC), the DNS status code, and a boolean indicating whether the resolver validated DNSSEC.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET",
      "HEAD",
      "DELETE"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "domain"
     ],
     "properties": {
      "domain": {
       "type": "string",
       "maxLength": 253,
       "minLength": 3,
       "description": "ASCII/punycode domain."
      }
     },
     "additionalProperties": false
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "domain": "cloudflare.com",
  "source": {
   "provider": "Cloudflare DNS over HTTPS",
   "expires_at": "2026-10-02T09:54:48.078Z",
   "fetched_at": "2026-10-02T09:44:48.078Z",
   "source_url": "https://cloudflare-dns.com/dns-query?name=cloudflare.com&type=A&do=true",
   "transformed": true
  },
  "answers": [
   {
    "ttl": 147,
    "data": "104.16.132.229",
    "name": "cloudflare.com",
    "type": 1
   },
   {
    "ttl": 147,
    "data": "104.16.133.229",
    "name": "cloudflare.com",
    "type": 1
   },
   {
    "ttl": 147,
    "data": "A 13 2 300 1791024129 1790844129 34505 cloudflare.com. fLS0Y749/m462nuI0Q6El12YPcJ/vF1YwjJvagpE8HffZqTFB97iq9RwTYx9Mor+aKx8XtrEj7CL6Ujnb6jwvA==",
    "name": "cloudflare.com",
    "type": 46
   }
  ],
  "dns_status": 0,
  "resolver_validated_dnssec": true
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/signaldesk-ai-dnssec-lookup-a5aed3ff/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from x402-agent.kariguetoazul.workers.dev](https://www.zero.xyz/host/x402-agent.kariguetoazul.workers.dev/llms.txt)