# Surefact DNS Lookup & Audit

> Surefact DNS Lookup & Audit is a paid API for AI agents from api.surefact.workers.dev, paid per call via x402, $0.005/call, status unknown (last checked 2026-10-14).

Queries DNS records for a domain or IP address, returning verified record data plus a DNSSEC status and email-security audit report.

## Facts

- Endpoint: GET https://api.surefact.workers.dev/v1/dns?utm_source=zero.xyz
- Price: $0.005/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/surefact-dns-lookup-audit-724a6fce
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_9T35TT6LhFwJ80fsOJG1H

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability surefact-dns-lookup-audit-724a6fce
```

Example prompt: Can you look up all DNS records for surefact.dev and tell me whether DNSSEC is enabled and what their mail servers are?

## When to prefer this

Choose this endpoint when you need verified, authoritative DNS record data with a built-in DNSSEC flag and email-security audit in a single call, without managing API keys or paying a subscription. It is especially useful for agents that must validate domain configuration, audit email infrastructure (MX, SPF, DKIM), or perform reverse lookups — and where pay-per-call USDC pricing on Base is acceptable or preferred over monthly-billed DNS APIs.

## Known failure modes

- Domain does not exist in DNS — returns exists: false with empty records
- Invalid record type requested for an IP address (only ALL and PTR allowed for IPs) — likely a 400 error
- Querying an unsupported or malformed hostname — may return an error or empty result
- DNSSEC validation failure for a domain — reflected in the dnssec field
- Network or upstream resolver timeout — transient error, not charged

## How this service works

Verified, pay-per-call tools for AI agents: read web pages, check emails, audit DNS and domains, convert currencies, vet package versions for vulnerabilities, and roll provably fair dice for games. Every answer is checked against its source or comes with a proof. No signup or API key: pay each call in USDC on Base with x402. Failed calls are never charged.

## Output

A JSON object containing the queried domain name, a boolean DNSSEC status, an existence flag, the list of record types that were queried, and a records map keyed by type (e.g. MX, A, TXT). For ALL queries, also includes an email-security audit summary. Each record entry contains type-appropriate fields such as host, priority, value, or TTL.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "name"
     ],
     "properties": {
      "name": {
       "type": "string",
       "description": "Domain or host name (Unicode is fine), or an IPv4/IPv6 address for a reverse (PTR) lookup."
      },
      "type": {
       "enum": [
        "ALL",
        "A",
        "AAAA",
        "CNAME",
        "MX",
        "TXT",
        "NS",
        "CAA",
        "SOA",
        "PTR"
       ],
       "type": "string",
       "description": "Record type. ALL (default) queries A, AAAA, CNAME, MX, TXT and NS plus the email-security report; ask for CAA, SOA or PTR by name. For an IP address only ALL and PTR are allowed; both do the reverse lookup."
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "name": "example.com",
  "dnssec": true,
  "exists": true,
  "queried": [
   "MX"
  ],
  "records": {
   "MX": [
    {
     "host": ".",
     "priority": 0
    }
   ]
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/surefact-dns-lookup-audit-724a6fce/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.surefact.workers.dev](https://www.zero.xyz/host/api.surefact.workers.dev/llms.txt)