{"uid":"cap_6p-A2eHmD9E8F_7qdyBl5","slug":"certificate-authority-policy-lookup-caa-dns-records-5588c06a","name":"Certificate Authority Policy Lookup (CAA DNS Records)","description":"Certificate authority policy lookup for IT administration: Return CAA records that constrain certificate issuance. DNS data only; does not send email or verify that an inbox exists.","url":"https://market.datapackvibe.com/x402/demand-domain-certificate-authorities-it-administration?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"domain":{"type":"string","default":"example.com","description":"Public DNS domain, e.g. example.com."}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_neg6yzoGTARXsVuTgBWHP","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Returns CAA DNS records for a domain, indicating which certificate authorities are authorized to issue TLS certificates for it.","exampleAgentPrompt":"Can you look up the CAA DNS records for example.com so I can see which certificate authorities are allowed to issue TLS certificates for it?","exampleUseCases":[{"title":"Pre-issuance CA eligibility check","prompt":"Before we request a new TLS cert for acme-corp.com, can you check the CAA records to confirm that DigiCert is authorized to issue certificates for that domain?"},{"title":"Security audit of domain CA policy","prompt":"I'm running an IT security audit — can you pull the CAA DNS records for all our company domains, starting with internaltools.mycompany.com, so I can verify we've locked down certificate issuance properly?"},{"title":"Troubleshooting certificate issuance failure","prompt":"Our Let's Encrypt certificate renewal for shop.mybrand.com just failed — can you check the CAA records for that domain to see if Let's Encrypt is even allowed to issue certs there?"}],"resultDescription":"Returns the CAA (Certification Authority Authorization) DNS records for the queried domain, showing which certificate authorities are explicitly permitted to issue TLS/SSL certificates. The response contains DNS record data only — no email verification or inbox checks are performed.","failureModes":["Domain has no CAA records (returns empty result, meaning any CA is implicitly allowed)","Invalid or non-existent domain name returns a DNS lookup error","Malformed domain input triggers a validation error","Transient DNS resolution failures may occur for newly registered or propagating domains"],"whenToPreferThis":"Use this endpoint when you need to programmatically query CAA DNS records for IT administration, security auditing, or pre-issuance checks. Prefer this over manual DNS tools when automating certificate lifecycle management, running compliance audits across multiple domains, or when an AI agent needs structured CAA data for decision-making. Not suitable for email verification or certificate issuance itself.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-02T12:44:32.170Z","isFirstParty":false,"canonicalSlug":"certificate-authority-policy-lookup-caa-dns-records-5588c06a"}