{"uid":"cap_8dZp8TKLMk6xDxSY6CVnZ","slug":"dns-caa-via-opendns-bfdd05ff","name":"dns-caa-via-opendns","description":"CAA records for a domain as answered by OpenDNS (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resolvers to spot propagation lag, filtering or split-horizon answers. $0.01 per lookup.","url":"https://dns.intel.rallylive.ca/dns/caa/via/opendns?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","properties":{}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_GhWE_cDnVzsnGW4UdsxhT","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Retrieves CAA DNS records for a domain as answered by OpenDNS via DNS over HTTPS, including TTL, response code, DNSSEC validation status, and resolver answer time.","exampleAgentPrompt":"Can you look up the CAA records for example.com using the OpenDNS resolver and tell me which certificate authorities are authorized, along with the TTL, response code, and whether DNSSEC was validated?","exampleUseCases":[{"title":"Verify CA authorization before certificate issuance","prompt":"Check the CAA records for mybusiness.com through OpenDNS — I need to know which certificate authorities are authorized and what the response code is before I request a new TLS cert."},{"title":"Compare resolver propagation for CAA records","prompt":"I just updated the CAA records for startup.io — can you query them via OpenDNS and tell me the TTL and answer time so I can compare against other resolvers to spot any propagation lag?"},{"title":"Audit DNSSEC validation on CAA policy","prompt":"Pull the CAA DNS records for securedomain.net via OpenDNS and let me know if DNSSEC was validated, what the records say, and whether the response was NOERROR or something else."}],"resultDescription":"Returns the CAA DNS records for the queried domain as seen by OpenDNS, including the raw record values (tag, value, flag), TTL in seconds, DNS response code (NOERROR, NXDOMAIN, SERVFAIL), a flag indicating whether the resolver performed DNSSEC validation, and the resolver's measured answer latency.","failureModes":["Domain does not exist — returns NXDOMAIN response code with empty records","OpenDNS resolver fails to answer — returns SERVFAIL response code","Domain has no CAA records — returns NOERROR with empty record set","Network timeout reaching OpenDNS DoH endpoint — may return error or timeout","Invalid or malformed domain name input — may return 400-level error","Payment not fulfilled — returns 402 Payment Required"],"whenToPreferThis":"Choose this endpoint when you specifically need CAA records as seen by OpenDNS, for example to compare OpenDNS answers against other resolvers (Cloudflare, Google, NextDNS) to detect split-horizon DNS, filtering, or propagation delays. It is the right choice when diagnosing certificate issuance failures related to CAA policy, auditing DNSSEC validation behavior at OpenDNS, or building multi-resolver DNS comparison workflows.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T18:54:31.944Z","isFirstParty":false,"canonicalSlug":"dns-caa-via-opendns-bfdd05ff"}