{"uid":"cap_9T35TT6LhFwJ80fsOJG1H","slug":"surefact-dns-lookup-audit-724a6fce","name":"Surefact DNS Lookup & Audit","description":"Verified, pay-per-call tools for AI agents: read web pages, check emails, audit DNS and domains, convert currencies, vet package versions for vulnerabilities, and roll provably fair dice for games. Every answer is checked against its source or comes with a proof. No signup or API key: pay each call in USDC on Base with x402. Failed calls are never charged.","url":"https://api.surefact.workers.dev/v1/dns?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["name"],"properties":{"name":{"type":"string","description":"Domain or host name (Unicode is fine), or an IPv4/IPv6 address for a reverse (PTR) lookup."},"type":{"enum":["ALL","A","AAAA","CNAME","MX","TXT","NS","CAA","SOA","PTR"],"type":"string","description":"Record type. ALL (default) queries A, AAAA, CNAME, MX, TXT and NS plus the email-security report; ask for CAA, SOA or PTR by name. For an IP address only ALL and PTR are allowed; both do the reverse lookup."}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"name":"example.com","dnssec":true,"exists":true,"queried":["MX"],"records":{"MX":[{"host":".","priority":0}]}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.005","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_bn8AUDDVslQPWIBVlaedd","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Queries DNS records for a domain or IP address, returning verified record data plus a DNSSEC status and email-security audit report.","exampleAgentPrompt":"Can you look up all DNS records for surefact.dev and tell me whether DNSSEC is enabled and what their mail servers are?","exampleUseCases":[{"title":"Email deliverability audit before campaign","prompt":"Before we send the newsletter campaign, can you check all the DNS and email-security records for ourdomain.com — I want to know if MX, SPF, DKIM TXT records look right and if DNSSEC is on?"},{"title":"Reverse DNS lookup for suspicious IP","prompt":"I'm seeing traffic from 203.0.113.42 in our logs — can you do a reverse DNS lookup to find out what hostname that IP resolves to?"},{"title":"Verify competitor nameservers","prompt":"Can you pull the NS and SOA records for competitor-site.io? I want to know which DNS provider they're using."}],"resultDescription":"A JSON object containing the queried domain name, a boolean DNSSEC status, an existence flag, the list of record types that were queried, and a records map keyed by type (e.g. MX, A, TXT). For ALL queries, also includes an email-security audit summary. Each record entry contains type-appropriate fields such as host, priority, value, or TTL.","failureModes":["Domain does not exist in DNS — returns exists: false with empty records","Invalid record type requested for an IP address (only ALL and PTR allowed for IPs) — likely a 400 error","Querying an unsupported or malformed hostname — may return an error or empty result","DNSSEC validation failure for a domain — reflected in the dnssec field","Network or upstream resolver timeout — transient error, not charged"],"whenToPreferThis":"Choose this endpoint when you need verified, authoritative DNS record data with a built-in DNSSEC flag and email-security audit in a single call, without managing API keys or paying a subscription. It is especially useful for agents that must validate domain configuration, audit email infrastructure (MX, SPF, DKIM), or perform reverse lookups — and where pay-per-call USDC pricing on Base is acceptable or preferred over monthly-billed DNS APIs.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-14T12:40:45.338Z","isFirstParty":false,"canonicalSlug":"surefact-dns-lookup-audit-724a6fce"}