{"uid":"cap_FATR9-GBthagFwF17zezV","slug":"dns-tlsa-via-cloudflare-56a88d4b","name":"dns-tlsa-via-cloudflare","description":"TLSA records for a domain as answered by Cloudflare 1.1.1.1 (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resolvers to spot propagation lag, filtering or split-horizon answers. $0.01 per lookup.","url":"https://dns.intel.rallylive.ca/dns/tlsa/via/cloudflare?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","properties":{}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_epZGRnMnHqSp2Pu1QikOA","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Looks up TLSA DNS records for a domain using Cloudflare 1.1.1.1 DNS over HTTPS, returning records, TTL, response code, DNSSEC validation status, and resolver answer time.","exampleAgentPrompt":"What TLSA records does Cloudflare 1.1.1.1 return for example.com — include the TTL, whether DNSSEC was validated, and how fast it answered?","exampleUseCases":[{"title":"DANE certificate pinning verification","prompt":"Check the TLSA records that Cloudflare 1.1.1.1 returns for mail.example.com so I can verify our DANE certificate pinning is set up correctly — include the response code and whether DNSSEC was validated."},{"title":"Resolver propagation comparison","prompt":"I just updated the TLSA record for smtp.mycompany.com — can you check what Cloudflare 1.1.1.1 returns right now so I can compare it with what other resolvers are seeing and spot any propagation lag?"},{"title":"TLSA NXDOMAIN troubleshooting","prompt":"Our mail server is rejecting DANE connections to secure.vendor.org — can you query Cloudflare's DoH resolver for TLSA records on that domain and tell me if it gets NOERROR or NXDOMAIN?"}],"resultDescription":"Returns the TLSA DNS records for the queried domain as answered by Cloudflare 1.1.1.1 via DNS over HTTPS, including the record data, TTL, DNS response code (NOERROR, NXDOMAIN, or SERVFAIL), whether DNSSEC validation was performed, and the resolver's answer latency.","failureModes":["Domain does not exist — returns NXDOMAIN response code","No TLSA record published for domain — returns NOERROR with empty answer section","Resolver fails to answer — returns SERVFAIL","Invalid or malformed domain name input — likely returns an error or SERVFAIL","Payment not processed — endpoint returns 402 before any DNS query is made"],"whenToPreferThis":"Choose this endpoint when you specifically need to see how Cloudflare 1.1.1.1 resolves TLSA records for a domain, particularly for DANE certificate validation, DNSSEC verification workflows, or comparing Cloudflare's answer against other resolvers to detect propagation lag, filtering, or split-horizon DNS differences.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T18:55:10.497Z","isFirstParty":false,"canonicalSlug":"dns-tlsa-via-cloudflare-56a88d4b"}