{"uid":"cap_HDqczMYHLLWSat2WmxvUs","slug":"delx-caa-issue-hosts-extractor-107aa78c","name":"Delx CAA Issue Hosts Extractor","description":"Extract issue/issuewild hosts from CAA record texts. Call when inventorying allowed CAs from CAA answers. Returns hosts list as deterministic JSON for $0.001 USDC via x402 on Base. First-party local math only—no RPC, live market feed, API keys, storage, or mediagen. Advisory only; the caller owns capital, risk, and production controls.","url":"https://api.delx.ai/api/v1/x402/caa-issue-hosts?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"records":{"type":"array","description":"List of CAA record strings"}}},"responseSchema":{"type":"json","example":{"hosts":["letsencrypt.org",";"],"schema":"delx/util-caa-issue-hosts/v1"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.001","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.001/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_2ML_b-fNnPNPFdWtRnkqo","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.001","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Parses a list of CAA DNS record strings and extracts the authorized certificate authority hostnames from them.","exampleAgentPrompt":"Parse these CAA DNS record strings and tell me which certificate authority hostnames are authorized to issue certs: [\"0 issue \\\"letsencrypt.org\\\"\", \"0 issue \\\"pki.goog\\\"\"]","exampleUseCases":[{"title":"Audit TLS cert issuance policy","prompt":"I have a bunch of raw CAA record strings from a domain audit — can you extract all the certificate authority hostnames that are authorized to issue certs from them?"},{"title":"Verify Let's Encrypt is authorized","prompt":"Check these CAA records and tell me if letsencrypt.org appears as an authorized issuer: [\"0 issue \\\"letsencrypt.org\\\"\", \"0 issuewild \\\"sectigo.com\\\"\"]"},{"title":"Normalize CA list from DNS export","prompt":"I exported these CAA records from our DNS zone file. Extract just the hostnames of the allowed certificate issuers so I can cross-reference them with our cert inventory."}],"resultDescription":"Returns a JSON object containing a 'hosts' array of certificate authority hostnames parsed from the input CAA record strings (e.g. ['letsencrypt.org', 'pki.goog']), plus a schema identifier string.","failureModes":["Malformed CAA record strings may yield empty or partial hosts array","Records without an 'issue' or 'issuewild' tag may produce no hosts","Non-array or missing 'records' field causes request validation failure","Records with semicolons or non-standard formatting may be included literally in the output"],"whenToPreferThis":"Use this endpoint when you need to programmatically extract certificate authority hostnames from raw CAA DNS record strings — particularly in infrastructure automation, security auditing, or certificate lifecycle management workflows where parsing CAA records manually would be error-prone.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-17T19:00:21.984Z","isFirstParty":false,"canonicalSlug":"delx-caa-issue-hosts-extractor-107aa78c"}