{"uid":"cap_KalrZKOmBTEMqcPufUAXg","slug":"lookproof-dns-ttl-lookup-1e4e1998","name":"Lookproof DNS TTL Lookup","description":"Check SPF, DMARC, DKIM, MTA-STS, DNSSEC and more, with results that explain what was found and why. Free browser checks and a pay-per-request API with x402.","url":"https://api.lookproof.dev/v1/dns/ttl?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET","HEAD","DELETE"],"type":"string"},"queryParams":{"type":"object","title":"DomainInput","required":["domain"],"properties":{"domain":{"type":"string","title":"Domain","examples":["example.com"],"maxLength":1024,"minLength":1}},"additionalProperties":false}},"additionalProperties":false}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_sRog5ULg3lP7-0iwtFsIU","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Returns the TTL of A, AAAA, MX, NS, TXT, CAA, and SOA records for a domain, sourced from DNSSEC-validated signatures or resolver cache, plus SOA negative caching TTL.","exampleAgentPrompt":"How long will the old A, MX, and NS records for stripe.com stay cached after I update them — can you check the current TTLs, including whether they come from a DNSSEC-validated signature or just the resolver's remaining cache time?","exampleUseCases":[{"title":"Pre-migration DNS propagation planning","prompt":"I'm about to point example.com to a new server — can you check the TTLs on its A and MX records so I know how long to keep the old server alive before cutting over?"},{"title":"DNSSEC TTL source verification","prompt":"For cloudflare.com, tell me whether the TTLs on its DNS records are coming from a validated DNSSEC RRSIG original TTL or just the resolver's remaining cache time."},{"title":"SOA negative cache TTL audit","prompt":"What's the SOA negative caching TTL for github.com? I want to know how long failed lookups for non-existent subdomains will be cached."}],"resultDescription":"A structured response listing each queried record type (A, AAAA, MX, NS, TXT, CAA, SOA) with its TTL value, the source of that TTL (either the DNSSEC RRSIG Original TTL from a validated signature, or the resolver's remaining cache time as a lower bound), and the SOA negative caching TTL for the domain.","failureModes":["Domain does not exist — returns NXDOMAIN or empty result","Domain has no records of a given type — that type omitted from response","DNSSEC not enabled — TTL source will be resolver cache only, not RRSIG validated","Invalid or malformed domain input — returns 400 validation error","Resolver unreachable or timeout — returns 5xx error","Domain string too long (over 1024 characters) — returns validation error"],"whenToPreferThis":"Choose this endpoint when you need to know how long existing DNS records will continue to be served from caches before a change propagates — especially when DNSSEC is in play and you need to distinguish between the authoritative RRSIG Original TTL and the resolver's remaining cache time. It is more informative than a plain DNS resolver for change-planning purposes, since it surfaces the TTL source. Prefer it over generic DNS resolution endpoints when planning DNS migrations, cutover timing, or auditing negative caching behavior.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-31T18:39:44.874Z","isFirstParty":false,"canonicalSlug":"lookproof-dns-ttl-lookup-1e4e1998"}