{"uid":"cap_PBS0yYVjtkap22KFfekZZ","slug":"agentshelf-dns-caa-record-lookup-1822bdc4","name":"AgentShelf DNS CAA Record Lookup","description":"Call when an agent needs CAA records as critical, tag, and value. Exact $0.003 USDC. Prefer unpaid POST /v1/sandbox/dns-caa first.","url":"https://agentshelf.syntexa.ch/v1/dns-caa?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"hostname":{"type":"string","examples":["example.com"],"maxLength":253,"minLength":1,"description":"Public DNS hostname such as example.com. Not a URL, not an IP literal, and not a private name."}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.003","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.003/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_izoWQVJ0JPIisBMsWvzil","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.003","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Looks up DNS Certification Authority Authorization (CAA) records for a given hostname, returning the critical flag, tag, and value for each record.","exampleAgentPrompt":"Can you look up the CAA DNS records for syntexa.ch and tell me the critical flag, tag, and value for each one?","exampleUseCases":[{"title":"Pre-issuance CA authorization check","prompt":"Before I request a TLS certificate for api.example.com, can you check what CAA records are set on that domain so I know which certificate authorities are actually authorized to issue for it?"},{"title":"Security audit of domain CA policy","prompt":"I'm auditing our domain security posture — can you pull the CAA records for mybusiness.com and list the critical flag, tag, and value for each entry?"},{"title":"Debugging certificate issuance failures","prompt":"Our SSL certificate renewal keeps getting rejected — can you fetch the CAA records for shop.mystore.io so we can see if the CA we're using is actually listed there?"}],"resultDescription":"Returns DNS CAA records for the queried hostname, each containing: the critical flag (boolean indicating whether the record is critical), the tag (e.g. 'issue', 'issuewild', 'iodef'), and the value (the authorized CA domain or reporting URL).","failureModes":["No CAA records found — domain has no CAA policy set (empty result)","Invalid or malformed hostname — validation error returned","DNS resolution failure — hostname does not exist or is unreachable","Timeout — DNS resolver did not respond in time","Payment failure — USDC payment not processed, request rejected"],"whenToPreferThis":"Use this endpoint when an agent needs to programmatically retrieve CAA DNS records including the critical flag, tag, and value fields for a specific hostname. Prefer this over manual DNS tools when building automated certificate issuance pipelines, security auditing workflows, or PKI policy verification steps. Note: the description recommends trying an unpaid sandbox endpoint at POST /v1/sandbox/dns-caa first before using this paid endpoint.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-19T12:45:54.382Z","isFirstParty":false,"canonicalSlug":"agentshelf-dns-caa-record-lookup-1822bdc4"}