{"uid":"cap_Qg-CnM9eIoD_Uc3utIPmC","slug":"agentkit-x402-domain-dns-audit-1b04808b","name":"AgentKit x402 Domain DNS Audit","description":"Email checks, DNS and email-authentication audits, website contact extraction, SEO audits, URL to Markdown and Swedish validators, paid per call in USDC with x402.","url":"https://agentkit-x402.erikssonanton2001.workers.dev/v1/domain-dns?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["domain"],"properties":{"domain":{"type":"string","description":"Domain name without scheme."}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"dnssec":{"note":"resolver_validated reflects the AD flag from the resolver (cloudflare-dns.com) for the A or NS answer.","ds_present":false,"dnskey_present":false,"resolver_validated":false},"domain":"example.com","records":{"a":[{"ttl":300,"data":"93.184.216.34"}],"ds":[],"mx":[{"ttl":3600,"data":"10 mail.example.com.","host":"mail.example.com","priority":10}],"ns":[{"ttl":3600,"data":"ns1.example.net"}],"caa":[],"soa":[],"txt":[{"ttl":300,"data":"v=spf1 -all"}],"aaaa":[],"cname":[],"dnskey":[]},"resolver":"cloudflare-dns.com (DNS-over-HTTPS)","failed_lookups":[]}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.005","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_pU3edv0o8Mw68McsBjoZZ","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Performs a comprehensive DNS lookup and DNSSEC audit for a given domain, returning all major record types and security validation status via DNS-over-HTTPS.","exampleAgentPrompt":"Can you pull all the DNS records for example.com — including MX, TXT, NS, and DNSSEC status — so I can audit its email and security configuration?","exampleUseCases":[{"title":"Pre-send email deliverability check","prompt":"Before I send a bulk email campaign from newsletter.acme.com, can you check its DNS records to confirm it has valid MX and SPF TXT records set up correctly?"},{"title":"DNSSEC validation audit","prompt":"I need to verify whether mybusiness.io has DNSSEC properly enabled — can you check if DS and DNSKEY records are present and whether the resolver validates it?"},{"title":"Domain infrastructure onboarding review","prompt":"We're onboarding a new client whose domain is clientsite.co — can you pull all their DNS records so I can review their NS, A, and CAA configuration before we start work?"}],"resultDescription":"Returns a JSON object containing the domain name, resolver used (Cloudflare DNS-over-HTTPS), all DNS record types (A, AAAA, MX, NS, TXT, CNAME, CAA, SOA, DS, DNSKEY) with their TTLs and data values, DNSSEC status (DS present, DNSKEY present, resolver-validated AD flag), and a list of any failed lookups.","failureModes":["Invalid or malformed domain name returns an error or empty records","Non-existent domain returns empty record sets with possible failed_lookups entries","DNSSEC resolver_validated may reflect false negatives due to Cloudflare resolver limitations","Network or DNS resolution timeouts may result in partial records with failed_lookups populated","Payment failure (x402 USDC) prevents the call from completing"],"whenToPreferThis":"Choose this endpoint when you need a comprehensive, single-call DNS audit covering all major record types plus DNSSEC validation for a domain. It is particularly useful when you need to check email authentication readiness (SPF/MX), security posture (DNSSEC, CAA), and infrastructure configuration in one response. Prefer this over manual dig/nslookup workflows or single-record DNS tools when you need a structured JSON summary suitable for automated analysis.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-17T12:40:27.698Z","isFirstParty":false,"canonicalSlug":"agentkit-x402-domain-dns-audit-1b04808b"}