{"uid":"cap_VCJ8GpF34a3Nv2bTknuEO","slug":"netintel-dnssec-validator-8eed8a7e","name":"NetIntel DNSSEC Validator","description":"Validate a domain's DNSSEC configuration over DNS-over-HTTPS: DS records at the parent zone, DNSKEY records at the domain, RRSIG signatures, NSEC/NSEC3, plus the validating resolver's AD bit — returns a full chain-of-trust assessment and readiness score so agents can verify DNS integrity before trusting resolution results.","url":"https://netintel.dev/dnssec/validate","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["domain"],"properties":{"domain":{"type":"string","description":"Domain name to validate DNSSEC for (e.g. example.com)"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","properties":{"grade":{"type":"string"},"score":{"type":"number"},"domain":{"type":"string"},"findings":{"type":"array"},"components":{"type":"object"},"chain_of_trust":{"type":"string"},"dnssec_enabled":{"type":"boolean"},"tld_ds_present":{"type":"boolean"},"resolver_validated":{"type":"boolean","description":"Validating resolver's AD bit — chain verified upstream"}}}}}}},"responseSchema":{"type":"json","example":{"grade":"A","score":100,"domain":"example.com","findings":[],"components":{"ds_record":{"count":1,"present":true,"algorithms":["ECDSAP256SHA256"]},"rrsig_record":{"present":true,"signatures_found":1},"dnskey_record":{"count":4,"present":true,"key_types":["ZSK","KSK","ZSK","ZSK"]},"nsec_or_nsec3":{"type":"NSEC","present":true}},"chain_of_trust":"complete","dnssec_enabled":true,"tld_ds_present":true,"resolver_validated":true}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.03","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.03/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.03","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.03","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_JiwuvAmnUAlxwe9FjLWeZ","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.03","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Validates DNSSEC configuration for a domain, returning a grade, score, chain-of-trust status, and detailed component breakdown","exampleAgentPrompt":"Can you validate the DNSSEC configuration for cloudflare.com and tell me if the chain of trust is complete, what grade it gets, and whether the DS record is present at the TLD?","exampleUseCases":null,"resultDescription":"A JSON object containing: a letter grade (e.g. 'A'), a numeric score (0-100), whether DNSSEC is enabled, whether TLD DS record is present, chain-of-trust status ('complete' or otherwise), a findings array with any issues, and a components breakdown covering DS records (count, algorithms), DNSKEY records (count, key types KSK/ZSK), RRSIG signatures, and NSEC/NSEC3 presence.","failureModes":["Domain does not exist — may return error or incomplete data","Domain has no DNSSEC configured — returns dnssec_enabled:false with low/zero score","Network timeout reaching authoritative DNS servers","Invalid domain format — missing required query parameter returns validation error","Payment failure via x402 — 402 response if USDC payment not provided"],"whenToPreferThis":"Use this endpoint when you need a comprehensive, scored audit of a domain's DNSSEC posture including chain-of-trust verification, algorithm identification, and a human-readable grade. Prefer this over raw DNS lookup tools when you want structured scoring and component-level detail rather than just raw DNS records.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T00:45:33.064Z","isFirstParty":false}