{"uid":"cap_WNFCz08qGz-yWzk35xYNG","slug":"dnssec-status-check-cba398e9","name":"DNSSEC Status Check","description":"DNSSEC status of a domain: DS record at the parent, DNSKEY algorithms, and whether the resolver validated the answer.","url":"https://domain-dns.x402tookit.com/dnssec-check?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["domain"],"properties":{"domain":{"type":"string","description":"Domain name, e.g. cloudflare.com"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","properties":{"asOf":{"type":["null","string"]},"domain":{"type":["null","string"]},"source":{"type":["null","string"]},"reasons":{"type":["array","null"],"items":{"type":"string"}},"summary":{"type":["null","string"]},"verdict":{"type":["null","string"]},"degraded":{"type":["boolean","null"]},"dsRecords":{"type":["null","number"]},"sourceUrl":{"type":["null","string"]},"algorithms":{"type":["array","null"],"items":{"type":"string"}},"disclaimer":{"type":["null","string"]},"notChecked":{"type":["array","null"],"items":{"type":"string"}},"dnskeyRecords":{"type":["null","number"]},"resolverValidated":{"type":["boolean","null"]}}}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.03","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.03/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.03","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.03","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_0dU9_vQ3pZTFHZwwKJWeP","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.03","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Returns DNSSEC validation status for a domain, including DS records at the parent, DNSKEY algorithms, and whether the resolver validated the answer.","exampleAgentPrompt":"Can you check whether DNSSEC is properly configured and validated for cloudflare.com — I want to know if DS records exist at the parent, which DNSKEY algorithms are in use, and whether the resolver confirmed the answer?","exampleUseCases":[{"title":"Pre-launch domain security audit","prompt":"Before we go live, can you verify that DNSSEC is fully set up and resolver-validated for our domain example.com? I need to know the DS record count, which algorithms are in use, and whether there are any issues."},{"title":"Investigating DNSSEC failures","prompt":"Our monitoring is flagging DNS issues on acme-corp.com — can you check the DNSSEC status? I want to see the DS and DNSKEY records, whether the resolver validated it, and any degraded or failure reasons."},{"title":"Comparing DNSSEC posture across vendors","prompt":"Can you check DNSSEC for both stripe.com and square.com so I can compare their signing algorithms and validation status side by side?"}],"resultDescription":"Returns a structured report for the queried domain including: DS record count at the parent, DNSKEY record count, list of DNSKEY algorithms in use, whether the resolver validated the DNSSEC chain, an overall verdict string, a human-readable summary, a degraded flag, a list of reasons for the verdict, a source URL, and a timestamp.","failureModes":["Domain not found or does not exist — null values returned with a non-validated verdict","Domain exists but has no DNSSEC configured — DS and DNSKEY counts are zero, verdict indicates unsigned","Resolver unable to validate chain — resolverValidated returns false with reasons explaining the failure","Invalid domain input format — request rejected with an error","Upstream DNS timeout or resolver unavailable — degraded flag set to true"],"whenToPreferThis":"Choose this endpoint when you specifically need DNSSEC validation details — DS records, DNSKEY algorithms, and resolver validation status — rather than general DNS records. It is ideal for security audits, compliance checks, or diagnosing DNSSEC chain-of-trust issues. For general DNS records (A, MX, TXT, etc.) use the sibling full-records endpoint instead.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-26T00:30:57.459Z","isFirstParty":false,"canonicalSlug":"dnssec-status-check-cba398e9"}