{"uid":"cap_WiDNzrno_FjDuKbB41Tvr","slug":"dns-caa-via-dnssb-21b23f0d","name":"dns-caa-via-dnssb","description":"CAA records for a domain as answered by DNS.SB (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resolvers to spot propagation lag, filtering or split-horizon answers. $0.01 per lookup.","url":"https://dns.intel.rallylive.ca/dns/caa/via/dnssb?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","properties":{}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_n7r-h8R7e2yps8cykqWvQ","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Fetches CAA (Certification Authority Authorization) DNS records for a domain using DNS.SB as the DNS-over-HTTPS resolver, returning records, TTL, response code, DNSSEC validation status, and answer latency.","exampleAgentPrompt":"What CAA records does DNS.SB return for example.com — include the TTL, response code, whether DNSSEC was validated, and how fast the resolver answered?","exampleUseCases":[{"title":"Verify CA authorization before certificate issuance","prompt":"Before I request a TLS certificate for mycompany.com, can you check the CAA records via DNS.SB and tell me which certificate authorities are authorized and whether DNSSEC validated correctly?"},{"title":"Detect propagation lag across resolvers","prompt":"I just updated the CAA records for mybrand.io — can you query DNS.SB specifically and tell me what it's returning now, along with the TTL and response time, so I can compare it against other resolvers?"},{"title":"Spot split-horizon or filtered DNS responses","prompt":"Can you check what CAA records DNS.SB is giving back for secure.example.org and whether it's showing NOERROR or something else? I want to see if DNS.SB is filtering or returning a different answer than expected."}],"resultDescription":"Returns the CAA DNS records for the queried domain as answered by DNS.SB, including the record values (tag, value, flags), TTL, DNS response code (NOERROR, NXDOMAIN, or SERVFAIL), whether the resolver performed DNSSEC validation, and the resolver's answer latency in milliseconds.","failureModes":["Domain does not exist — returns NXDOMAIN response code","DNS.SB resolver fails to answer — returns SERVFAIL response code","No CAA records present for the domain — empty records with NOERROR","DNSSEC validation failure — indicated in the DNSSEC status field","Invalid or malformed domain input — request may fail or return an error","DNS.SB resolver temporarily unreachable — may result in timeout or error"],"whenToPreferThis":"Choose this endpoint when you specifically want to see how DNS.SB resolves CAA records for a domain — useful when comparing resolver behavior, checking for propagation lag to DNS.SB specifically, auditing DNSSEC validation, or detecting split-horizon/filtered DNS responses. Use alongside other resolver-specific endpoints (e.g. AdGuard, Cloudflare, OpenDNS) to compare answers across resolvers.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T18:55:32.906Z","isFirstParty":false,"canonicalSlug":"dns-caa-via-dnssb-21b23f0d"}