{"uid":"cap_X86W2c6tL03hkEMYb5AHs","slug":"dns-tlsa-via-mullvad-91947cba","name":"dns-tlsa-via-mullvad","description":"TLSA records for a domain as answered by Mullvad DNS (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resolvers to spot propagation lag, filtering or split-horizon answers. $0.01 per lookup.","url":"https://dns.intel.rallylive.ca/dns/tlsa/via/mullvad?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","properties":{}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_Ueng8wC8-4bewqib0YHRm","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Fetches TLSA DNS records for a domain using Mullvad's DNS over HTTPS resolver, returning records, TTL, response code, DNSSEC validation status, and answer time.","exampleAgentPrompt":"What TLSA records does Mullvad DNS return for example.com, and does it validate DNSSEC for them?","exampleUseCases":[{"title":"DANE certificate pinning verification","prompt":"Check what TLSA records Mullvad DNS returns for mail.example.com — I want to know if DNSSEC validation is passing and what the TTL looks like."},{"title":"Multi-resolver propagation comparison","prompt":"I just published new TLSA records for smtp.mydomain.org — can you check what Mullvad DNS is returning so I can compare it against Google and Cloudflare to spot any propagation lag?"},{"title":"Diagnosing TLSA resolution failures","prompt":"My mail server's DANE validation is failing — can you query the TLSA records for _25._tcp.mail.example.com through Mullvad DNS and tell me if it returns NOERROR, NXDOMAIN, or SERVFAIL?"}],"resultDescription":"Returns the TLSA records (if any) for the queried domain as seen by the Mullvad DNS over HTTPS resolver, along with the TTL, DNS response code (NOERROR, NXDOMAIN, or SERVFAIL), whether the resolver performed DNSSEC validation, and the resolver's answer latency in milliseconds.","failureModes":["Domain does not exist — returns NXDOMAIN response code with no records","No TLSA records for domain — NOERROR with empty record set","Resolver fails to answer — SERVFAIL response","Network timeout reaching Mullvad resolver — possible latency spike or unavailability","Invalid domain format provided — likely an input validation error","Mullvad resolver filters or blocks the query — may manifest as SERVFAIL or empty response"],"whenToPreferThis":"Choose this endpoint when you specifically need to see how Mullvad's privacy-focused DNS resolver answers TLSA queries, particularly for DANE/SMTP certificate pinning checks, DNSSEC validation auditing, or multi-resolver propagation comparisons. Useful when Mullvad's resolver characteristics (privacy-oriented, potentially different filtering) are relevant to the diagnostic task.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-20T18:42:06.777Z","isFirstParty":false,"canonicalSlug":"dns-tlsa-via-mullvad-91947cba"}