{"uid":"cap_a4VWNVViTbyAU0GHFsNLj","slug":"dns-tlsa-via-google-56f90610","name":"dns-tlsa-via-google","description":"TLSA records for a domain as answered by Google 8.8.8.8 (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resolvers to spot propagation lag, filtering or split-horizon answers. $0.01 per lookup.","url":"https://dns.intel.rallylive.ca/dns/tlsa/via/google?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","properties":{}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_upoxgNHGI5XNYySruj2bw","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Retrieves TLSA DNS records for a domain using Google's 8.8.8.8 resolver via DNS over HTTPS, returning records, TTL, response code, DNSSEC validation status, and answer time.","exampleAgentPrompt":"What TLSA records does Google's 8.8.8.8 DNS resolver return for example.com, and did it validate DNSSEC?","exampleUseCases":[{"title":"DANE certificate verification check","prompt":"Can you pull the TLSA records for mail.example.com from Google's DNS (8.8.8.8) and tell me what certificate association data it returns and whether DNSSEC was validated?"},{"title":"DNS propagation comparison across resolvers","prompt":"I need to compare how Google DNS resolves TLSA records for _443._tcp.example.com versus other resolvers — start by fetching what Google's 8.8.8.8 returns, including the TTL and response code."},{"title":"TLSA misconfiguration diagnosis","prompt":"Something seems off with our TLSA setup — can you check what Google DNS 8.8.8.8 returns for _25._tcp.mail.example.com, including whether it gets NOERROR or SERVFAIL and how long the answer took?"}],"resultDescription":"Returns the TLSA record set (certificate association data) for the queried domain as resolved by Google's 8.8.8.8 DoH resolver, along with the TTL, DNS response code (NOERROR, NXDOMAIN, or SERVFAIL), whether DNSSEC validation was performed, and the resolver's answer latency.","failureModes":["Domain does not exist — returns NXDOMAIN response code","No TLSA records published for the domain — returns NOERROR with empty answer section","DNSSEC validation failure — returns SERVFAIL with AD flag false","Resolver unreachable — request timeout or HTTP error","Missing required domain query parameter — API returns an error"],"whenToPreferThis":"Choose this endpoint when you specifically need to see how Google's public 8.8.8.8 resolver answers TLSA queries, particularly for diagnosing DANE/TLS certificate association issues, checking DNSSEC validation on Google DNS, or comparing Google's response against other resolvers to detect propagation lag or split-horizon DNS differences.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T18:54:40.574Z","isFirstParty":false,"canonicalSlug":"dns-tlsa-via-google-56f90610"}