{"uid":"cap_c1_ooDZR80yuA47TXGfdr","slug":"dns-tlsa-lookup-via-dns-sb-doh-7a27afc6","name":"DNS TLSA Lookup via DNS.SB (DoH)","description":"TLSA records for a domain as answered by DNS.SB (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resolvers to spot propagation lag, filtering or split-horizon answers. $0.01 per lookup.","url":"https://dns.intel.rallylive.ca/dns/tlsa/via/dnssb?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","properties":{}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_izxjqkCy5cZBCA6Hj9bq3","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Retrieves TLSA DNS records for a domain using DNS.SB as the DNS-over-HTTPS resolver, returning records, TTL, response code, DNSSEC validation status, and answer time.","exampleAgentPrompt":"Look up the TLSA records for example.com using DNS.SB as the resolver and tell me the TTL, whether DNSSEC was validated, and how fast DNS.SB answered.","exampleUseCases":[{"title":"DANE TLS certificate verification check","prompt":"Can you fetch the TLSA records for mail.protonmail.com via DNS.SB and let me know the response code, what records came back, and whether DNSSEC was validated?"},{"title":"Resolver propagation lag comparison","prompt":"I want to check if TLSA records for smtp.fastmail.com have propagated to DNS.SB yet — can you do the lookup and tell me the TTL and response code?"},{"title":"Split-horizon DNS detection for TLSA","prompt":"Check the TLSA records for _443._tcp.cloudflare.com on DNS.SB so I can compare the answer time and records against what other resolvers are returning — I'm trying to spot any filtering or split-horizon differences."}],"resultDescription":"Returns the TLSA DNS records for the queried domain as answered by DNS.SB, including: the record data itself, TTL value, response code (NOERROR, NXDOMAIN, or SERVFAIL), a flag indicating whether DNSSEC was validated by the resolver, and the resolver's answer latency in milliseconds.","failureModes":["Domain does not exist — returns NXDOMAIN response code with empty records","No TLSA record configured for domain — returns NOERROR with empty answer section","Resolver-side failure — returns SERVFAIL response code","DNSSEC validation failure — DNSSEC flag may be false even when records exist","Network timeout to DNS.SB resolver — may return error or delayed response"],"whenToPreferThis":"Choose this endpoint when you specifically need TLSA (DANE) records as resolved by the DNS.SB public DoH resolver, particularly when comparing resolver behavior, checking propagation to DNS.SB, investigating DNSSEC validation, or auditing split-horizon or filtering differences between resolvers. Use sibling endpoints for other DNS record types or other resolvers.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T18:55:44.433Z","isFirstParty":false,"canonicalSlug":"dns-tlsa-lookup-via-dns-sb-doh-7a27afc6"}