{"uid":"cap_cVZsuKvyT1rnf42t7MbnM","slug":"certificate-authority-policy-lookup-caa-dns-records-b48aaa52","name":"Certificate Authority Policy Lookup (CAA DNS Records)","description":"Certificate authority policy lookup for Sales operations: Return CAA records that constrain certificate issuance. DNS data only; does not send email or verify that an inbox exists.","url":"https://market.datapackvibe.com/x402/demand-domain-certificate-authorities-sales-operations?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"domain":{"type":"string","default":"example.com","description":"Public DNS domain, e.g. example.com."}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_bB8QJqYz-pU3D_XULCJ_2","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Returns CAA (Certification Authority Authorization) DNS records for a given domain, revealing which certificate authorities are permitted to issue SSL/TLS certificates for it.","exampleAgentPrompt":"Can you look up the CAA records for stripe.com and tell me which certificate authorities are authorized to issue SSL certificates for it?","exampleUseCases":[{"title":"Security audit of CA policy","prompt":"Check the CAA DNS records for acmecorp.com — I need to know which certificate authorities are authorized to issue certificates for that domain as part of our security review."},{"title":"Pre-issuance CA eligibility check","prompt":"Before we request an SSL cert from DigiCert, can you pull the CAA records for mybusiness.io to confirm DigiCert is actually allowed to issue for that domain?"},{"title":"Third-party domain due diligence","prompt":"We're about to onboard a new vendor at vendor-partner.net — can you check what their CAA records say about which certificate authorities they've authorized?"}],"resultDescription":"Returns CAA DNS record data for the specified domain, including which certificate authorities (e.g. Let's Encrypt, DigiCert, Sectigo) are authorized to issue certificates. This is raw DNS policy data only — no email verification or inbox checking is performed.","failureModes":["Domain has no CAA records (returns empty result, meaning any CA may issue)","Invalid or malformed domain name input returns an error","Domain does not exist in DNS (NXDOMAIN) may return empty or error","Network timeout if DNS resolution is slow","Private or internal domains not resolvable via public DNS will return no data"],"whenToPreferThis":"Use this endpoint when you need to programmatically determine which certificate authorities are permitted to issue TLS/SSL certificates for a domain, as defined by its CAA DNS records. Ideal for security audits, pre-issuance CA eligibility checks, compliance verification, and third-party domain due diligence. It is a pure DNS lookup — choose it over general DNS tools when you specifically need CAA record data for PKI policy purposes.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-02T12:44:28.384Z","isFirstParty":false,"canonicalSlug":"certificate-authority-policy-lookup-caa-dns-records-5588c06a"}