{"uid":"cap_dj0zgQps70cCpC4r1P3VL","slug":"dns-tlsa-via-adguard-5f38eca1","name":"dns-tlsa-via-adguard","description":"TLSA records for a domain as answered by AdGuard DNS (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resolvers to spot propagation lag, filtering or split-horizon answers. $0.01 per lookup.","url":"https://dns.intel.rallylive.ca/dns/tlsa/via/adguard?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","properties":{}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_M4-kVDw-ULumrmtqnRAIw","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Retrieves TLSA DNS records for a domain via AdGuard DNS-over-HTTPS, returning records, TTL, response code, DNSSEC validation status, and resolver answer time.","exampleAgentPrompt":"Can you look up the TLSA records for mail.example.com using AdGuard DNS and tell me what records come back, the TTL, whether DNSSEC was validated, and how fast the resolver responded?","exampleUseCases":[{"title":"DANE TLSA certificate pinning audit","prompt":"Check the TLSA records for smtp.mycompany.com via AdGuard DNS — I need to see the record values, TTL, and whether DNSSEC validation passed so I can confirm our DANE setup is correct."},{"title":"Cross-resolver TLSA propagation check","prompt":"I just updated the TLSA records for secure.example.org. Can you query them through AdGuard DNS and tell me if the new records are showing up yet, along with the response code and TTL?"},{"title":"Detect AdGuard TLSA filtering","prompt":"Can you fetch TLSA records for _443._tcp.example.net using AdGuard DNS and let me know if it returns NOERROR or NXDOMAIN? I want to see if AdGuard is filtering or altering the response compared to other resolvers."}],"resultDescription":"Returns the TLSA record set (record values and parameters), TTL, DNS response code (NOERROR, NXDOMAIN, or SERVFAIL), a flag indicating whether AdGuard validated DNSSEC, and the resolver's answer time in milliseconds.","failureModes":["NXDOMAIN returned if the domain or TLSA record does not exist","SERVFAIL returned if the domain is unreachable or DNSSEC validation fails","Empty record set if no TLSA records are published for the queried domain","AdGuard may filter or block certain domains, returning unexpected response codes","Network timeout or slow response if AdGuard DNS is temporarily degraded"],"whenToPreferThis":"Choose this endpoint when you specifically need to query TLSA (DANE) records as seen from AdGuard DNS over HTTPS, particularly to audit DANE/TLS certificate pinning, compare AdGuard's answers against other resolvers for propagation or filtering analysis, or verify DNSSEC validation behavior for TLSA records on AdGuard's resolver.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T18:55:46.882Z","isFirstParty":false,"canonicalSlug":"dns-tlsa-via-adguard-5f38eca1"}