{"uid":"cap_g9IxzQJpvIxNiHGqkBoQW","slug":"how-is-dnssec-validation-check-e0d6a05c","name":"how.is DNSSEC Validation Check","description":"Whether DNSSEC is signed and validates for a domain.","url":"https://how.is/v1/domain/dnssec?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"domain":{"type":"string","maxLength":253,"description":"A bare domain name, e.g. example.com"}}},"responseSchema":{"type":"json","example":{"data":{"_shape":"data.data: isSigned, isValid, validationStatus, chainOfTrust, dsRecords, dnskeyRecords, errors, warnings, recommendations."},"result":"DNSSEC for the requested subject","receipt":{"rail":"x402","tool":"dnssec","charge_usd":0.005,"settlement_tx":"0x…"}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.005","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_YAbH9Cz59P1xPTluKQ59S","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Checks whether DNSSEC is signed and validates correctly for a given domain, including chain of trust and DS/DNSKEY records.","exampleAgentPrompt":"Can you check if DNSSEC is properly signed and validates correctly for cloudflare.com — I want to see the chain of trust and any DS or DNSKEY records.","exampleUseCases":[{"title":"Pre-launch DNS security audit","prompt":"Before we go live, can you verify that DNSSEC is properly signed and validates end-to-end for mybusiness.com? I want to know the validation status and see any warnings or recommendations."},{"title":"Diagnosing DNSSEC misconfiguration","prompt":"Users are reporting DNS resolution failures for ourplatform.io — can you check whether DNSSEC is correctly configured and tell me if the chain of trust is broken anywhere?"},{"title":"Third-party vendor domain vetting","prompt":"We're about to integrate with a payment processor at paymentco.net — can you confirm their DNSSEC is signed and valid so I know their DNS hasn't been tampered with?"}],"resultDescription":"Returns a JSON object indicating whether the domain has DNSSEC signed (isSigned), whether it validates correctly (isValid), a validationStatus string, the full chainOfTrust, the DS records, DNSKEY records, and any errors, warnings, or recommendations found during validation.","failureModes":["Domain does not exist or is not registered — may return empty or error state","Domain has no DNSSEC records — isSigned will be false","DNSSEC is signed but chain of trust is broken — isValid false with errors","Malformed domain input exceeding 253 characters — input validation error","Transient DNS resolver issues may cause intermittent validation failures"],"whenToPreferThis":"Use this endpoint when you need to programmatically verify DNSSEC configuration for a domain — especially before trusting DNS-resolved addresses for payment, authentication, or sensitive API integrations. Prefer this over manual dig/delv commands when operating in an automated agent workflow. It provides structured output including chain of trust details, DS and DNSKEY records, and actionable recommendations in a single call.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-31T18:38:54.307Z","isFirstParty":false,"canonicalSlug":"how-is-dnssec-validation-check-e0d6a05c"}