{"uid":"cap_nLXPkdT_kSFFrVdHezv08","slug":"dns-caa-issue-record-lookup-706a5491","name":"DNS CAA Issue Record Lookup","description":"Call when an agent needs CAA records whose tag is issue, not issuewild. Exact $0.003 USDC. Prefer unpaid POST /v1/sandbox/dns-caa-issue first.","url":"https://agentshelf.syntexa.ch/v1/dns-caa-issue?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"hostname":{"type":"string","examples":["example.com"],"maxLength":253,"minLength":1,"description":"Public DNS hostname such as example.com. Not a URL, not an IP literal, and not a private name."}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.003","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.003/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_uCP_Osp1dkSrVWFpX7Meu","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.003","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Retrieves DNS CAA records with the 'issue' tag (not 'issuewild') for a given hostname","exampleAgentPrompt":"Can you look up the CAA 'issue' DNS records for example.com and tell me which certificate authorities are authorized to issue SSL certificates for it?","exampleUseCases":[{"title":"Pre-issuance CA authorization check","prompt":"Before I request a TLS certificate from Let's Encrypt, can you check the CAA issue records for mybusiness.com to make sure Let's Encrypt is actually authorized to issue certs there?"},{"title":"Security audit of domain CA policy","prompt":"I'm auditing the DNS security configuration for api.acmecorp.net — can you pull all the CAA issue records so I know which certificate authorities are explicitly permitted?"},{"title":"Troubleshooting certificate issuance failure","prompt":"My SSL certificate request for shop.example.org failed and I think it might be a CAA record problem — can you fetch the CAA issue records for that domain so I can see what's configured?"}],"resultDescription":"Returns the CAA DNS records for the given hostname where the tag is 'issue', indicating which certificate authorities are explicitly authorized to issue standard (non-wildcard) certificates for the domain.","failureModes":["Hostname not found or does not exist — empty or error response","Hostname exceeds 253 characters — validation error","No CAA records present for the hostname — empty result set","DNS resolution timeout — service may return an error","Malformed hostname input — request rejected"],"whenToPreferThis":"Use this endpoint when you specifically need CAA records tagged 'issue' (standard cert issuance, not wildcard). Choose this over general DNS lookup tools when the agent workflow requires a paid, reliable, structured CAA-issue-only result. Use the free sandbox POST /v1/sandbox/dns-caa-issue first for testing before incurring the $0.003 USDC charge.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-24T00:53:31.039Z","isFirstParty":false,"canonicalSlug":"dns-caa-issue-record-lookup-706a5491"}