{"uid":"cap_qq-XrCDeDnFxf98uGaxe3","slug":"dns-sshfp-via-nextdns-029a6d7c","name":"dns-sshfp-via-nextdns","description":"SSHFP records for a domain as answered by NextDNS (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resolvers to spot propagation lag, filtering or split-horizon answers. $0.01 per lookup.","url":"https://dns.intel.rallylive.ca/dns/sshfp/via/nextdns?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","properties":{}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_XOGXLG-92qjLQQEamhuQl","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Looks up SSHFP DNS records for a domain using NextDNS (DNS-over-HTTPS) and returns the records, TTL, response code, DNSSEC validation status, and resolver answer time.","exampleAgentPrompt":"What SSHFP records does NextDNS return for example.com? I want to see the TTL, response code, whether DNSSEC was validated, and how fast the resolver answered.","exampleUseCases":[{"title":"Verify SSH fingerprint DNS propagation","prompt":"Check if NextDNS has picked up the new SSHFP records I just published for ssh.mycompany.com — show me the records, TTL, and whether DNSSEC validated correctly."},{"title":"Compare resolver SSHFP filtering","prompt":"I suspect NextDNS is filtering SSHFP records for bastion.example.org — can you query it via NextDNS and tell me the response code and what records come back, so I can compare against Cloudflare?"},{"title":"Security audit of SSH fingerprint records","prompt":"Pull the SSHFP DNS records for login.example.net through NextDNS and tell me if DNSSEC was validated, what the TTL is, and how quickly NextDNS answered."}],"resultDescription":"Returns the SSHFP DNS records for the queried domain as answered by NextDNS via DNS-over-HTTPS, including the record data (algorithm, fingerprint type, fingerprint), TTL, DNS response code (NOERROR, NXDOMAIN, or SERVFAIL), a boolean indicating whether DNSSEC was validated, and the resolver's answer latency.","failureModes":["Domain does not exist — returns NXDOMAIN response code with empty records","No SSHFP records published for domain — returns NOERROR with empty answer section","Resolver error — returns SERVFAIL response code","Network timeout to NextDNS DoH endpoint — request may fail or time out","DNSSEC validation failure — DNSSEC flag will be false with possible SERVFAIL"],"whenToPreferThis":"Use this endpoint when you specifically need SSHFP records as resolved by NextDNS, such as when comparing resolver behavior across providers, auditing DNSSEC validation for SSH fingerprint records, or debugging propagation issues specific to the NextDNS resolver. Prefer this over generic DNS tools when you need resolver-specific metadata (DNSSEC status, answer time) or want to detect NextDNS filtering or split-horizon behavior.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T18:55:16.302Z","isFirstParty":false,"canonicalSlug":"dns-sshfp-via-nextdns-029a6d7c"}