{"uid":"cap_wf0i4bX2v3az90E8RQaau","slug":"dns-dnskey-lookup-via-nextdns-doh-d6580573","name":"DNS DNSKEY Lookup via NextDNS (DoH)","description":"DNSKEY records for a domain as answered by NextDNS (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resolvers to spot propagation lag, filtering or split-horizon answers. $0.01 per lookup.","url":"https://dns.intel.rallylive.ca/dns/dnskey/via/nextdns?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","properties":{}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_SKcqapfJmzDDtet4Lkmay","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Fetches DNSKEY records for a domain using NextDNS as the DNS-over-HTTPS resolver, returning records, TTL, response code, DNSSEC validation status, and answer latency.","exampleAgentPrompt":"Can you look up the DNSKEY records for example.com using NextDNS as the resolver and tell me the records, TTL, response code, and whether DNSSEC was validated?","exampleUseCases":[{"title":"DNSSEC key rollover verification","prompt":"Check the DNSKEY records for cloudflare.com through NextDNS — I want to see what keys are published, their TTL, and whether NextDNS is validating DNSSEC correctly."},{"title":"Resolver propagation lag comparison","prompt":"I'm debugging a DNSSEC issue on my domain newsite.io — can you pull the DNSKEY records as seen by NextDNS and tell me the answer time and response code so I can compare it against other resolvers?"},{"title":"DNSSEC filtering detection","prompt":"Can you query the DNSKEY records for piracy-blocked-domain.com via NextDNS to see if they return a normal NOERROR or if NextDNS is filtering or blocking the response?"}],"resultDescription":"Returns the DNSKEY resource records for the queried domain as answered by NextDNS DoH, including: the record data (public key, flags, protocol, algorithm), TTL value, DNS response code (NOERROR, NXDOMAIN, SERVFAIL), a boolean indicating whether the resolver performed DNSSEC validation, and the resolver's answer latency in milliseconds.","failureModes":["Domain does not exist — NXDOMAIN response code returned","Domain exists but has no DNSKEY records — empty record set with NOERROR","NextDNS filters the domain — may return SERVFAIL or empty response","Network timeout reaching NextDNS DoH endpoint — resolver answer time may be unavailable","Invalid domain format in query parameter — may return an error or empty result"],"whenToPreferThis":"Choose this endpoint when you specifically need DNSKEY records as seen by the NextDNS resolver, particularly to check DNSSEC key publication, validate DNSSEC chain of trust through NextDNS, detect resolver-level filtering of DNSKEY records, or compare NextDNS's DNSKEY answer against other resolver siblings on this platform. Prefer sibling endpoints for other record types (A, TXT, SOA) or other resolvers (AdGuard, Mullvad, DNSPod).","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T18:56:06.755Z","isFirstParty":false,"canonicalSlug":"dns-dnskey-lookup-via-nextdns-doh-d6580573"}