{"uid":"cap_x8Ag3MZWqqUsdcrX5w9tv","slug":"agentshelf-dns-caa-iodef-record-lookup-ace0e104","name":"AgentShelf DNS CAA IODEF Record Lookup","description":"Call when an agent needs CAA records whose tag is iodef. Exact $0.005 USDC. Prefer unpaid POST /v1/sandbox/dns-caa-iodef first.","url":"https://agentshelf.syntexa.ch/v1/dns-caa-iodef?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"hostname":{"type":"string","examples":["example.com"],"maxLength":253,"minLength":1,"description":"Public DNS hostname such as example.com. Not a URL, not an IP literal, and not a private name."}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.005","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_ZGWsyKb1nUJGrvgs9BgT8","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Retrieves DNS CAA records with the 'iodef' tag for a given hostname, enabling agents to discover certificate authority incident reporting endpoints.","exampleAgentPrompt":"Can you look up the CAA iodef DNS records for syntexa.ch so I can see where certificate authority incident reports should be sent?","exampleUseCases":[{"title":"Security audit of certificate reporting endpoints","prompt":"I'm auditing the PKI setup for our company domain corp-example.com — can you fetch the CAA iodef records so I can verify we have incident reporting configured correctly?"},{"title":"Checking misissuance report destination","prompt":"Where would a certificate authority send an iodef incident report for cloudflare.com? Can you pull the CAA iodef DNS records for that domain?"},{"title":"Verifying CA authorization before cert issuance","prompt":"Before we issue a TLS certificate, can you check the CAA iodef records for api.example.org to confirm the domain has incident reporting URLs set up?"}],"resultDescription":"Returns the DNS CAA records tagged with 'iodef' for the queried hostname, typically including URLs (mailto: or https:) where certificate authorities should send incident reports in case of misissuance or policy violations.","failureModes":["Domain has no CAA records at all — empty result returned","Domain has CAA records but none with the iodef tag — empty result","Invalid or malformed hostname input — validation error","DNS resolution failure or timeout — service error","Non-existent domain (NXDOMAIN) — error or empty response"],"whenToPreferThis":"Use this endpoint when you specifically need CAA records scoped to the 'iodef' tag (incident reporting endpoints), rather than all CAA records or other CAA tags like 'issue' or 'issuewild'. Suitable when performing security audits, PKI configuration checks, or verifying certificate authority incident reporting setup for a domain.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-22T18:45:30.721Z","isFirstParty":false,"canonicalSlug":"agentshelf-dns-caa-iodef-record-lookup-ace0e104"}