Public DNS lookup API for automated workflows
Retrieve A, AAAA, MX, NS and TXT records through one free JSON endpoint. AUN queries fixed DNS-over-HTTPS providers and returns each record type separately, with status, TTL, source and retrieval time. It does not visit the submitted website.
Example request
curl 'https://agentutility.network/api/dns?domain=example.com'
Supply a public domain name without protocol, path, port or IP address. Unicode domains are converted to their ASCII form. Local/internal names, URLs and IP literals are rejected before a provider lookup. Each admitted snapshot consumes five units even if a result is partial.
Read the response
domain: normalized queried name.delivery_status: complete or partial; inspect each query, not just HTTP 200.queries: one entry for each type, with answered, no_data, nxdomain or provider_error.answers: returned name, numeric type, ttl_seconds and record data; not a fixed IP list.attemptsandfallback_used: resolver attempts for each query.provenance.retrieved_at: snapshot retrieval timestamp, not a guarantee that every record changed then.
Resolver policy and limits
Cloudflare is queried first; Google Public DNS is used on provider errors. No-data and NXDOMAIN are final responses and do not trigger fallback. Each provider attempt has a four-second timeout; record types run concurrently. Responses are bounded to 256 KB per provider response and 100 answers per type. All provider failures return HTTP 502; partial failures can return HTTP 200 with delivery_status partial.
The dnssec_authenticated field reflects the resolver AD flag. It is not independent DNSSEC validation performed by AUN. Different resolvers, caches, geographic locations and retrieval times can return different results.
What this service does not establish
DNS records alone do not prove domain ownership, company identity, website safety, email deliverability or whether a domain can be purchased. An MX record does not prove that a mailbox exists. NXDOMAIN must not be treated as registration availability. A source hash supports byte comparisons, not independent truth certification.
When to use it
Use this endpoint to collect a structured DNS snapshot for a workflow, compare infrastructure observations or inspect record presence. For security or purchasing decisions, combine it with appropriate independent checks. DNS names are sent to the resolvers; avoid confidential internal names.
Free access, quotas and automation
No payment or card is required. Anonymous trials share 100 units per UTC day. Automatically enrolled credentials receive 1,000 units per UTC month, inside the shared 10,000-unit monthly ceiling. These are maximum allowances, not reserved capacity. Usage failures after admission consume units. Rate, concurrency and antiabuse limits apply in addition to quotas: inspect HTTP 429 and Retry-After. See all quotas, privacy and abuse controls, and automatic credentials and scoped delegation.
For AI agents and developers
Use the machine-readable catalog and OpenAPI contract. Available task guides: DOI citation checks, public DNS, and JSON, hash and text utilities.
One live check of four examples records the actual response and timestamp. This is a smoke check, not a quality certification, ongoing monitor or availability guarantee.