validate_dnssec

shallow

ai.intodns/scanner · Verify this server

Read-only DNSSEC chain validation. Walks the DS/DNSKEY chain from root, checks signatures, algorithm strength, key rollover state, and reports any broken links or unsigned zones. Returns chain steps, algorithm grades, and a boolean `valid`. Use when a domain claims DNSSEC; use lookup_dns(type='DNSKEY') for raw key data only. Single HTTP GET, no auth, no destructive actions.

100.0/100

1 trials · measured 8 days ago

validate_dnssec scores 100.0/100 on Vouch's measured behaviour index, from 1 real invocation trials against ai.intodns/scanner, measured 25 Aug 2026 under methodology v0.2.0. Every measured component scored 100.

Component breakdown

ComponentWeightValue
Reliability35%not applicable
Schema integrity25%100.0
Failure behaviour15%not applicable
Latency15%not applicable
Concurrency10%not applicable

Tool details

Transport
remote + stdio
Credential class
open
Category
Communication
Input schema
not declared
Output schema
not declared
Side-effect classification
unclassified

Score history

DayScoreTierMethodology
2026-08-25100.0shallowv0.2.0

Probe evidence

ProbeOutcomes
schema_integritypass: 1

Raw request/response logs are not archived yet — the outcome counts above are drawn directly from every recorded trial.

Embed this score

Available for every tool, scored or not — not a verification perk. Always links back to this page.

Vouch score: validate_dnssec
[![Vouch score](https://vouch.tools/api/tools/9b0a6f3b-d439-45c9-8924-7038defac0d3/badge.svg)](https://vouch.tools/tools/9b0a6f3b-d439-45c9-8924-7038defac0d3)
validate_dnssec — Vouch