DNS Lookup API

GET

Read any domain's DNS records from your code in one call.

DNS Lookup retrieves published DNS records for any domain, including IPv4 (A), IPv6 (AAAA), and mail exchange (MX) servers. It provides hostnames, priorities, and dual-stack status flags, while paid plans add TXT, CNAME, and nameserver records.

Try it — live request, no key required

Request

GETapi.apiverve.com/v1/dnslookup?domain=myspace.com

Query parameters

domainstring

Verification

Format

No key required to try it. Get a key to use it in your app.

Example

{
  "status": "ok",
  "error": null,
  "data": {
    "domain": "google.com",
    "records": {
      "A": [
        "172.253.156.100",
        "172.253.156.113",
        "172.253.156.101",
        "172.253.156.139",
        "172.253.156.138",
        "172.253.156.102"
      ],
      "AAAA": [
        "2607:f8b0:4023:100d::65",
        "2607:f8b0:4023:100d::8a",
        "2607:f8b0:4023:100d::71",
        "2607:f8b0:4023:100d::64"
      ],
      "CNAME": null,
      "MX": [
        {
          "exchange": "smtp.google.com",
          "priority": 10
        }
      ],
      "NS": [
        "ns4.google.com",
        "ns3.google.com",
        "ns2.google.com",
        "ns1.google.com"
      ],
      "PTR": null,
      "SRV": null,
      "SOA": {
        "nsname": "ns1.google.com",
        "hostmaster": "dns-admin.google.com",
        "serial": 1005474929,
        "refresh": 900,
        "retry": 900,
        "expire": 1800,
        "minttl": 60
      },
      "TXT": [
        [
          "onetrust-domain-verification=0d477fe608074e6f9c12bca7826035cc"
        ],
        [
          "work-accounts-domain-verification=Tcj6JjIMZOw2KsSEw2Nt2rLae89tN6"
        ],
        [
          "google-site-verification=wD8N7i1JTNTkezJ49swvWW48f8_9xveREV4oB-0Hf5o"
        ],
        [
          "Z29vZ2xl"
        ],
        [
          "globalsign-smime-dv=CDYX+XFHUw2wml6/Gb8+59BsH31KzUr6c1l2BPvqKX8="
        ],
        [
          "arcules-domain-verification=2R4t5G7nI6tRCo61lpxxbLksPYstxhGmtV75cpr8x9K"
        ],
        [
          "v=spf1 include:_spf.google.com ~all"
        ],
        [
          "_r4rd1pvwyrpi7sw4a3hzmw8e51yh9td"
        ],
        [
          "apple-domain-verification=30afIBcvSuDV2PLX"
        ],
        [
          "onetrust-domain-verification=6d685f1d41a94696ad7ef771f68993e0"
        ],
        [
          "facebook-domain-verification=22rm551cu4k0ab0bxsw536tlds4h95"
        ],
        [
          "google-site-verification=TV9-DBe4R80X4v0M4U_bd_J9cpOJM0nikft0jAgjmsQ"
        ],
        [
          "MS=E4A68B9AB2BB9670BCE15412F62916164C0B20BB"
        ],
        [
          "docusign=05958488-4752-4ef2-95eb-aa7ba8a3bd0e"
        ],
        [
          "google-site-verification=4ibFUgB-wXLQ_S7vsXVomSTVamuOXBiVAzpR5IZ87D0"
        ],
        [
          "docusign=1b0a6754-49b1-4db5-8540-d2c12664b289"
        ],
        [
          "cisco-ci-domain-verification=47c38bc8c4b74b7233e9053220c1bbe76bcc1cd33c7acf7acd36cd6a5332004b"
        ]
      ],
      "CAA": [
        {
          "critical": 0,
          "issue": "pki.goog"
        }
      ]
    },
    "ttl": {
      "A": 10,
      "AAAA": 2,
      "CNAME": null,
      "MX": 74,
      "NS": 15382,
      "PTR": null,
      "SRV": null,
      "SOA": 25,
      "TXT": 300,
      "CAA": 21600
    },
    "summary": {
      "hasIPv6": true,
      "hasMailServers": true,
      "hasSPF": true
    }
  }
}

Start from a template — a working app you can deploy in a minute

DNS Lookup

A domain’s DNS records: where it points, who handles its mail, and more.

Deploy to Vercel See the template →

About the DNS Lookup API

A DNS lookup API for checking a domain's records from code, the nslookup or dig step in onboarding, email and migration checks. Send a domain or hostname and DNS Lookup queries its records live and returns them as JSON, with flags for IPv6, mail servers and SPF. Every plan gets A, AAAA and MX records with priorities; paid plans add CNAME, NS, SOA and TXT records.

What people use it for

Mail Delivery Verification: To verify email destination readiness, onboarding systems query incoming domain MX records and priority values before routing outbound messages.
Dual-Stack Infrastructure Auditing: DevOps engineers inspect IPv4 and IPv6 addresses across client domains to confirm dual-stack network reachability and detect missing AAAA entries.
Domain Migration Monitoring: When moving web infrastructure to new hosts, deployment pipelines check resolving A and MX records in real time to verify DNS propagation.
Custom Domain Onboarding: Hosting platforms query target domains during customer onboarding to verify that resolved IP addresses point to designated web servers.

Ways to call it

One endpoint, many ways in — REST with JSON, XML, YAML and CSV, plus GraphQL and an MCP interface for AI agents.

JSON: Default REST response
XML: Markup format
YAML: Human-readable
CSV: Tabular export
GraphQL: Query language
MCP: For AI agents

View all integrations →

Other ways to use DNS Lookup

Same data, same APIVerve account, same credit balance — one key works on all of them.

Give it to an AI agentConnect over MCP and your agent calls it as a native tool — Claude, Cursor, ChatGPT.on VerveKit Google Sheets or ExcelA =VERVE() formula fills a column — no script, no export, recalculates in place.on VerveSheets Ground an agent on itA cited, machine-checkable fact your model can't produce on its own.on VerveContext

Questions.

Common questions about the DNS Lookup API.

Read the docs →

Which DNS record types does the lookup return?

The query returns standard records including A, AAAA, and MX records with priority values, along with summary flags for IPv6 and mail server readiness. Upgrading to a paid plan adds CNAME, NS, TXT, and full SOA zone configuration details.

Can I look up a subdomain or a full URL?

Send a hostname without https:// or a path. Subdomains such as api.github.com work and return their own records, which is often just A or CNAME; MX, NS, SOA and TXT records usually live on the root domain, so query example.com for those.

Are TXT and nameserver records included on the Free plan?

No, CNAME, NS, SOA, and TXT records require a paid plan, as does the summary flag for SPF verification. The Free plan provides A, AAAA, and MX records, while any paid subscription unlocks the full set of records.

Which plan fits checking 10,000 domains a month?

The Starter plan is sufficient. Each query costs 6 credits, giving you up to 33,333 lookups each month, which works out to about $0.90 per 1,000 calls. The Free plan includes 33 lookups per month for testing.

How fresh is the returned DNS information?

Records are resolved live when you call. Repeat lookups of the same domain within about three minutes can be answered from a short cache, so a record you just changed may take a few minutes to show, on top of whatever TTL the domain's own nameservers set.

Can I use this DNS data in a commercial product?

Yes, you can integrate and display the returned DNS records inside your own commercial tools or dashboards on any paid plan. The Free plan is restricted to non-commercial evaluation, and direct resale of the raw data is not permitted.

Request parameters — GET /v1/dnslookup

Sent in the query string. Premium parameters are accepted on every plan but only take effect on plans that include them. Anything not listed here is dropped rather than passed through.

Required

Parameter	Type	Example	Description
`domain`Required	string	`myspace.com`	The domain or DNS name to look up, without the protocol. Underscore names work too, such as _dmarc.example.com or _sip._tcp.example.com length 0-253

Optional

Parameter	Type	Example	Description
`type`Optional	string	`A,MX,TXT`	Comma-separated record types to look up. Leave it out for A, AAAA, CNAME, MX, NS, PTR, SRV, SOA, TXT and CAA. HTTPS, SVCB, TLSA, NAPTR, DS and DNSKEY are returned only when named here `AAAAACNAMEMXNSPTRSRVSOA`+8

Example request

1
2

curl "https://api.apiverve.com/v1/dnslookup?domain=myspace.com&type=A%2CMX%2CTXT" \
  -H "x-api-key: YOUR_API_KEY"

Authentication

Send your key in the x-api-key header. That is the only auth step — no token exchange, and no per-endpoint scope to configure.

Header	When	Value
`x-api-key`Required	Every request	Your API key. Header names are case-insensitive, so `X-API-Key` is the same header.
`Authorization`Alternate	Instead of the above	`Bearer <key>` — for clients that only expose bearer auth. Resolves to the same account and the same billing.

401 is the only auth verdict

A 401 means the key is missing, invalid or expired. A 403 means the key is valid but not permitted here — blocked by a key restriction or an IP allow-list. Running out of credits is a 429.

Response — GET /v1/dnslookup

Every APIVerve endpoint returns the same three top-level keys, so one response handler covers your whole integration: status, error and data. Only data changes shape.

Sample response

{
  "status": "ok",
  "error": null,
  "data": {
    "domain": "google.com",
    "records": {
      "A": [
        "172.253.156.100",
        "172.253.156.113",
        "172.253.156.101",
        "172.253.156.139",
        "172.253.156.138",
        "172.253.156.102"
      ],
      "AAAA": [
        "2607:f8b0:4023:100d::65",
        "2607:f8b0:4023:100d::8a",
        "2607:f8b0:4023:100d::71",
        "2607:f8b0:4023:100d::64"
      ],
      "CNAME": null,
      "MX": [
        {
          "exchange": "smtp.google.com",
          "priority": 10
        }
      ],
      "NS": [
        "ns4.google.com",
        "ns3.google.com",
        "ns2.google.com",
        "ns1.google.com"
      ],
      "PTR": null,
      "SRV": null,
      "SOA": {
        "nsname": "ns1.google.com",
        "hostmaster": "dns-admin.google.com",
        "serial": 1005474929,
        "refresh": 900,
        "retry": 900,
        "expire": 1800,
        "minttl": 60
      },
      "TXT": [
        [
          "onetrust-domain-verification=0d477fe608074e6f9c12bca7826035cc"
        ],
        [
          "work-accounts-domain-verification=Tcj6JjIMZOw2KsSEw2Nt2rLae89tN6"
        ],
        [
          "google-site-verification=wD8N7i1JTNTkezJ49swvWW48f8_9xveREV4oB-0Hf5o"
        ],
        [
          "Z29vZ2xl"
        ],
        [
          "globalsign-smime-dv=CDYX+XFHUw2wml6/Gb8+59BsH31KzUr6c1l2BPvqKX8="
        ],
        [
          "arcules-domain-verification=2R4t5G7nI6tRCo61lpxxbLksPYstxhGmtV75cpr8x9K"
        ],
        [
          "v=spf1 include:_spf.google.com ~all"
        ],
        [
          "_r4rd1pvwyrpi7sw4a3hzmw8e51yh9td"
        ],
        [
          "apple-domain-verification=30afIBcvSuDV2PLX"
        ],
        [
          "onetrust-domain-verification=6d685f1d41a94696ad7ef771f68993e0"
        ],
        [
          "facebook-domain-verification=22rm551cu4k0ab0bxsw536tlds4h95"
        ],
        [
          "google-site-verification=TV9-DBe4R80X4v0M4U_bd_J9cpOJM0nikft0jAgjmsQ"
        ],
        [
          "MS=E4A68B9AB2BB9670BCE15412F62916164C0B20BB"
        ],
        [
          "docusign=05958488-4752-4ef2-95eb-aa7ba8a3bd0e"
        ],
        [
          "google-site-verification=4ibFUgB-wXLQ_S7vsXVomSTVamuOXBiVAzpR5IZ87D0"
        ],
        [
          "docusign=1b0a6754-49b1-4db5-8540-d2c12664b289"
        ],
        [
          "cisco-ci-domain-verification=47c38bc8c4b74b7233e9053220c1bbe76bcc1cd33c7acf7acd36cd6a5332004b"
        ]
      ],
      "CAA": [
        {
          "critical": 0,
          "issue": "pki.goog"
        }
      ]
    },
    "ttl": {
      "A": 10,
      "AAAA": 2,
      "CNAME": null,
      "MX": 74,
      "NS": 15382,
      "PTR": null,
      "SRV": null,
      "SOA": 25,
      "TXT": 300,
      "CAA": 21600
    },
    "summary": {
      "hasIPv6": true,
      "hasMailServers": true,
      "hasSPF": true
    }
  }
}

Response fields

Paths are relative to data. Premium fields are absent rather than zeroed on plans that do not include them, so check for presence instead of comparing to 0.

Field	Type	Example	Description
`domain`	string	`"google.com"`	The domain name that was queried
`records`	object	`{...}`	Object containing all DNS records for the domain
`A`	array	`[172.253.156.100, ...]`	IPv4 address records for the domain
`AAAA`	array	`[2607:f8b0:4023:100d::65, ...]`	IPv6 address records for the domain
`CNAME`Premium	object	`null`	Canonical name alias records
`MX`	array[1]		Mail exchange server records with priority
`exchange`	string	`"smtp.google.com"`	Mail server hostname
`priority`	number	`10`	Priority level for the mail server
`NS`Premium	array	`[ns4.google.com, ...]`	Nameserver records for the domain
`PTR`	object	`null`	Pointer records published at this name
`SRV`	object	`null`	Service records, published at names such as _sip._tcp.example.com
`SOA`Premium	object	`{...}`	Start of Authority record with DNS zone info
`nsname`Premium	string	`"ns1.google.com"`	Primary nameserver hostname
`hostmaster`Premium	string	`"dns-admin.google.com"`	Email address of domain administrator
`serial`Premium	number	`1005474929`	Serial number for zone version tracking
`refresh`Premium	number	`900`	Secondary server refresh interval in seconds
`retry`Premium	number	`900`	Retry interval for failed transfers
`expire`Premium	number	`1800`	Zone expiration time in seconds
`minttl`Premium	number	`60`	Minimum time to live for records
`TXT`Premium	array	`Array of arrays`	Text records including SPF, DKIM, verification data
`CAA`	array[1]		Certificate Authority Authorization records: which CAs may issue certificates. Each entry has critical plus its tag (issue, issuewild or iodef) as the key
`critical`	number	`0`
`issue`	string	`"pki.goog"`
`ttl`Premium	object	`{...}`	Seconds each record type stays cached, keyed by type (lowest in the set), as a public resolver serves it: it counts down from the zone's configured TTL while cached. null for a type with no records
`A`Premium	number	`10`
`AAAA`Premium	number	`2`
`CNAME`Premium	object	`null`
`MX`Premium	number	`74`
`NS`Premium	number	`15382`
`PTR`Premium	object	`null`
`SRV`Premium	object	`null`
`SOA`Premium	number	`25`
`TXT`Premium	number	`300`
`CAA`Premium	number	`21600`
`summary`	object	`{...}`	At-a-glance flags derived from the records above
`hasIPv6`	boolean	`true`	Whether the domain publishes any AAAA (IPv6) records — indicates dual-stack readiness
`hasMailServers`	boolean	`true`	Whether the domain publishes any MX records — indicates it is configured to receive email
`hasSPF`Premium	boolean	`true`	Whether a TXT record starting with v=spf1 is present — a coarse email-authentication posture flag (use the SPF Validator to parse it)

Response headers

Every response carries your balance, so your own code always knows where it stands without polling anything. All four are exposed to browsers through CORS.

Header	What it carries
`x-api-remaining-credits`	Credits left in the current cycle
`x-api-credits-used`	Credits spent in the current cycle
`x-api-max-credits`	The allowance for the cycle
`x-api-version`	Version of the endpoint that answered

Errors

Read the HTTP status first, then error for the specific reason. The body names the parameter that has to change.

Status	Meaning	What to do
`400`	Input was rejected	Read `error`; it names the parameter that has to change.
`401`	Key missing or invalid	Check the header name and the key value.
`403`	Key valid, but not permitted here	A key restriction or an IP allow-list — never a bad key.
`429`	Rate limited, or out of credits	Read `error` to tell them apart, then back off or top up.

What a call costs — 6 credits per call

Credits are shared across every APIVerve API — one balance, one key, one bill. Failed requests never count against it, so a rejected input costs nothing.

Plan	Per month	Credits	DNS Lookup calls	Per 1,000 calls
Free	Free	200	33	Free
Starter	$29.99	200,000	33,333	$0.90
Pro	$99.99	1,000,000	166,666	$0.60
Mega	$299.99	4,000,000	666,666	$0.45

Calls are what the credits buy at this API's rate — spend them here, on any of the other APIs, or across both. Nothing is reserved per endpoint.

Compare all pricing tiers →

Call it from cURL — GET /v1/dnslookup

No SDK to install — this is a plain HTTPS call to /v1/dnslookup with your key in the x-api-key header. Swap in a real key and it runs as-is.

cURL

1
2

curl "https://api.apiverve.com/v1/dnslookup" \
  -H "x-api-key: YOUR_API_KEY"

Resources

GitHubapiverve/dnslookup-apiSource, issues and the examples this page is built from.ReferenceDNS Lookup API docsEvery parameter, every response field, and the errors.ParametersWhat this call acceptsRequired and optional inputs, with example values.

Also published for

@apiverve/dnslookupnpm apiverve-dnslookupPyPI APIVerve.API.DNSLookupNuGet

Only the languages APIVerve ships a client for are listed — the rest call the endpoint directly over HTTPS.

Call it from Node.js — GET /v1/dnslookup

Install the Node.js SDK, then call the DNS Lookup API with your key. The client wraps the same HTTPS request, so anything it returns is what the endpoint returns.

Install — npm

npm install @apiverve/dnslookup

Node.js

const res = await fetch("https://api.apiverve.com/v1/dnslookup", {
  headers: { "x-api-key": "YOUR_API_KEY" },
});
const { data } = await res.json();
console.log(data);

Resources

npm@apiverve/dnslookupThe published Node.js client, versioned and signed.GitHubapiverve/dnslookup-apiSource, issues and the examples this page is built from.ReferenceDNS Lookup API docsEvery parameter, every response field, and the errors.ParametersWhat this call acceptsRequired and optional inputs, with example values.

Also published for

apiverve-dnslookupPyPI APIVerve.API.DNSLookupNuGet

Only the languages APIVerve ships a client for are listed — the rest call the endpoint directly over HTTPS.

Call it from Python — GET /v1/dnslookup

Install the Python SDK, then call the DNS Lookup API with your key. The client wraps the same HTTPS request, so anything it returns is what the endpoint returns.

Install — PyPI

pip install apiverve-dnslookup

Python

import requests

res = requests.get(
    "https://api.apiverve.com/v1/dnslookup",
    headers={"x-api-key": "YOUR_API_KEY"},
)
print(res.json()["data"])

Resources

PyPIapiverve-dnslookupThe published Python client, versioned and signed.GitHubapiverve/dnslookup-apiSource, issues and the examples this page is built from.ReferenceDNS Lookup API docsEvery parameter, every response field, and the errors.ParametersWhat this call acceptsRequired and optional inputs, with example values.

Also published for

@apiverve/dnslookupnpm APIVerve.API.DNSLookupNuGet

Only the languages APIVerve ships a client for are listed — the rest call the endpoint directly over HTTPS.

Call it from C# / .NET — GET /v1/dnslookup

Install the C# / .NET SDK, then call the DNS Lookup API with your key. The client wraps the same HTTPS request, so anything it returns is what the endpoint returns.

Install — NuGet

dotnet add package APIVerve.API.DNSLookup

C# / .NET

using var client = new HttpClient();
client.DefaultRequestHeaders.Add("x-api-key", "YOUR_API_KEY");

var json = await client.GetStringAsync("https://api.apiverve.com/v1/dnslookup");
Console.WriteLine(json);

Resources

NuGetAPIVerve.API.DNSLookupThe published C# / .NET client, versioned and signed.GitHubapiverve/dnslookup-apiSource, issues and the examples this page is built from.ReferenceDNS Lookup API docsEvery parameter, every response field, and the errors.ParametersWhat this call acceptsRequired and optional inputs, with example values.

Also published for

@apiverve/dnslookupnpm apiverve-dnslookupPyPI

Only the languages APIVerve ships a client for are listed — the rest call the endpoint directly over HTTPS.

Call it from Go — GET /v1/dnslookup

No SDK to install — this is a plain HTTPS call to /v1/dnslookup with your key in the x-api-key header. Swap in a real key and it runs as-is.

req, _ := http.NewRequest("GET", "https://api.apiverve.com/v1/dnslookup", nil)
req.Header.Set("x-api-key", "YOUR_API_KEY")

res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))

Resources

Also published for

@apiverve/dnslookupnpm apiverve-dnslookupPyPI APIVerve.API.DNSLookupNuGet

Only the languages APIVerve ships a client for are listed — the rest call the endpoint directly over HTTPS.

Call it from PHP — GET /v1/dnslookup

No SDK to install — this is a plain HTTPS call to /v1/dnslookup with your key in the x-api-key header. Swap in a real key and it runs as-is.

PHP

$ch = curl_init("https://api.apiverve.com/v1/dnslookup");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, ["x-api-key: YOUR_API_KEY"]);

$response = curl_exec($ch);
echo $response;

Resources

Also published for

@apiverve/dnslookupnpm apiverve-dnslookupPyPI APIVerve.API.DNSLookupNuGet

Only the languages APIVerve ships a client for are listed — the rest call the endpoint directly over HTTPS.

Call it from Ruby — GET /v1/dnslookup

No SDK to install — this is a plain HTTPS call to /v1/dnslookup with your key in the x-api-key header. Swap in a real key and it runs as-is.

Ruby

require "net/http"

uri = URI("https://api.apiverve.com/v1/dnslookup")
req = Net::HTTP::Get.new(uri)
req["x-api-key"] = "YOUR_API_KEY"

res = Net::HTTP.start(uri.hostname, uri.port, use_ssl: true) { |h| h.request(req) }
puts res.body

Resources

Also published for

@apiverve/dnslookupnpm apiverve-dnslookupPyPI APIVerve.API.DNSLookupNuGet

Only the languages APIVerve ships a client for are listed — the rest call the endpoint directly over HTTPS.

All articles →

DNS Lookups: A Developer's Debugging GuideDNS problems cause connection failures and email issues. Learn how to use DNS lookups to diagnose problems faster.Read

The DNS Migration Checklist Nobody Talks AboutDNS propagation takes 24-48 hours. Except when it doesn't. Here's the zero-downtime DNS migration checklist.Read

Why Your API Integration Keeps BreakingAPIs break in production. Here's why it happens and how to build integrations that survive the real world.Read

DNS Lookup API

Try it — live request, no key required

Start from a template — a working app you can deploy in a minute

DNS Lookup

About the DNS Lookup API

What people use it for

Ways to call it

Other ways to use DNS Lookup

Questions.

Request parameters — GET /v1/dnslookup

Required

Optional

Authentication

Response — GET /v1/dnslookup

Response fields

Response headers

Errors

What a call costs — 6 credits per call

Call it from cURL — GET /v1/dnslookup

Resources

Also published for

Call it from Node.js — GET /v1/dnslookup

Resources

Also published for

Call it from Python — GET /v1/dnslookup

Resources

Also published for

Call it from C# / .NET — GET /v1/dnslookup

Resources

Also published for

Call it from Go — GET /v1/dnslookup

Resources

Also published for

Call it from PHP — GET /v1/dnslookup

Resources

Also published for

Call it from Ruby — GET /v1/dnslookup

Resources

Also published for

Zero-code embed — one snippet, no backend

Changelog — DNS Lookup API

Domain Data

Related articles

Ready to build with DNS Lookup? Start with 200 free credits — one key unlocks all 300+ APIs.

Explore the catalog