dnstoolkit
DNS Toolkit API is the most comprehensive DNS and domain intelligence API available — 35 endpoints across 7 categories, all accessible with a single API key. DNS Lookups Query any DNS record type (A, AAAA, MX, CNAME, TXT, NS, SOA, SRV, CAA, and more), perform bulk lookups across multiple domains at once, monitor DNS propagation across 20+ global resolvers, compare results between public…
1 subscribers
9.1/10 popularity
265 ms avg latency
71% success rate
36 endpoints
The in-depth APIMemo review for this API hasn't been published yet —
the data below comes straight from the public marketplace listing.
dnstoolkit endpoints
| Method | Endpoint | Description |
|---|---|---|
| DNS | ||
| GET |
dns_lookup_v1_lookup_get /v1/lookup |
Query DNS records of any type for a domain using the system's default resolver. Returns all matching records with TTL values. |
| GET |
dns_compare_resolvers_v1_compare_resolvers_get /v1/compare-resolvers |
Query a domain across 12 public resolvers (Google, Cloudflare, Quad9, OpenDNS, Control D, AdGuard) and compare responses, TTLs, and latency. Detects DNS poisoning or inconsistent… |
| GET |
dns_idn_v1_idn_get /v1/idn |
Convert internationalized domain names between Unicode and ASCII (Punycode) formats. Detects whether a domain uses internationalized characters and shows per-label breakdown. |
| GET |
dns_propagation_v1_propagation_get /v1/propagation |
Query a domain's DNS records from 20 public resolvers around the world. Returns per-resolver results, response times, and a consistency score showing what percentage of resolvers… |
| POST |
dns_lookup_bulk_v1_lookup_bulk_post /v1/lookup/bulk |
Resolve DNS records for up to 100 domains in a single call. All domains are queried concurrently for maximum speed. |
| GET |
dns_doh_test_v1_doh_test_get /v1/doh-test |
Resolve a domain via 6 DoH providers (Google, Cloudflare, Quad9, OpenDNS, AdGuard, CleanBrowsing) and 4 DoT providers using RFC 8484 wireformat. Compares response times and… |
| GET |
dns_lookup_all_v1_lookup_all_get /v1/lookup/all |
Query all common DNS record types (A, AAAA, CNAME, MX, NS, TXT, SOA, CAA, SRV) for a domain in a single call. Returns only record types that exist. |
| Domain | ||
| GET |
dns_tld_search_v1_tld_search_get /v1/tld-search |
Check if a keyword is available as a domain name across 150+ popular TLDs (.com, .net, .org, .io, .ai, country codes, and industry-specific extensions). Returns lists of… |
| POST |
dns_whois_bulk_v1_whois_bulk_post /v1/whois/bulk |
Look up WHOIS/RDAP data for up to 50 domains in a single call. Returns registrar, dates, nameservers, DNSSEC, and status for each domain. |
| GET |
dns_disposable_v1_disposable_get /v1/disposable |
Detect disposable and temporary email domains (e.g. Mailinator, Guerrilla Mail). Uses a curated list of 100+ known providers plus DNS heuristics (missing MX records, missing A… |
| GET |
dns_domain_age_v1_domain_age_get /v1/domain-age |
Look up a domain's registration date via RDAP and calculate its age. Returns age in days and years, registrar info, and a flag for newly registered domains (< 30 days old). |
| GET |
dns_subdomains_v1_subdomains_get /v1/subdomains |
Check ~120 common subdomain prefixes (www, mail, api, dev, staging, admin, cdn, etc.) via DNS resolution. Returns all subdomains that resolve to an IP or CNAME. |
| GET |
dns_available_v1_available_get /v1/available |
Check domain availability by querying DNS (NXDOMAIN) and RDAP (registration status). Returns registration details if taken, or confirms availability. Also detects pending-delete… |
| POST |
dns_available_bulk_v1_available_bulk_post /v1/available/bulk |
Check availability for up to 50 domains in a single call. Each domain is checked via DNS and RDAP concurrently. Returns per-domain availability, registrar, and expiry details. |
| GET |
dns_whois_v1_whois_get /v1/whois |
Look up domain registration details via RDAP (the modern WHOIS replacement). Returns registrar, creation/expiration dates, nameservers, DNSSEC status, and domain status codes. |
| GET |
dns_associated_v1_associated_get /v1/associated |
Discover a domain's infrastructure relationships: authoritative nameservers, MX hosts, A records, reverse DNS hostnames, and the provider organizations behind the NS and MX… |
| Security | ||
| GET |
dns_typosquat_v1_typosquat_get /v1/typosquat |
Generate domain permutations (omission, swap, replacement, bitsquatting, homoglyphs, TLD swaps, hyphenation) and check which ones actually resolve to an IP address. Helps… |
| GET |
dns_certificate_v1_certificate_get /v1/certificate |
Connect to a domain and inspect its SSL/TLS certificate. Returns issuer, validity dates, days until expiry, SANs, protocol version, cipher suite, and key size. |
| GET |
dns_health_v1_health_get /v1/health |
Comprehensive DNS health check that scores a domain's configuration (0-100). Checks NS redundancy, SOA, A/AAAA records, MX, CAA, SPF, and DMARC. Returns a letter grade (A-F) with… |
| GET |
dns_zone_transfer_v1_zone_transfer_get /v1/zone-transfer |
Attempt a DNS zone transfer (AXFR) against all authoritative nameservers for a domain. Zone transfers should be restricted — if one succeeds, it exposes the entire DNS zone… |
| GET |
dns_dnssec_v1_dnssec_get /v1/dnssec |
Validate a domain's DNSSEC configuration. Checks for DS, DNSKEY, RRSIG, and NSEC/NSEC3 records, then validates the chain of trust via a DNSSEC-aware resolver (Quad9). |
| IP | ||
| GET |
dns_reverse_v1_reverse_get /v1/reverse |
Perform a reverse DNS (PTR) lookup on an IP address and return associated hostname, geolocation, ASN, and organization information. |
| GET |
dns_asn_v1_asn_get /v1/asn |
Look up an IP address to find its ASN (Autonomous System Number), network prefix, organization, ISP, geolocation, and reverse DNS. Uses Team Cymru DNS and ip-api.com for… |
| GET |
dns_blacklist_v1_blacklist_get /v1/blacklist |
Query an IP address against ~30 DNS-based blacklists (Spamhaus, SpamCop, Barracuda, SORBS, etc.) to check if it's flagged for spam, malware, or other abuse. |
| Web | ||
| GET |
dns_redirects_v1_redirects_get /v1/redirects |
Follow the full HTTP redirect chain for a URL. Shows each hop with status codes, detects HTTP-to-HTTPS upgrades, www redirects, and redirect loops. |
| GET |
dns_security_headers_v1_security_headers_get /v1/security-headers |
Grade a website's HTTP security headers (0-100, A-F). Checks HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP, CORP, COEP, and… |
| GET |
dns_port_scan_v1_ports_get /v1/ports |
Check common TCP ports (HTTP, HTTPS, SSH, SMTP, FTP, DNS, databases, etc.) on a host to see which services are accessible. |
| GET |
dns_tech_stack_v1_tech_stack_get /v1/tech-stack |
Fetch HTTP headers from a domain and detect the web server, technology stack (PHP, Node.js, ASP.NET, etc.), and list which security headers are present or missing. |
| Tools | ||
| GET |
dns_ns_performance_v1_ns_performance_get /v1/ns-performance |
Discover a domain's authoritative nameservers and benchmark each one's response time. Returns fastest, slowest, and average latencies. |
| GET |
dns_generate_v1_generate_get /v1/generate |
Generate correctly formatted SPF, DMARC, MTA-STS, BIMI, or TLS-RPT records from simple parameters. No more syntax errors in TXT records. |
| GET |
dns_caa_v1_caa_get /v1/caa |
Look up and analyze CAA records for a domain. Shows which Certificate Authorities are authorized to issue certificates, wildcard policies, and incident reporting (iodef)… |
| GET |
dns_tlsa_v1_tlsa_get /v1/tlsa |
Check for TLSA records (DNS-Based Authentication of Named Entities). DANE/TLSA allows domain owners to pin TLS certificates via DNS, bypassing the CA trust model. Also checks… |
| System | ||
| GET |
status_check_v1_status_get /v1/status |
API status endpoint with version, endpoint count, and uptime. |
| POST |
dns_email_auth_v1_email_auth_post /v1/email-auth |
Validate an email's authenticity by checking SPF, DKIM, and DMARC. Provide raw email headers and optionally the sending IP. The API parses From, Return-Path, and DKIM-Signature… |
| GET |
dns_email_validate_v1_email_validate_get /v1/email-validate |
Validate an email address by checking format, domain existence, MX records, and whether the domain is a known disposable or free email provider. Returns MX server details and IP… |
| GET |
dns_email_security_v1_email_security_get /v1/email-security |
Comprehensive email security audit checking SPF, DMARC, DKIM (common selectors), MTA-STS, TLS-RPT, and BIMI. Returns a score (0-100) and letter grade with detailed findings for… |
dnstoolkit pricing
| Plan | Price | Rate limit | Quotas |
|---|---|---|---|
| BASIC | Free | — |
|
| PRO | $9.99 / month | — |
|
| ULTRA | $49.99 / month | — |
|
