CAA Record Check
caa_checkCheck which Certificate Authorities are authorized to issue TLS certificates for a domain by querying its CAA DNS records.
Instructions
Check a domain's CAA (Certification Authority Authorization) records — which CAs are allowed to issue TLS certificates for it. Absence means any CA may issue.
Args:
domain (string): the domain to check.
response_format ('markdown' | 'json'): output format (default 'markdown').
Returns: { found, issue[], issuewild[], iodef[] }.
Example: "Which CAs can issue certs for google.com?" -> caa_check(domain="google.com").
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | Domain to query, e.g. 'example.com'. | |
| response_format | No | Output format: 'markdown' for a human-readable summary (default) or 'json' for the full structured payload. | markdown |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | ||
| found | Yes | ||
| issue | Yes | ||
| issuewild | Yes | ||
| iodef | Yes |