Confirms a publisher controls a domain by checking for a DNS TXT record
the owner publishes under `_tunnelmind.{domain}`. A DNS record can only
be set by whoever controls the zone, so its presence proves control — a
stronger signal than ads.txt, which is just a file anything in the
request path can serve.
Use this tool when:
- You want proof a publisher actually owns the domain it claims.
- You are distinguishing publishers who have opted into Sigil verification.
Inputs:
- `domain` (query, required): Publisher domain. `www.` and scheme stripped.
Returns:
- `verified`: true (record found), false (absent), or null (DNS lookup failed).
- `expected`: the exact TXT record the owner must publish to verify.
- `found_records`: TXT values currently present at `_tunnelmind.{domain}`.
- `checked_at`: ISO 8601 timestamp of the live DNS lookup.
Cost:
- Counts as one request against the daily rate limit.
Latency:
- Typical: <300ms (one DNS-over-HTTPS lookup).
Connector