Give it domains. For each it resolves the core DNS records over keyless DoH and runs best-practice checks - does it resolve, enough diverse nameservers, DNSSEC, CAA, IPv6, SPF/DMARC present - into a health signal with findings. Read-only public DNS, agent-callable. One search per call (result caps in the input schema); failed lookups are not charged.

Payment Options