CAA Record Parser API
Overview
To use CAA Record Parser, you need an API key. You can get one by creating a free account and visiting your dashboard.
POST Endpoint
https://api.apiverve.com/v1/caaparserExample
How to call the CAA Record Parser API in different programming languages.
curl -X POST \
"https://api.apiverve.com/v1/caaparser" \
-H "X-API-Key: your_api_key_here" \
-H "Content-Type: application/json" \
-d '{
"record": "example.com. 3600 IN CAA 0 issue \"letsencrypt.org\""
}'const response = await fetch('https://api.apiverve.com/v1/caaparser', {
method: 'POST',
headers: {
'X-API-Key': 'your_api_key_here',
'Content-Type': 'application/json'
},
body: JSON.stringify({
"record": "example.com. 3600 IN CAA 0 issue \"letsencrypt.org\""
})
});
const data = await response.json();
console.log(data);import requests
headers = {
'X-API-Key': 'your_api_key_here',
'Content-Type': 'application/json'
}
payload = {
"record": "example.com. 3600 IN CAA 0 issue \"letsencrypt.org\""
}
response = requests.post('https://api.apiverve.com/v1/caaparser', headers=headers, json=payload)
data = response.json()
print(data)package main
import (
"fmt"
"io"
"net/http"
"bytes"
"encoding/json"
)
func main() {
payload := map[string]interface{}{
"record": "example.com. 3600 IN CAA 0 issue "letsencrypt.org""
}
jsonPayload, _ := json.Marshal(payload)
req, _ := http.NewRequest("POST", "https://api.apiverve.com/v1/caaparser", bytes.NewBuffer(jsonPayload))
req.Header.Set("X-API-Key", "your_api_key_here")
req.Header.Set("Content-Type", "application/json")
client := &http.Client{}
resp, err := client.Do(req)
if err != nil {
panic(err)
}
defer resp.Body.Close()
body, _ := io.ReadAll(resp.Body)
fmt.Println(string(body))
}{
"status": "ok",
"error": null,
"data": {
"raw_record": "example.com. 3600 IN CAA 0 issue \"letsencrypt.org\"",
"parsed": {
"domain": "example.com",
"ttl": 3600,
"class": "IN",
"flags": 0,
"tag": "issue",
"value": "letsencrypt.org"
},
"ca_info": {
"name": "Let's Encrypt",
"type": "Free",
"wildcard_support": true
},
"interpretation": {
"meaning": "Only letsencrypt.org is authorized to issue certificates",
"restriction": "Restricted to specific CA",
"critical": false,
"critical_explanation": "Non-critical - CA may proceed if not understood"
},
"tag_description": "Authorizes a CA to issue certificates (any type)",
"is_valid": true
}
}Authentication
The CAA Record Parser API requires authentication via API key. Include your API key in the request header:
X-API-Key: your_api_key_hereInteractive API Playground
Test the CAA Record Parser API directly in your browser with live requests and responses.
Parameters
The following parameters are available for the CAA Record Parser API:
Parse CAA Record
| Parameter | Type | Required | Description | Default | Example |
|---|---|---|---|---|---|
record | string | required | The CAA record string to parse | - |
Response
The CAA Record Parser API returns responses in JSON, XML, YAML, and CSV formats. The JSON response is shown in the Example section above; alternative formats below.
Other Response Formats
<?xml version="1.0" encoding="UTF-8"?>
<response>
<status>ok</status>
<error xsi:nil="true" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"/>
<data>
<raw_record>example.com. 3600 IN CAA 0 issue "letsencrypt.org"</raw_record>
<parsed>
<domain>example.com</domain>
<ttl>3600</ttl>
<class>IN</class>
<flags>0</flags>
<tag>issue</tag>
<value>letsencrypt.org</value>
</parsed>
<ca_info>
<name>Let's Encrypt</name>
<type>Free</type>
<wildcard_support>true</wildcard_support>
</ca_info>
<interpretation>
<meaning>Only letsencrypt.org is authorized to issue certificates</meaning>
<restriction>Restricted to specific CA</restriction>
<critical>false</critical>
<critical_explanation>Non-critical - CA may proceed if not understood</critical_explanation>
</interpretation>
<tag_description>Authorizes a CA to issue certificates (any type)</tag_description>
<is_valid>true</is_valid>
</data>
</response>
status: ok
error: null
data:
raw_record: example.com. 3600 IN CAA 0 issue "letsencrypt.org"
parsed:
domain: example.com
ttl: 3600
class: IN
flags: 0
tag: issue
value: letsencrypt.org
ca_info:
name: Let's Encrypt
type: Free
wildcard_support: true
interpretation:
meaning: Only letsencrypt.org is authorized to issue certificates
restriction: Restricted to specific CA
critical: false
critical_explanation: Non-critical - CA may proceed if not understood
tag_description: Authorizes a CA to issue certificates (any type)
is_valid: true
| key | value |
|---|---|
| raw_record | example.com. 3600 IN CAA 0 issue letsencrypt.org |
| parsed | {domain:example.com,ttl:3600,class:IN,flags:0,tag:issue,value:letsencrypt.org} |
| ca_info | {name:Let's Encrypt,type:Free,wildcard_support:true} |
| interpretation | {meaning:Only letsencrypt.org is authorized to issue certificates,restriction:Restricted to specific CA,critical:false,critical_explanation:Non-critical - CA may proceed if not understood} |
| tag_description | Authorizes a CA to issue certificates (any type) |
| is_valid | true |
Response Structure
All API responses follow a consistent structure with the following fields:
| Field | Type | Description | Example |
|---|---|---|---|
status | string | Indicates whether the request was successful ("ok") or failed ("error") | ok |
error | string | null | Contains error message if status is "error", otherwise null | null |
data | object | null | Contains the API response data if successful, otherwise null | {...} |
Learn more about response formats →
Response Data Fields
When the request is successful, the data object contains the following fields:
| Field | Type | Sample Value | Description |
|---|---|---|---|
raw_record | string | The original CAA record string provided for parsing | |
parsed | object | - | |
â”” domain | string | Domain name extracted from the CAA record | |
â”” ttl | number | Time-to-live value in seconds for the CAA record | |
â”” class | string | DNS class designation, typically IN for internet | |
â”” flags | number | CAA record flags value indicating record criticality | |
â”” tag | string | CAA tag type such as issue, issuewild, or iodef | |
â”” value | string | Value associated with the CAA tag | |
ca_infoPremium | object | Information about the recognized Certificate Authority | |
â”” name | string | Recognized Certificate Authority name if identified | |
â”” type | string | Certificate Authority type classification such as Free or Commercial | |
â”” wildcard_support | boolean | Indicates if the CA supports wildcard certificate issuance | |
interpretationPremium | object | Detailed interpretation and security analysis of CAA record | |
â”” meaning | string | Human-readable explanation of what the CAA record authorizes | |
â”” restriction | string | Description of access restrictions imposed by this CAA record | |
â”” critical | boolean | Indicates if the critical flag is set on the CAA record | |
â”” critical_explanation | string | Explanation of critical flag behavior and implications | |
tag_descriptionPremium | string | Description of the CAA tag purpose and behavior | |
is_valid | boolean | Validation status indicating if the CAA record is properly formatted |
Headers
Only X-API-Key is required. Optional headers include Accept for response format negotiation (JSON, XML, or YAML), User-Agent, and X-Request-ID for request tracing. See all request headers →
GraphQL AccessALPHA
Access CAA Record Parser through GraphQL to combine it with other API calls in a single request. Query only the caa record parser data you need with precise field selection, and orchestrate complex data fetching workflows.
Credit Cost: Each API called in your GraphQL query consumes its standard credit cost.
POST https://api.apiverve.com/v1/graphqlquery {
caaparser(
input: {
record: "example.com. 3600 IN CAA 0 issue "letsencrypt.org""
}
) {
raw_record
parsed {
domain
ttl
class
flags
tag
value
}
ca_info {
name
type
wildcard_support
}
interpretation {
meaning
restriction
critical
critical_explanation
}
tag_description
is_valid
}
}Note: Authentication is handled via the x-api-key header in your GraphQL request, not as a query parameter.
CORS Support
The CAA Record Parser API accepts cross-origin requests from any origin, so it can be called directly from browser-based applications without a proxy. See CORS support →
Rate Limiting
CAA Record Parser requests are throttled per minute on the Free plan and unthrottled on paid plans. Exceeding the limit returns 429 Too Many Requests; rate-limit usage is reported in the X-RateLimit-Limit, X-RateLimit-Remaining, and X-RateLimit-Reset response headers. See per-plan limits and best practices →
Error Codes
The CAA Record Parser API uses standard HTTP status codes — 200 on success, 400 for invalid parameters, 401 for missing or invalid keys, 403 for insufficient credits, 429 for rate-limit exhaustion, and 500/503 for server-side issues. Each error response includes an X-Request-ID header you can quote when contacting support. See full error handling guide →
SDKs for CAA Record Parser
Official CAA Record Parser packages on npm, PyPI, NuGet, and JitPack — plus a Postman collection and an OpenAPI spec. See the SDK guide →
No-Code Integrations
CAA Record Parser works with Zapier, Make, Pipedream, n8n, and Power Automate using the same API key. See setup guides →
Frequently Asked Questions
How do I get an API key for CAA Record Parser?
How many credits does CAA Record Parser cost?
Each successful CAA Record Parser API call consumes credits based on plan tier. Check the pricing section above for the exact credit cost. Failed requests and errors don't consume credits, so you only pay for successful caa record parser lookups.
Can I use CAA Record Parser in production?
The free plan is for testing and development only. For production use of CAA Record Parser, upgrade to a paid plan (Starter, Pro, or Mega) which includes commercial use rights, no attribution requirements, and guaranteed uptime SLAs. All paid plans are production-ready.
Can I use CAA Record Parser from a browser?
What happens if I exceed my CAA Record Parser credit limit?
When you reach your monthly credit limit, CAA Record Parser API requests will return an error until you upgrade your plan or wait for the next billing cycle. You'll receive notifications at 80% and 95% usage to give you time to upgrade if needed.








