CAA Record ParserCAA Record Parser API

OnlineCredit Usage:1 per callLive Data
avg: 267ms|p50: 253ms|p75: 277ms|p90: 305ms|p99: 363ms

Overview

To use CAA Record Parser, you need an API key. You can get one by creating a free account and visiting your dashboard.

POST Endpoint

URL
https://api.apiverve.com/v1/caaparser

Example

How to call the CAA Record Parser API in different programming languages.

cURL Request
curl -X POST \
  "https://api.apiverve.com/v1/caaparser" \
  -H "X-API-Key: your_api_key_here" \
  -H "Content-Type: application/json" \
  -d '{
  "record": "example.com. 3600 IN CAA 0 issue \"letsencrypt.org\""
}'
JavaScript (Fetch API)
const response = await fetch('https://api.apiverve.com/v1/caaparser', {
  method: 'POST',
  headers: {
    'X-API-Key': 'your_api_key_here',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    "record": "example.com. 3600 IN CAA 0 issue \"letsencrypt.org\""
})
});

const data = await response.json();
console.log(data);
Python (Requests)
import requests

headers = {
    'X-API-Key': 'your_api_key_here',
    'Content-Type': 'application/json'
}

payload = {
    "record": "example.com. 3600 IN CAA 0 issue \"letsencrypt.org\""
}

response = requests.post('https://api.apiverve.com/v1/caaparser', headers=headers, json=payload)

data = response.json()
print(data)
Go (net/http)
package main

import (
    "fmt"
    "io"
    "net/http"
    "bytes"
    "encoding/json"
)

func main() {
    payload := map[string]interface{}{
        "record": "example.com. 3600 IN CAA 0 issue "letsencrypt.org""
    }

    jsonPayload, _ := json.Marshal(payload)
    req, _ := http.NewRequest("POST", "https://api.apiverve.com/v1/caaparser", bytes.NewBuffer(jsonPayload))

    req.Header.Set("X-API-Key", "your_api_key_here")
    req.Header.Set("Content-Type", "application/json")

    client := &http.Client{}
    resp, err := client.Do(req)
    if err != nil {
        panic(err)
    }
    defer resp.Body.Close()

    body, _ := io.ReadAll(resp.Body)
    fmt.Println(string(body))
}
Example Response
{
  "status": "ok",
  "error": null,
  "data": {
    "raw_record": "example.com. 3600 IN CAA 0 issue \"letsencrypt.org\"",
    "parsed": {
      "domain": "example.com",
      "ttl": 3600,
      "class": "IN",
      "flags": 0,
      "tag": "issue",
      "value": "letsencrypt.org"
    },
    "ca_info": {
      "name": "Let's Encrypt",
      "type": "Free",
      "wildcard_support": true
    },
    "interpretation": {
      "meaning": "Only letsencrypt.org is authorized to issue certificates",
      "restriction": "Restricted to specific CA",
      "critical": false,
      "critical_explanation": "Non-critical - CA may proceed if not understood"
    },
    "tag_description": "Authorizes a CA to issue certificates (any type)",
    "is_valid": true
  }
}

Authentication

The CAA Record Parser API requires authentication via API key. Include your API key in the request header:

Required Header
X-API-Key: your_api_key_here

Learn more about authentication →

Interactive API Playground

Test the CAA Record Parser API directly in your browser with live requests and responses.

Parameters

The following parameters are available for the CAA Record Parser API:

Parse CAA Record

ParameterTypeRequiredDescriptionDefaultExample
recordstringrequired
The CAA record string to parse
-example.com. 3600 IN CAA 0 issue "letsencrypt.org"

Response

The CAA Record Parser API returns responses in JSON, XML, YAML, and CSV formats. The JSON response is shown in the Example section above; alternative formats below.

Other Response Formats

XML Response
200 OK
<?xml version="1.0" encoding="UTF-8"?>
<response>
  <status>ok</status>
  <error xsi:nil="true" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"/>
  <data>
    <raw_record>example.com. 3600 IN CAA 0 issue &quot;letsencrypt.org&quot;</raw_record>
    <parsed>
      <domain>example.com</domain>
      <ttl>3600</ttl>
      <class>IN</class>
      <flags>0</flags>
      <tag>issue</tag>
      <value>letsencrypt.org</value>
    </parsed>
    <ca_info>
      <name>Let&apos;s Encrypt</name>
      <type>Free</type>
      <wildcard_support>true</wildcard_support>
    </ca_info>
    <interpretation>
      <meaning>Only letsencrypt.org is authorized to issue certificates</meaning>
      <restriction>Restricted to specific CA</restriction>
      <critical>false</critical>
      <critical_explanation>Non-critical - CA may proceed if not understood</critical_explanation>
    </interpretation>
    <tag_description>Authorizes a CA to issue certificates (any type)</tag_description>
    <is_valid>true</is_valid>
  </data>
</response>
YAML Response
200 OK
status: ok
error: null
data:
  raw_record: example.com. 3600 IN CAA 0 issue "letsencrypt.org"
  parsed:
    domain: example.com
    ttl: 3600
    class: IN
    flags: 0
    tag: issue
    value: letsencrypt.org
  ca_info:
    name: Let's Encrypt
    type: Free
    wildcard_support: true
  interpretation:
    meaning: Only letsencrypt.org is authorized to issue certificates
    restriction: Restricted to specific CA
    critical: false
    critical_explanation: Non-critical - CA may proceed if not understood
  tag_description: Authorizes a CA to issue certificates (any type)
  is_valid: true
CSV Response
200 OK
keyvalue
raw_recordexample.com. 3600 IN CAA 0 issue letsencrypt.org
parsed{domain:example.com,ttl:3600,class:IN,flags:0,tag:issue,value:letsencrypt.org}
ca_info{name:Let's Encrypt,type:Free,wildcard_support:true}
interpretation{meaning:Only letsencrypt.org is authorized to issue certificates,restriction:Restricted to specific CA,critical:false,critical_explanation:Non-critical - CA may proceed if not understood}
tag_descriptionAuthorizes a CA to issue certificates (any type)
is_validtrue

Response Structure

All API responses follow a consistent structure with the following fields:

FieldTypeDescriptionExample
statusstringIndicates whether the request was successful ("ok") or failed ("error")ok
errorstring | nullContains error message if status is "error", otherwise nullnull
dataobject | nullContains the API response data if successful, otherwise null{...}

Learn more about response formats →

Response Data Fields

When the request is successful, the data object contains the following fields:

Response fields marked with Premium are available exclusively on paid plans.View pricing
FieldTypeSample ValueDescription
raw_recordstring"example.com. 3600 IN CAA 0 issue "letsencrypt.org""
The original CAA record string provided for parsing
parsedobject{...}
-
â”” domainstring"example.com"
Domain name extracted from the CAA record
â”” ttlnumber3600
Time-to-live value in seconds for the CAA record
â”” classstring"IN"
DNS class designation, typically IN for internet
â”” flagsnumber0
CAA record flags value indicating record criticality
â”” tagstring"issue"
CAA tag type such as issue, issuewild, or iodef
â”” valuestring"letsencrypt.org"
Value associated with the CAA tag
ca_infoPremiumobject{...}
Information about the recognized Certificate Authority
â”” namestring"Let's Encrypt"
Recognized Certificate Authority name if identified
â”” typestring"Free"
Certificate Authority type classification such as Free or Commercial
â”” wildcard_supportbooleantrue
Indicates if the CA supports wildcard certificate issuance
interpretationPremiumobject{...}
Detailed interpretation and security analysis of CAA record
â”” meaningstring"Only letsencrypt.org is authorized to issue certificates"
Human-readable explanation of what the CAA record authorizes
â”” restrictionstring"Restricted to specific CA"
Description of access restrictions imposed by this CAA record
â”” criticalbooleanfalse
Indicates if the critical flag is set on the CAA record
â”” critical_explanationstring"Non-critical - CA may proceed if not understood"
Explanation of critical flag behavior and implications
tag_descriptionPremiumstring"Authorizes a CA to issue certificates (any type)"
Description of the CAA tag purpose and behavior
is_validbooleantrue
Validation status indicating if the CAA record is properly formatted

Headers

Only X-API-Key is required. Optional headers include Accept for response format negotiation (JSON, XML, or YAML), User-Agent, and X-Request-ID for request tracing. See all request headers →

GraphQL AccessALPHA

Access CAA Record Parser through GraphQL to combine it with other API calls in a single request. Query only the caa record parser data you need with precise field selection, and orchestrate complex data fetching workflows.

Test CAA Record Parser in the GraphQL Explorer to confirm availability and experiment with queries.

Credit Cost: Each API called in your GraphQL query consumes its standard credit cost.

GraphQL Endpoint
POST https://api.apiverve.com/v1/graphql
GraphQL Query Example
query {
  caaparser(
    input: {
      record: "example.com. 3600 IN CAA 0 issue "letsencrypt.org""
    }
  ) {
    raw_record
    parsed {
      domain
      ttl
      class
      flags
      tag
      value
    }
    ca_info {
      name
      type
      wildcard_support
    }
    interpretation {
      meaning
      restriction
      critical
      critical_explanation
    }
    tag_description
    is_valid
  }
}

Note: Authentication is handled via the x-api-key header in your GraphQL request, not as a query parameter.

CORS Support

The CAA Record Parser API accepts cross-origin requests from any origin, so it can be called directly from browser-based applications without a proxy. See CORS support →

Rate Limiting

CAA Record Parser requests are throttled per minute on the Free plan and unthrottled on paid plans. Exceeding the limit returns 429 Too Many Requests; rate-limit usage is reported in the X-RateLimit-Limit, X-RateLimit-Remaining, and X-RateLimit-Reset response headers. See per-plan limits and best practices →

Error Codes

The CAA Record Parser API uses standard HTTP status codes — 200 on success, 400 for invalid parameters, 401 for missing or invalid keys, 403 for insufficient credits, 429 for rate-limit exhaustion, and 500/503 for server-side issues. Each error response includes an X-Request-ID header you can quote when contacting support. See full error handling guide →

SDKs for CAA Record Parser

Official CAA Record Parser packages on npm, PyPI, NuGet, and JitPack — plus a Postman collection and an OpenAPI spec. See the SDK guide →

No-Code Integrations

CAA Record Parser works with Zapier, Make, Pipedream, n8n, and Power Automate using the same API key. See setup guides →

Frequently Asked Questions

How do I get an API key for CAA Record Parser?
Sign up for a free account at dashboard.apiverve.com. Your API key will be automatically generated and available in your dashboard. The same key works for CAA Record Parser and all other APIVerve APIs. The free plan includes 1,000 credits plus a 500 credit bonus.
How many credits does CAA Record Parser cost?

Each successful CAA Record Parser API call consumes credits based on plan tier. Check the pricing section above for the exact credit cost. Failed requests and errors don't consume credits, so you only pay for successful caa record parser lookups.

Can I use CAA Record Parser in production?

The free plan is for testing and development only. For production use of CAA Record Parser, upgrade to a paid plan (Starter, Pro, or Mega) which includes commercial use rights, no attribution requirements, and guaranteed uptime SLAs. All paid plans are production-ready.

Can I use CAA Record Parser from a browser?
Yes! The CAA Record Parser API supports CORS with wildcard configuration, so you can call it directly from browser-based JavaScript without needing a proxy server. See the CORS section above for details.
What happens if I exceed my CAA Record Parser credit limit?

When you reach your monthly credit limit, CAA Record Parser API requests will return an error until you upgrade your plan or wait for the next billing cycle. You'll receive notifications at 80% and 95% usage to give you time to upgrade if needed.

What's Next?

Continue your journey with these recommended resources

Was this page helpful?