# lint_dns_zone

> Lint a DNS zone this account owns for hygiene problems a health check misses: a CNAME at the apex or shadowing other records, dangling CNAMEs, more than one SPF…

- Tier: R
- Required scope: read:dns
- Annotations: readOnlyHint, idempotentHint, openWorldHint
- Docs: https://api.inleed.com/tools/lint-dns-zone

## Description

Lint a DNS zone this account owns for hygiene problems a health check misses: a CNAME at the apex or shadowing other records, dangling CNAMEs, more than one SPF record, an MX or NS pointing at a CNAME or a bare IP, duplicate records, wildcards, out-of-range TTLs. Returns typed `findings[]` (`error` breaks RFC or delivery, `warning` is probably a mistake, `notice` is worth knowing), per-severity `counts` and `ok` (no errors). For the "does the site point here / can it receive mail" verdict use `check_dns_health`; for the raw records use `list_dns_records`.

## Input schema

- `input` — string (required). A domain, email address, website URL, numeric service id, or hosting-account username the customer actually owns. Resolved to the owning account automatically; the resolved target is echoed back in the response.

## Example call

```json
{
  "name": "lint_dns_zone",
  "arguments": {
    "input": "example.se"
  }
}
```