# Get DNS zone DNSSEC

`GET /v1/service/@service_id/dns/@zone_id/dnssec` · scope `dns:read`

Whether DNSSEC is turned on for the DNS zone.

## HTTP request

| Item | Value |
| --- | --- |
| URL | `https://api.tino.vn/v1/service/@service_id/dns/@zone_id/dnssec` |
| Method | `GET` |
| Scope | `dns:read` |
| Header | `Authorization: Bearer <token>` |
| Content-Type | — (no body) |
| Tokens that can call it | app tokens (`tinoat_`), personal API tokens (`tinopat_`) |

## Parameters

| Name | In | Type | Required | Description |
| --- | --- | --- | --- | --- |
| `service_id` | path | integer | yes | DNS service ID |
| `zone_id` | path | integer | yes | DNS zone ID |

## Example request

```bash
curl "https://api.tino.vn/v1/service/100003/dns/500001/dnssec" \
  -H "Authorization: Bearer $TINO_TOKEN"
```

`$TINO_TOKEN` is a token with the scope `dns:read`. Path parameters in the example are sample values.

SDK ([SDK & examples](/en/docs/sdk)): Python `client.dns.get_zone_dnssec(service_id, zone_id)`, Node.js `await client.dns.getZoneDnssec(serviceId, zoneId);`, PHP `$client->dns->getZoneDnssec($serviceId, $zoneId);`.

## Example response

```json
{
 "dnssec": false
}
```

Live sample from a test account with personal data masked; long arrays and strings are trimmed (`… N more item(s)`, `… N more line(s)`).