# DKIM Microsoft Selector Lookup

> DKIM Microsoft Selector Lookup is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-20).

Looks up and parses the DKIM public key for the 'microsoft' selector (microsoft._domainkey.<domain>) of any given domain, returning key metadata including type, length, testing flag, and revocation status.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/dkim/microsoft?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-20
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dkim-microsoft-selector-lookup-1200a850
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_X7UQuoy77xilte0GqgF2H

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dkim-microsoft-selector-lookup-1200a850
```

Example prompt: Can you look up the DKIM microsoft selector for contoso.com and tell me if the key is valid, what type it is, how long it is, and whether it's been revoked?

## When to prefer this

Use this endpoint when you specifically need to verify or audit the Microsoft DKIM selector (used by Microsoft 365 / Exchange Online) for a domain. It is purpose-built for the 'microsoft' selector and parses all key metadata in a single call, making it preferable to generic DNS TXT lookups when you need structured DKIM details rather than raw record text. Choose it over sibling selectors (email, mailgun, s2, etc.) when the domain is expected to use Microsoft's email infrastructure.

## Known failure modes

- Domain has no microsoft._domainkey TXT record — returns not found or empty result
- DNS lookup fails due to NXDOMAIN or timeout
- DKIM record exists but is malformed or unparseable
- Key is revoked (empty p=) — endpoint reports revocation rather than a usable key
- Domain input missing or invalid — request fails validation

## How this service works

DKIM public key for selector "microsoft" of a domain: looks up microsoft._domainkey.<domain> (TXT, Cloudflare DoH) and parses v=, k=, key type, public-key length, testing flag and whether the key is revoked (empty p=). Confirms that mail signed with the microsoft selector will verify. $0.01 per lookup.

## Output

Returns parsed details from the microsoft._domainkey.<domain> TXT DNS record, including the DKIM version tag (v=), key type (k=), public key material, key length in bits, whether the domain is in testing mode (t=y), and whether the key is revoked (empty p= value). Confirms whether email signed with the microsoft selector will pass DKIM verification.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dkim-microsoft-selector-lookup-1200a850/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)