# DKIM Selector 1 Public Key Lookup

> DKIM Selector 1 Public Key Lookup is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-19).

Looks up and parses the DKIM public key for the '1' selector of a given domain by querying 1._domainkey.<domain> via Cloudflare DNS-over-HTTPS

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/dkim/1?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-19
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dkim-selector-1-public-key-lookup-176dd4ae
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_DNrerzypdyg6DzM7MUJkb

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dkim-selector-1-public-key-lookup-176dd4ae
```

Example prompt: Can you check the DKIM record for selector '1' on example.com and tell me if the key is valid, what type it is, how long it is, and whether it's been revoked?

## When to prefer this

Use this endpoint when you specifically need to verify or inspect the DKIM configuration for the selector named '1' — a common default selector used by many email service providers and self-hosted mail servers. Choose this over generic DNS TXT lookups because it automatically parses all DKIM-specific fields (key type, length, testing flag, revocation) rather than returning raw text.

## Known failure modes

- Domain does not exist — DNS lookup fails with NXDOMAIN
- No DKIM record found at 1._domainkey.<domain> — record missing
- DKIM record is malformed and cannot be parsed
- Empty p= field — key is revoked, verification will fail
- Cloudflare DoH timeout or network error
- Domain input missing or invalid format

## How this service works

DKIM public key for selector "1" of a domain: looks up 1._domainkey.<domain> (TXT, Cloudflare DoH) and parses v=, k=, key type, public-key length, testing flag and whether the key is revoked (empty p=). Confirms that mail signed with the 1 selector will verify. $0.01 per lookup.

## Output

Returns parsed details from the DKIM TXT record at 1._domainkey.<domain>, including: DKIM version (v=), key type (k=, e.g. rsa or ed25519), the raw public key, public key bit length, whether the testing flag is set, and whether the key is revoked (empty p= field). Indicates if mail signed with the '1' selector will pass verification.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dkim-selector-1-public-key-lookup-176dd4ae/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)