# DKIM Selector 2 Public Key Lookup

> DKIM Selector 2 Public Key Lookup is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-20).

Looks up and parses the DKIM public key for selector '2' of a given domain (2._domainkey.<domain>) via Cloudflare DoH, returning key metadata including type, length, testing flag, and revocation status.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/dkim/2?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-20
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dkim-selector-2-public-key-lookup-383a9b20
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_py2XzCoxCwOpTn7eijBGe

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dkim-selector-2-public-key-lookup-383a9b20
```

Example prompt: Can you check if DKIM selector 2 is properly set up for example.com — I want to know the key type, length, and whether it's revoked or in testing mode?

## When to prefer this

Use this endpoint when you specifically need to validate or inspect the DKIM public key for selector '2' of a domain. Prefer this over generic DNS TXT lookups when you need parsed DKIM metadata (key type, length, revocation status) rather than the raw record. Ideal for email deliverability checks, security audits, and DKIM configuration debugging when the sending domain uses selector '2'.

## Known failure modes

- Domain does not have a 2._domainkey TXT record (NXDOMAIN or NOERROR with no records)
- DKIM record is revoked (empty p= field) — reported but treated as valid lookup
- Malformed TXT record that cannot be parsed into DKIM fields
- DNS resolution failure via Cloudflare DoH
- Domain input missing or invalid format

## How this service works

DKIM public key for selector "2" of a domain: looks up 2._domainkey.<domain> (TXT, Cloudflare DoH) and parses v=, k=, key type, public-key length, testing flag and whether the key is revoked (empty p=). Confirms that mail signed with the 2 selector will verify. $0.01 per lookup.

## Output

Returns parsed DKIM TXT record details for the '2' selector including: the raw TXT record, version tag (v=), key type (k=, e.g. rsa), public key (p=), public key bit length, whether the key is revoked (empty p=), and whether the testing flag (t=y) is set. Indicates whether mail signed with selector 2 will successfully verify.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dkim-selector-2-public-key-lookup-383a9b20/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)