# DKIM Selector CC Public Key Lookup

> DKIM Selector CC Public Key Lookup is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-20).

Looks up and parses the DKIM public key for the 'cc' selector of a given domain, revealing key type, length, testing status, and revocation state.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/dkim/cc?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-20
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dkim-selector-cc-public-key-lookup-77974c04
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_wYBCOl3xgwCg81YPwCOmG

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dkim-selector-cc-public-key-lookup-77974c04
```

Example prompt: Can you check the DKIM 'cc' selector for example.com and tell me if the public key is valid, what key type and length it uses, and whether it's been revoked or is in testing mode?

## When to prefer this

Use this endpoint when you specifically need to inspect the 'cc' DKIM selector for a domain — for example when diagnosing DKIM failures from a service that uses the cc selector, auditing domain email security posture, or confirming a newly published cc DKIM key. Prefer this over generic DNS TXT lookups because it automatically parses all DKIM-specific fields and flags revocation and testing states.

## Known failure modes

- Domain has no cc._domainkey TXT record — returns not found or empty result
- Key is revoked (empty p= field) — returns revoked status
- DNS resolution fails via Cloudflare DoH — returns lookup error
- Malformed TXT record that cannot be parsed — returns parse error
- Domain does not exist — returns NXDOMAIN or equivalent
- Rate limiting or payment failure for $0.01 USDC charge

## How this service works

DKIM public key for selector "cc" of a domain: looks up cc._domainkey.<domain> (TXT, Cloudflare DoH) and parses v=, k=, key type, public-key length, testing flag and whether the key is revoked (empty p=). Confirms that mail signed with the cc selector will verify. $0.01 per lookup.

## Output

Returns parsed details from the cc._domainkey.<domain> TXT record including: v= version tag, k= key type (e.g. rsa), public key length in bits, whether the testing flag is set, and whether the key is revoked (empty p= field). Also confirms whether mail signed with the cc selector will successfully verify.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dkim-selector-cc-public-key-lookup-77974c04/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)