# DKIM Selector Check

> DKIM Selector Check is a paid API for AI agents from intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-09-14).

Tests common DKIM selectors against a domain and returns any public keys found, enabling email authentication auditing.

## Facts

- Endpoint: GET https://intel.rallylive.ca/email/dkim
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dkim-selector-check-aba4b434
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_9SchODvNvoxz07ZWmw-wd

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dkim-selector-check-aba4b434
```

Example prompt: Can you check what DKIM selectors are active for example.com and show me any public keys you find?

## When to prefer this

Use this endpoint when you need to audit or verify DKIM email authentication for a domain without manually querying DNS for each selector name. It is especially useful when you don't know which email provider a domain uses, since it tests all major selectors (Google, Microsoft 365, SendGrid, Mailchimp, Mandrill, etc.) automatically. Prefer this over raw DNS lookups when you need a comprehensive sweep of likely selectors in a single call.

## Known failure modes

- Domain does not exist or has no DNS records — returns empty or error result
- No DKIM selectors found for any common selector names — returns empty key list
- Invalid domain format provided — returns validation error
- Network timeout reaching authoritative DNS — returns timeout error
- Custom selector not found — returns not found for that selector

## How this service works

DKIM check for a domain: tests the most common DKIM selectors (google, selector1/selector2 for Microsoft 365, default, k1, mail, dkim, s1, s2, mandrill, mailchimp, sendgrid, zoho, amazonses and more) or a selector you give as domain:selector, and returns any public keys found. Email authentication audit. $0.01 per domain.

## Output

A list of DKIM selectors probed against the domain, indicating which selectors returned valid DNS TXT records along with the associated public key data for each found selector. Selectors with no record are indicated as missing or not found.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dkim-selector-check-aba4b434/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from intel.rallylive.ca](https://www.zero.xyz/host/intel.rallylive.ca/llms.txt)