# DKIM Selector CM Lookup

> DKIM Selector CM Lookup is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-20).

Looks up and parses the DKIM public key for the 'cm' selector of a given domain via Cloudflare DNS-over-HTTPS, returning key metadata including type, length, testing flag, and revocation status.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/dkim/cm?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-20
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dkim-selector-cm-lookup-14d4936d
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_F1V6avAzkkFDqfE23Ekc8

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dkim-selector-cm-lookup-14d4936d
```

Example prompt: Can you check if the DKIM 'cm' selector is properly configured for example.com — I want to know the key type, length, and whether it's active or revoked?

## When to prefer this

Use this endpoint specifically when you need to inspect the DKIM configuration for the 'cm' selector (e.g. used by Campaign Monitor or similar ESPs). It is purpose-built for that exact selector and parses all relevant DKIM fields automatically. Prefer it over generic DNS TXT lookups when you need structured DKIM-specific output including key length, type, testing flag, and revocation status without writing your own parser.

## Known failure modes

- Domain not found or no DNS resolution — returns NXDOMAIN or empty result
- No DKIM TXT record published for cm._domainkey.<domain> — returns no records found
- Malformed TXT record that cannot be parsed — may return partial data or parse error
- Key is revoked (empty p=) — returned as a valid response indicating revocation
- Network or Cloudflare DoH timeout — request may fail with a connectivity error

## How this service works

DKIM public key for selector "cm" of a domain: looks up cm._domainkey.<domain> (TXT, Cloudflare DoH) and parses v=, k=, key type, public-key length, testing flag and whether the key is revoked (empty p=). Confirms that mail signed with the cm selector will verify. $0.01 per lookup.

## Output

Returns parsed details of the cm._domainkey.<domain> TXT record: DKIM version (v=), key type (k=, e.g. rsa or ed25519), public key length in bits, whether the key is in testing mode, and whether the key is revoked (empty p= value). Confirms whether mail signed with the cm selector will pass verification.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dkim-selector-cm-lookup-14d4936d/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)