# DKIM Selector 'dkim' Public Key Lookup

> DKIM Selector 'dkim' Public Key Lookup is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-12).

Looks up and parses the DKIM public key for the 'dkim' selector of a given domain via Cloudflare DoH, returning key metadata including type, length, testing flag, and revocation status.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/dkim/dkim?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-12
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dkim-selector-dkim-public-key-lookup-fb64615e
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_HDdYgEuXLhQqmVChW5Qve

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dkim-selector-dkim-public-key-lookup-fb64615e
```

Example prompt: Can you check if the 'dkim' DKIM selector is properly configured for example.com — I want to know the key type, length, and whether it's revoked or in testing mode?

## When to prefer this

Use this endpoint when you specifically need to inspect the 'dkim' DKIM selector for a domain. Prefer this over generic DNS TXT lookup endpoints when you want pre-parsed DKIM fields (key type, length, revocation status, testing flag) rather than raw TXT record data. Best for email deliverability audits, security checks after key rotation, or diagnosing DKIM verification failures for the standard 'dkim' selector name.

## Known failure modes

- Domain has no dkim._domainkey TXT record — returns empty or not-found result
- DKIM record exists but key is revoked (empty p=) — indicated in response
- DNS lookup fails due to Cloudflare DoH unavailability
- Malformed TXT record that cannot be parsed into DKIM fields
- Domain does not exist or has no DNS records

## How this service works

DKIM public key for selector "dkim" of a domain: looks up dkim._domainkey.<domain> (TXT, Cloudflare DoH) and parses v=, k=, key type, public-key length, testing flag and whether the key is revoked (empty p=). Confirms that mail signed with the dkim selector will verify. $0.01 per lookup.

## Output

Returns parsed DKIM TXT record fields for the 'dkim' selector, including the protocol version (v=), key type (k=, e.g. RSA or Ed25519), public key length in bits, whether the record is in testing mode (t=y), and whether the key is revoked (empty p= field). Confirms whether mail signed with this selector will successfully verify.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dkim-selector-dkim-public-key-lookup-fb64615e/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)