# DKIM Selector 'drip' Public Key Lookup

> DKIM Selector 'drip' Public Key Lookup is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-20).

Looks up and parses the DKIM public key for the 'drip' selector of a given domain by querying drip._domainkey.<domain> via Cloudflare DoH, returning key type, length, testing flag, and revocation status.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/dkim/drip?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-20
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dkim-selector-drip-public-key-lookup-4aa4bf20
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_DpnG_ttQFypQM2MBotxJp

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dkim-selector-drip-public-key-lookup-4aa4bf20
```

Example prompt: Can you look up the DKIM 'drip' selector public key for example.com and tell me whether the key is valid, what type and length it is, and whether it's been revoked?

## When to prefer this

Use this endpoint when you specifically need to inspect or validate the DKIM configuration for the 'drip' email selector (used by the Drip email service provider) on a domain. Prefer this over generic DNS TXT lookup endpoints when you need structured, parsed DKIM field output including revocation and key length analysis, not raw TXT strings.

## Known failure modes

- Domain has no drip._domainkey TXT record — returns not found or empty result
- DNS resolution failure via Cloudflare DoH — network or upstream error
- Malformed TXT record that cannot be parsed — parser error returned
- Domain does not exist — NXDOMAIN response
- Payment failure via x402 — 402 Payment Required if USDC not provided

## How this service works

DKIM public key for selector "drip" of a domain: looks up drip._domainkey.<domain> (TXT, Cloudflare DoH) and parses v=, k=, key type, public-key length, testing flag and whether the key is revoked (empty p=). Confirms that mail signed with the drip selector will verify. $0.01 per lookup.

## Output

Returns parsed DKIM TXT record fields from drip._domainkey.<domain>: DKIM version (v=), key type (k=, e.g. rsa or ed25519), public key length in bits, whether the testing flag (t=y) is set, and whether the key is revoked (empty p= field). Also provides a confirmation of whether mail signed with the drip selector will successfully verify.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dkim-selector-drip-public-key-lookup-4aa4bf20/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)