# DKIM Selector Lookup – amazonses

> DKIM Selector Lookup – amazonses is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-20).

Looks up and parses the DKIM public key for the 'amazonses' selector of a given domain, confirming whether Amazon SES-signed mail will verify correctly.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/dkim/amazonses?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-20
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dkim-selector-lookup-amazonses-fc836123
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_47QksKgUwWnWsA82wUpb6

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dkim-selector-lookup-amazonses-fc836123
```

Example prompt: Can you check if the DKIM amazonses selector is properly set up for example.com — specifically whether the key is valid, what type and length it is, and if it's been revoked?

## When to prefer this

Use this endpoint when you specifically need to verify that a domain's Amazon SES DKIM configuration is correct and the amazonses selector key is present, valid, and not revoked. Prefer this over generic DKIM checkers when the target email provider is Amazon SES, or when you want structured parsed output (key type, length, testing flag, revocation) rather than a raw DNS record.

## Known failure modes

- Domain has no amazonses._domainkey TXT record — returns not found or empty result
- DNS lookup failure via Cloudflare DoH — network or upstream error
- Malformed TXT record that cannot be parsed — partial or error response
- Domain does not exist — NXDOMAIN response
- Revoked key (empty p=) detected and flagged accordingly

## How this service works

DKIM public key for selector "amazonses" of a domain: looks up amazonses._domainkey.<domain> (TXT, Cloudflare DoH) and parses v=, k=, key type, public-key length, testing flag and whether the key is revoked (empty p=). Confirms that mail signed with the amazonses selector will verify. $0.01 per lookup.

## Output

Returns parsed details from the amazonses._domainkey.<domain> TXT record including the DKIM version tag (v=), key type (k=), public key, key length in bits, whether the domain is in testing mode, and whether the key has been revoked (empty p= field).

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dkim-selector-lookup-amazonses-fc836123/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)