# DKIM Selector 'mail' Public Key Lookup

> DKIM Selector 'mail' Public Key Lookup is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-19).

Looks up and parses the DKIM public key for the 'mail' selector of a domain via Cloudflare DoH, returning key type, length, testing flag, and revocation status.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/dkim/mail?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-19
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dkim-selector-mail-public-key-lookup-60b5f16e
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_sZ_0doeN0SABIuWEFfMFa

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dkim-selector-mail-public-key-lookup-60b5f16e
```

Example prompt: Can you check the DKIM 'mail' selector for example.com — look up mail._domainkey.example.com and tell me the key type, key length, whether it's in testing mode, and if the key has been revoked?

## When to prefer this

Use this endpoint when you specifically need to inspect the 'mail' DKIM selector, which is one of the most common default selector names used by mail servers and email service providers. Prefer this over generic DNS TXT lookup endpoints when you need structured parsing of DKIM fields (v=, k=, p= length, testing flag, revocation) rather than raw TXT data.

## Known failure modes

- Domain has no mail._domainkey TXT record — returns not found or empty result
- TXT record is malformed and cannot be parsed — returns parse error
- Domain does not exist in DNS — returns NXDOMAIN
- Cloudflare DoH is unreachable — returns network/upstream error
- Empty p= field indicates a revoked key — returned as a parsed flag rather than an error

## How this service works

DKIM public key for selector "mail" of a domain: looks up mail._domainkey.<domain> (TXT, Cloudflare DoH) and parses v=, k=, key type, public-key length, testing flag and whether the key is revoked (empty p=). Confirms that mail signed with the mail selector will verify. $0.01 per lookup.

## Output

Returns parsed details from the mail._domainkey.<domain> TXT record including the DKIM version tag (v=), key type (k=), public key length in bits, whether the testing flag is set, and whether the key is revoked (empty p= field), plus a confirmation of whether emails signed with this selector will verify successfully.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dkim-selector-mail-public-key-lookup-60b5f16e/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)