# DKIM Selector 'ml' Public Key Lookup

> DKIM Selector 'ml' Public Key Lookup is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-20).

Looks up and parses the DKIM public key for the 'ml' selector of a given domain via Cloudflare DoH, returning key metadata and validity status.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/dkim/ml?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-20
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dkim-selector-ml-public-key-lookup-61476c11
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_z3UZR_Rh4rn74R4BhMg99

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dkim-selector-ml-public-key-lookup-61476c11
```

Example prompt: Check the DKIM 'ml' selector for sendgrid.com — tell me if the key is valid, whether it's revoked, the key type and length, and whether it's in testing mode.

## When to prefer this

Use this endpoint when you specifically need to inspect the 'ml' DKIM selector for a domain — particularly relevant for domains using email providers or marketing tools that provision keys under the 'ml' selector name. Prefer this over generic DNS TXT lookups when you need structured, parsed DKIM metadata (key type, length, revocation status) rather than raw DNS text. Choose sibling selectors (k1, shopify2, etc.) if the sending platform uses a different selector name.

## Known failure modes

- Domain does not have an ml._domainkey TXT record — returns not found or empty result
- DNS resolution failure via Cloudflare DoH — transient network error
- Malformed TXT record that cannot be parsed — returns parse error
- Payment not provided or insufficient — returns 402 Payment Required
- Rate limiting or quota exceeded — returns error response

## How this service works

DKIM public key for selector "ml" of a domain: looks up ml._domainkey.<domain> (TXT, Cloudflare DoH) and parses v=, k=, key type, public-key length, testing flag and whether the key is revoked (empty p=). Confirms that mail signed with the ml selector will verify. $0.01 per lookup.

## Output

Returns parsed details of the ml._domainkey.<domain> TXT record including: DKIM version (v=), key type (k=, e.g. rsa or ed25519), public key length in bits, whether the testing flag (t=y) is set, and whether the key is revoked (empty p= field). Indicates overall whether mail signed with the ml selector will successfully verify.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dkim-selector-ml-public-key-lookup-61476c11/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)