# DKIM Selector ms1 Lookup

> DKIM Selector ms1 Lookup is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-20).

Looks up and parses the DKIM public key for the 'ms1' selector of a given domain via Cloudflare DoH, returning key metadata and validity status.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/dkim/ms1?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-20
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dkim-selector-ms1-lookup-0376fa46
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_KTvHPuno0klPs14UU9EZa

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dkim-selector-ms1-lookup-0376fa46
```

Example prompt: Can you check whether the ms1 DKIM selector is properly configured for example.com — I want to know if the key is valid, what type and length it is, and whether it's revoked or in testing mode?

## When to prefer this

Use this endpoint when you specifically need to verify or audit the 'ms1' DKIM selector, which is commonly used by Microsoft and certain bulk email providers. Prefer this over generic DNS TXT lookups when you need structured parsing of DKIM fields (key type, length, testing flag, revocation) rather than raw DNS output. Choose this when validating email authentication configuration for domains using the ms1 selector specifically.

## Known failure modes

- Domain does not have an ms1._domainkey TXT record — returns not found or empty result
- DNS lookup fails due to network or Cloudflare DoH unavailability
- Malformed TXT record that cannot be parsed into DKIM fields
- Domain name is invalid or unresolvable
- Key is present but has empty p= field indicating revocation — returned as revoked status

## How this service works

DKIM public key for selector "ms1" of a domain: looks up ms1._domainkey.<domain> (TXT, Cloudflare DoH) and parses v=, k=, key type, public-key length, testing flag and whether the key is revoked (empty p=). Confirms that mail signed with the ms1 selector will verify. $0.01 per lookup.

## Output

Returns parsed DKIM TXT record data for ms1._domainkey.<domain>, including the protocol version (v=), key type (k=), public key length in bits, whether the key is in testing mode, and whether the key is revoked (empty p= field), plus a confirmation of whether mail signed with the ms1 selector will successfully verify.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dkim-selector-ms1-lookup-0376fa46/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)