# DKIM Selector PM Public Key Lookup

> DKIM Selector PM Public Key Lookup is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-20).

Looks up and parses the DKIM public key for the 'pm' selector of a given domain via Cloudflare DoH, returning key metadata and validity status.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/dkim/pm?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-20
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dkim-selector-pm-public-key-lookup-fc2594e3
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_gWSAuKDLvUbu7P4aDZTbB

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dkim-selector-pm-public-key-lookup-fc2594e3
```

Example prompt: Check whether the DKIM 'pm' selector is correctly configured for example.com — I want to know if the key is valid, what type it is, how long it is, and whether it's been revoked.

## When to prefer this

Use this endpoint when you specifically need to verify the 'pm' DKIM selector, which is typically associated with Postmark and similar email service providers. Prefer this over generic DNS TXT lookup endpoints because it parses the raw TXT record into structured DKIM fields (key type, length, testing flag, revocation status) rather than returning raw text. Ideal for email deliverability audits, Postmark integration verification, or automated monitoring of DKIM configuration health.

## Known failure modes

- Domain does not have a pm._domainkey TXT record — returns not-found or empty result
- DKIM record exists but is malformed and cannot be parsed
- DNS resolution failure via Cloudflare DoH — timeout or upstream error
- Key is revoked (empty p= field) — returned as a valid lookup result with revoked flag set
- Invalid or non-existent domain provided — DNS NXDOMAIN response

## How this service works

DKIM public key for selector "pm" of a domain: looks up pm._domainkey.<domain> (TXT, Cloudflare DoH) and parses v=, k=, key type, public-key length, testing flag and whether the key is revoked (empty p=). Confirms that mail signed with the pm selector will verify. $0.01 per lookup.

## Output

Returns parsed details from the pm._domainkey.<domain> DNS TXT record, including: v= (version), k= (key type, e.g. rsa), public key length in bits, whether the key is in testing mode, whether the key is revoked (empty p=), and whether mail signed with the pm selector will successfully verify.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dkim-selector-pm-public-key-lookup-fc2594e3/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)