# DKIM Selector S2 Change Watch

> DKIM Selector S2 Change Watch is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.02/call, status unknown (last checked 2026-10-20).

Monitors the DKIM TXT record for selector 's2' of a domain, detecting changes by comparing the current DNS lookup against the stored result from the previous check (kept 90 days).

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/watch/dns/dkim/s2?utm_source=zero.xyz
- Price: $0.02/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-20
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dkim-selector-s2-change-watch-7db9c367
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_khreGy2NakUuWzJtOWlpQ

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dkim-selector-s2-change-watch-7db9c367
```

Example prompt: Watch the DKIM s2 selector for example.com and tell me if it has changed since the last check — show me what changed and when it was last seen.

## When to prefer this

Use this endpoint when you specifically need to detect changes in the DKIM 's2' selector record over time, rather than just doing a one-time lookup. Ideal for scheduled monitoring workflows, security audits, or alerting pipelines where you want to know if and exactly what changed in the s2 DKIM key between polling intervals. Prefer this over a plain DNS lookup when change detection and historical comparison (90-day retention) matter.

## Known failure modes

- Domain not found or NXDOMAIN — returns empty or error result
- No previous check stored (first call) — 'changed' field may be null or false with no before value
- DKIM s2 selector does not exist for the domain — returns no record found
- DNS resolution failure via Cloudflare DoH — transient network error
- Payment not processed — x402 payment required error before check runs

## How this service works

Change watch for dkim selector s2: runs the check, compares it with the result from your previous call for the same domain (kept 90 days) and returns the current answer, changed true/false, the fields that changed with before/after values, and when it was last seen. Schedule it to be alerted when this changes. $0.02 per check.

## Output

Returns the current DKIM TXT record for the s2 selector, a boolean 'changed' flag indicating whether it differs from the previous call for the same domain, a list of fields that changed with before and after values, and a timestamp of when the record was last seen. History is retained for 90 days.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dkim-selector-s2-change-watch-7db9c367/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)