# DKIM Selector s2 Lookup

> DKIM Selector s2 Lookup is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-20).

Looks up the DKIM public key for the 's2' selector of a domain by querying s2._domainkey.<domain> via Cloudflare DoH and parses key metadata including type, length, testing flag, and revocation status.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/dkim/s2?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-20
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dkim-selector-s2-lookup-aee916ef
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_8BIy3_VhbeP4uFUAGRj4z

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dkim-selector-s2-lookup-aee916ef
```

Example prompt: Can you check the DKIM s2 selector for example.com — I need to know if the key is valid, what type it is, and whether it's been revoked?

## When to prefer this

Use this endpoint when you specifically need to inspect the 's2' DKIM selector for a domain, particularly for services like Amazon SES rotation keys, custom mailers, or any provider using 's2' as their signing selector. Choose this over generic DNS TXT lookups when you need structured parsing of key type, length, and revocation status rather than the raw TXT string.

## Known failure modes

- Domain has no s2._domainkey TXT record — returns not found or empty result
- Key is revoked (empty p= value) — reported as revoked, mail will not verify
- DNS resolution failure via Cloudflare DoH — network or upstream error
- Malformed TXT record that cannot be parsed — parsing error returned
- Domain does not exist — NXDOMAIN response

## How this service works

DKIM public key for selector "s2" of a domain: looks up s2._domainkey.<domain> (TXT, Cloudflare DoH) and parses v=, k=, key type, public-key length, testing flag and whether the key is revoked (empty p=). Confirms that mail signed with the s2 selector will verify. $0.01 per lookup.

## Output

Returns parsed DKIM TXT record details for the s2 selector including: DKIM version (v=), key type (k=), public key length in bits, whether the key is in testing mode, and whether the key has been revoked (empty p= field), plus a confirmation of whether mail signed with the s2 selector will verify.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dkim-selector-s2-lookup-aee916ef/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)