# DKIM Selector Scanner

> DKIM Selector Scanner is a paid API for AI agents from intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-09-14).

Tests 50 common DKIM selectors against a domain and reports all published DKIM keys with their type and strength, revealing which email services the domain uses.

## Facts

- Endpoint: GET https://intel.rallylive.ca/dns/dkim-selectors
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dkim-selector-scanner-40cc59e2
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_EoPiuJK_igHQC32pHNU4z

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dkim-selector-scanner-40cc59e2
```

Example prompt: Scan acme.com for DKIM selectors — I want to know which email providers they use and see all published DKIM keys with their types and key strengths.

## When to prefer this

Use this endpoint when you need to discover which email sending services a domain has configured, audit a domain's email authentication posture, or investigate email infrastructure without access to the domain's DNS admin panel. It's faster and more comprehensive than manually checking individual selectors because it tests 50 well-known selectors in one call. Prefer this over a generic DNS lookup when you specifically need DKIM intelligence across major providers.

## Known failure modes

- Domain does not exist or has no DNS — returns empty results or DNS error
- Domain has no DKIM records for any of the 50 tested selectors — returns empty list
- Network timeout when querying DNS — may return partial results or error
- Invalid domain format supplied — returns validation error
- Payment failure (x402) — request not processed

## How this service works

DKIM selector scan: tests 50 common DKIM selectors (Google, Microsoft 365, Mailchimp, SendGrid, Amazon SES, Postmark, HubSpot, Zoho, Proton, Fastmail and more) and reports every published key with its type and estimated strength. Find out which email services a domain signs mail with. $0.01 per domain.

## Output

A list of all DKIM selectors that resolved successfully for the domain, including the selector name, the associated email service provider (e.g. Google, Microsoft 365, SendGrid), the key type (e.g. RSA, Ed25519), and an estimated key strength (e.g. 1024-bit, 2048-bit). Selectors with no DNS record are omitted from the results.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dkim-selector-scanner-40cc59e2/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from intel.rallylive.ca](https://www.zero.xyz/host/intel.rallylive.ca/llms.txt)