# DKIM Selector SFMC Lookup

> DKIM Selector SFMC Lookup is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-20).

Looks up and parses the DKIM public key for the 'sfmc' selector (Salesforce Marketing Cloud) of any domain, returning key type, length, testing flag, and revocation status.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/dkim/sfmc?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-20
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dkim-selector-sfmc-lookup-ca0e4354
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_gKcLVOnTRCQ-SM_75SJvk

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dkim-selector-sfmc-lookup-ca0e4354
```

Example prompt: Can you look up the DKIM sfmc selector for example.com and tell me whether the key is valid, what type and length it is, and whether it's been revoked or is in testing mode?

## When to prefer this

Choose this endpoint when you specifically need to verify or audit Salesforce Marketing Cloud (SFMC) DKIM configuration for a domain. It is purpose-built for the sfmc selector rather than generic DKIM tools, saving parsing effort and providing structured output including revocation and testing-mode flags. Prefer it over generic DNS TXT lookups when the goal is confirming SFMC email authentication readiness.

## Known failure modes

- Domain has no sfmc._domainkey TXT record — returns not-found or missing record
- DNS resolution failure via Cloudflare DoH — network timeout or upstream error
- Domain has an empty p= value indicating a revoked/disabled key
- Malformed TXT record that cannot be parsed into standard DKIM tags
- Invalid or non-existent domain input — DNS NXDOMAIN response

## How this service works

DKIM public key for selector "sfmc" of a domain: looks up sfmc._domainkey.<domain> (TXT, Cloudflare DoH) and parses v=, k=, key type, public-key length, testing flag and whether the key is revoked (empty p=). Confirms that mail signed with the sfmc selector will verify. $0.01 per lookup.

## Output

Returns parsed details from the sfmc._domainkey.<domain> TXT DNS record including: DKIM version (v=), key type (k=), public key presence and length in bits, whether the domain is in testing mode, and whether the key is revoked (empty p= field). Confirms whether mail signed with the sfmc selector will pass DKIM verification.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dkim-selector-sfmc-lookup-ca0e4354/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)