# DKIM Selector 'sg' Lookup

> DKIM Selector 'sg' Lookup is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-20).

Looks up and parses the DKIM public key for the 'sg' selector (SendGrid) of a given domain via Cloudflare DNS-over-HTTPS, returning key type, length, testing flag, and revocation status.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/dkim/sg?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-20
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dkim-selector-sg-lookup-db4e39d2
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_uZNVfW7P6bXA2ifhF4mJh

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dkim-selector-sg-lookup-db4e39d2
```

Example prompt: Can you check if the SendGrid DKIM 'sg' selector is properly configured for example.com — I want to know the key type, key length, and whether it's revoked or in testing mode?

## When to prefer this

Use this endpoint when you specifically need to validate or inspect the SendGrid ('sg') DKIM selector for a domain, as opposed to other common selectors like 'shopify' or 'fm2'. Ideal for email deliverability audits, SendGrid onboarding verification, or automated monitoring of DKIM key health for domains using SendGrid as their email provider.

## Known failure modes

- Domain has no sg._domainkey TXT record — returns not found or empty result
- DKIM key is revoked (p= is empty) — flagged as revoked in response
- Domain does not exist or is unreachable via Cloudflare DoH
- Malformed TXT record that cannot be parsed
- Rate limiting or payment failure for the $0.01 per-call fee

## How this service works

DKIM public key for selector "sg" of a domain: looks up sg._domainkey.<domain> (TXT, Cloudflare DoH) and parses v=, k=, key type, public-key length, testing flag and whether the key is revoked (empty p=). Confirms that mail signed with the sg selector will verify. $0.01 per lookup.

## Output

Returns parsed DKIM record details for sg._domainkey.<domain>: the v= protocol version, k= key type (e.g. RSA), public key length in bits, whether the testing flag (t=y) is set, and whether the key is revoked (empty p= field). Confirms if mail signed with the sg selector will successfully verify.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dkim-selector-sg-lookup-db4e39d2/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)