# DKIM Selector 'zmail' Lookup

> DKIM Selector 'zmail' Lookup is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-20).

Looks up and parses the DKIM public key for the 'zmail' selector of a given domain via Cloudflare DoH, returning key type, length, testing flag, and revocation status.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/dkim/zmail?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-20
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dkim-selector-zmail-lookup-26623190
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_3bY6zC8U1uxZnwzR-RF5w

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dkim-selector-zmail-lookup-26623190
```

Example prompt: Can you check whether the zmail DKIM selector is properly configured for zoho.example.com — I want to know the key type, key length, and whether it's been revoked?

## When to prefer this

Use this endpoint when you specifically need to validate the 'zmail' DKIM selector, which is the standard selector used by Zoho Mail. Prefer this over generic DNS TXT lookup endpoints when you need parsed, structured DKIM field extraction (v=, k=, key length, revocation status) rather than raw TXT record data. It is the right choice for Zoho Mail deliverability audits, DKIM rotation checks, and email security reviews involving the zmail selector.

## Known failure modes

- Domain has no zmail._domainkey TXT record (NXDOMAIN or NOERROR with no data)
- DNS query failure or Cloudflare DoH unreachable
- Malformed TXT record that cannot be parsed
- Empty or missing p= field indicating a revoked/inactive key
- Payment not processed or x402 auth failure returning 402

## How this service works

DKIM public key for selector "zmail" of a domain: looks up zmail._domainkey.<domain> (TXT, Cloudflare DoH) and parses v=, k=, key type, public-key length, testing flag and whether the key is revoked (empty p=). Confirms that mail signed with the zmail selector will verify. $0.01 per lookup.

## Output

Returns parsed details from the zmail._domainkey.<domain> TXT record including the DKIM version (v=), key type (k=), public key length in bits, whether the testing flag (t=y) is set, and whether the key is revoked (empty p= field), plus confirmation of whether mail signed with this selector will verify.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dkim-selector-zmail-lookup-26623190/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)