# DKIM SES Selector Lookup

> DKIM SES Selector Lookup is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-19).

Looks up and parses the DKIM public key for the 'ses' selector (Amazon SES) of a given domain via Cloudflare DoH, returning key metadata and validity status.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/dkim/ses?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-19
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dkim-ses-selector-lookup-b12068c6
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_F_csBAv1WX7PcLyU-AsaZ

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dkim-ses-selector-lookup-b12068c6
```

Example prompt: Can you check the DKIM SES selector for example.com and tell me if the Amazon SES email signing key is valid, what key type it is, and whether it's been revoked?

## When to prefer this

Use this endpoint when you specifically need to validate Amazon SES DKIM configuration for a domain. It is purpose-built for the 'ses' selector and returns structured key metadata including revocation and testing flags, making it more useful than a raw DNS TXT lookup for SES deliverability auditing or email authentication checks.

## Known failure modes

- Domain has no ses._domainkey TXT record — selector not found
- DNS resolution failure via Cloudflare DoH — network or upstream error
- Malformed TXT record that cannot be parsed into DKIM fields
- Key is revoked (empty p=) — endpoint reports this as a valid but revoked key result
- Payment failure — x402 payment of $0.01 USDC not completed

## How this service works

DKIM public key for selector "ses" of a domain: looks up ses._domainkey.<domain> (TXT, Cloudflare DoH) and parses v=, k=, key type, public-key length, testing flag and whether the key is revoked (empty p=). Confirms that mail signed with the ses selector will verify. $0.01 per lookup.

## Output

Returns parsed DKIM record fields for the 'ses' selector including: DKIM version (v=), key type (k= e.g. rsa), public key length in bits, whether the domain is in testing mode, whether the key is revoked (empty p= field), and an overall confirmation of whether mail signed with this selector will verify successfully.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dkim-ses-selector-lookup-b12068c6/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)