{"uid":"cap_147QPakXLnkd6BVtKfETS","slug":"dkim-selector-hs1-lookup-d26f455b","name":"DKIM Selector hs1 Lookup","description":"DKIM public key for selector \"hs1\" of a domain: looks up hs1._domainkey.<domain> (TXT, Cloudflare DoH) and parses v=, k=, key type, public-key length, testing flag and whether the key is revoked (empty p=). Confirms that mail signed with the hs1 selector will verify. $0.01 per lookup.","url":"https://dns.intel.rallylive.ca/dns/dkim/hs1?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","properties":{}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_nTZwDk6_WCCdVUnnFufsa","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Looks up and parses the DKIM public key for the 'hs1' selector of a given domain via Cloudflare DoH, returning key type, length, testing flag, and revocation status.","exampleAgentPrompt":"Can you check the DKIM hs1 selector record for example.com — I want to know if the key is valid, what type and length it is, and whether it's been revoked?","exampleUseCases":[{"title":"Pre-send DKIM validation for email campaign","prompt":"Before I send out this marketing email blast, check that our DKIM hs1 selector record on acmecorp.com is valid, not revoked, and not still in testing mode."},{"title":"Debugging DKIM signature failures","prompt":"Our transactional emails from mailservice.io are failing DKIM checks — can you look up the hs1 selector DKIM record on mailservice.io and tell me what the key looks like and whether anything is wrong with it?"},{"title":"Security audit of DKIM key strength","prompt":"I'm auditing our email security — pull the DKIM hs1 selector record for startupbrand.co and tell me the key type and length so I can check if it meets our 2048-bit RSA policy."}],"resultDescription":"Returns parsed details from the hs1._domainkey.<domain> TXT record including: DKIM version (v=), key type (k=, e.g. rsa or ed25519), public key length in bits, whether the domain is in testing mode, and whether the key is revoked (empty p= field). Confirms whether mail signed with the hs1 selector will pass DKIM verification.","failureModes":["Domain does not have an hs1._domainkey TXT record — returns not found or empty result","DNS resolution failure via Cloudflare DoH — network or upstream error","Malformed TXT record that cannot be parsed — partial or error response","Revoked key detected (empty p=) — returned as data, not an error","Domain name input is invalid or malformed — returns validation error"],"whenToPreferThis":"Use this endpoint when you specifically need to inspect the DKIM configuration for the 'hs1' selector on a domain — particularly for email deliverability audits, debugging DKIM signing failures, checking key strength, or verifying a key has not been revoked. It is selector-specific and more precise than a generic DNS TXT lookup, as it parses all DKIM record fields automatically.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-20T00:59:44.035Z","isFirstParty":false,"canonicalSlug":"dkim-selector-hs1-lookup-d26f455b"}