{"uid":"cap_ErVovI8CD3RaEggrME2OK","slug":"dkim-record-audit-98b5a53c","name":"DKIM Record Audit","description":"Audit DKIM selector records. The key length follows from the length of the encoded public key, so a short RSA key is readable from the record itself with no cryptography. Reports a key shorter than a stated minimum; a selector left in testing mode, which asks receivers to treat a failure as unsigned so it cannot contribute to DMARC alignment however correctly it signs; a revoked key, with its consequence; and a key type verifiers do not implement.","url":"https://api.zfinia.com/x402/v1/dkim-record-audit?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"records":{"type":"array","items":{"type":"object","required":["selector","record"],"properties":{"record":{"type":"string","maxLength":4096},"selector":{"type":"string","maxLength":128}},"additionalProperties":false},"maxItems":100,"minItems":1},"minimum_key_bits":{"type":"integer","maximum":8192,"minimum":512}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.18","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.18/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.18","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.18","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_NuV0R0WAvHQunnQkPUJmd","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.18","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Audits DKIM selector records for weak key length, testing mode, revoked keys, and unsupported key types","exampleAgentPrompt":"Can you audit these DKIM selector records for me and flag any that have keys shorter than 2048 bits, are stuck in testing mode, or have been revoked? Here are the selector names and their raw TXT record values.","exampleUseCases":[{"title":"Pre-deployment DKIM security review","prompt":"Before we go live with our new email sending domain, audit these 3 DKIM selector records and tell me if any keys are weaker than 2048 bits or if any selectors are still in testing mode that would break DMARC alignment."},{"title":"Post-incident email authentication audit","prompt":"We had some DMARC failures this week — can you check these DKIM records across our selectors and tell me if any keys are revoked, in test mode, or using a key type that receivers won't recognize?"},{"title":"Bulk DKIM hygiene check for managed domains","prompt":"I manage email for 50 clients and want to sweep their DKIM selectors for issues — audit these records and flag anything with RSA keys under 1024 bits, revoked selectors, or testing-mode flags that would prevent DMARC contribution."}],"resultDescription":"A structured audit report for each submitted selector/record pair, indicating: whether the RSA key length falls below the specified minimum, whether the selector is in testing mode (p=test) which prevents DMARC alignment, whether the key has been revoked and the consequence of that revocation, and whether the key type is one that email verifiers do not implement.","failureModes":["Malformed DKIM record string that cannot be parsed returns a parse error for that record","Record array is empty or exceeds 100 items — rejected by schema validation","minimum_key_bits outside the 512–8192 range causes a validation error","Non-DKIM TXT records submitted may produce incomplete or misleading audit output","Payment not completed (x402) results in 402 response before any audit is performed"],"whenToPreferThis":"Use this endpoint when you need to programmatically audit one or more DKIM selector records for security and compliance issues — specifically weak key lengths, testing-mode selectors that silently undermine DMARC, revoked keys, and unsupported key types. Prefer this over manual inspection or generic DNS tools when you need structured, machine-readable findings at scale (up to 100 records per call) with a configurable minimum key strength threshold.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-10T18:42:51.623Z","isFirstParty":false,"canonicalSlug":"dkim-record-audit-98b5a53c"}