{"uid":"cap_HSzJYWBxlAvYqx5N-ktYg","slug":"dkim-selector1-public-key-lookup-a64fcecc","name":"DKIM Selector1 Public Key Lookup","description":"DKIM public key for selector \"selector1\" of a domain: looks up selector1._domainkey.<domain> (TXT, Cloudflare DoH) and parses v=, k=, key type, public-key length, testing flag and whether the key is revoked (empty p=). Confirms that mail signed with the selector1 selector will verify. $0.01 per lookup.","url":"https://dns.intel.rallylive.ca/dns/dkim/selector1?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","properties":{}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_GXddqW-UAPJQ0biBCiMZK","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Looks up and parses the DKIM public key record for the 'selector1' selector of a given domain, reporting key type, length, testing flag, and revocation status.","exampleAgentPrompt":"Can you check the DKIM selector1 record for example.com — I want to know if the key exists, what type it is, how long it is, and whether it's been revoked?","exampleUseCases":[{"title":"Email deliverability pre-send check","prompt":"Before we send the campaign, can you verify that selector1 DKIM is properly set up and not revoked for ourdomain.com so we know signed emails will actually verify?"},{"title":"Security audit of outbound mail signing","prompt":"As part of the mail security audit, look up the DKIM selector1 record for acmecorp.com and tell me the key type, key length, and whether it's in testing mode."},{"title":"Diagnosing DKIM verification failures","prompt":"Our emails to Gmail keep failing DKIM — can you check if the selector1 DKIM record for mybusiness.io is valid, or if the key might be empty or revoked?"}],"resultDescription":"Returns parsed details from the selector1._domainkey.<domain> DNS TXT record including: DKIM version tag (v=), key type (k=, e.g. rsa or ed25519), public key bit length, whether the testing flag (t=y) is set, and whether the key is revoked (empty p= field). Also confirms whether mail signed with the selector1 selector will successfully verify.","failureModes":["Domain does not have a selector1._domainkey TXT record — returns not found or NXDOMAIN","Key is revoked (p= is empty) — returned as a parsed finding, not an error","Cloudflare DoH is unreachable — service returns upstream error","Invalid or malformed domain input — request rejected","Payment not provided or insufficient — 402 Payment Required response"],"whenToPreferThis":"Use this endpoint when you specifically need to inspect the DKIM 'selector1' selector (common on Microsoft 365 / Exchange Online domains) rather than a generic or custom selector. It is purpose-built for selector1 and returns structured parsed metadata (key length, revocation, testing mode) rather than a raw DNS response, making it ideal for email security audits, deliverability diagnostics, and automated compliance checks. Prefer a generic DKIM or DNS TXT lookup if the domain uses a different selector name.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-20T00:59:43.479Z","isFirstParty":false,"canonicalSlug":"dkim-selector1-public-key-lookup-a64fcecc"}