{"uid":"cap_Ho2lCJrw0ZQ9WVTyURQD7","slug":"dkim-selector2-public-key-lookup-fafcdcf4","name":"DKIM Selector2 Public Key Lookup","description":"DKIM public key for selector \"selector2\" of a domain: looks up selector2._domainkey.<domain> (TXT, Cloudflare DoH) and parses v=, k=, key type, public-key length, testing flag and whether the key is revoked (empty p=). Confirms that mail signed with the selector2 selector will verify. $0.01 per lookup.","url":"https://dns.intel.rallylive.ca/dns/dkim/selector2?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","properties":{}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_MaGVOqztgwGaMCkM1NuA7","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Looks up and parses the DKIM public key for the 'selector2' selector of a given domain via Cloudflare DoH, returning key type, length, testing flags, and revocation status.","exampleAgentPrompt":"Can you check the DKIM selector2 public key for example.com and tell me if it's valid, what key type it uses, and whether it's been revoked?","exampleUseCases":[{"title":"Email deliverability audit for domain","prompt":"I'm setting up email for acme.com and want to confirm that the selector2 DKIM key is properly published and not revoked — can you look it up and tell me the key type and length?"},{"title":"Diagnose DKIM verification failure","prompt":"Emails from mailchimp.com signed with selector2 are failing DKIM verification — can you pull the selector2 DKIM record for mailchimp.com and tell me if the key looks valid or if it might be revoked?"},{"title":"Security review of DKIM configuration","prompt":"I'm doing a security review of contoso.com's email setup — please check the selector2 DKIM record and tell me if it's in testing mode, what the key length is, and whether the key is active."}],"resultDescription":"Returns parsed DKIM record fields for selector2._domainkey.<domain>: DKIM version (v=), key type (k= e.g. rsa or ed25519), public key length in bits, whether the domain is in testing mode (t=y), and whether the key is revoked (empty p= field). Confirms mail signed with the selector2 selector will pass DKIM verification.","failureModes":["Domain has no selector2._domainkey TXT record — returns not found or empty result","DKIM record exists but is malformed and cannot be parsed","DNS resolution failure via Cloudflare DoH — network or timeout error","Domain name is invalid or not resolvable","Key is revoked (empty p=) — returned as a flag but lookup still succeeds"],"whenToPreferThis":"Use this endpoint when you specifically need to inspect the 'selector2' DKIM selector, which is commonly used by Microsoft 365 / Office 365 as their second rotating DKIM selector. Prefer this over generic DNS TXT lookups when you want structured, pre-parsed DKIM fields (key type, length, testing flag, revocation) rather than raw DNS output. If you need a different selector (e.g. mailerlite, braze, google), sibling endpoints exist for those.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-20T00:59:28.473Z","isFirstParty":false,"canonicalSlug":"dkim-selector2-public-key-lookup-fafcdcf4"}