{"uid":"cap_W6d3gYoR3vst_3ZHRvb2b","slug":"dkim-selector-sel2-public-key-lookup-25a696d6","name":"DKIM Selector sel2 Public Key Lookup","description":"DKIM public key for selector \"sel2\" of a domain: looks up sel2._domainkey.<domain> (TXT, Cloudflare DoH) and parses v=, k=, key type, public-key length, testing flag and whether the key is revoked (empty p=). Confirms that mail signed with the sel2 selector will verify. $0.01 per lookup.","url":"https://dns.intel.rallylive.ca/dns/dkim/sel2?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","properties":{}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_l9CWZPjyjDp11Fp8hJeRG","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Looks up and parses the DKIM public key for the 'sel2' selector of a given domain via Cloudflare DNS-over-HTTPS, returning key type, length, testing flag, and revocation status.","exampleAgentPrompt":"Can you check the DKIM sel2 selector for example.com — I want to know if the key is valid, what type and length it is, and whether it's been revoked?","exampleUseCases":[{"title":"Pre-send DKIM health check","prompt":"Before we launch our email campaign, check if the sel2 DKIM selector for ourbrand.com is properly set up and not revoked so our emails will pass authentication."},{"title":"Email deliverability debugging","prompt":"Our emails from newsletter.acme.io are landing in spam — can you look up the sel2 DKIM selector and tell me if the public key is valid, what key type is being used, and whether it's in testing mode?"},{"title":"Security audit of DKIM keys","prompt":"I'm auditing our email security setup — please pull the sel2 DKIM record for companymail.net and tell me the key length, key type, and whether the key has been revoked or left empty."}],"resultDescription":"Returns parsed details from the sel2._domainkey.<domain> TXT record including: DKIM version (v=), key type (k=), RSA/EC key type label, public key bit length, whether the domain is in testing mode, and whether the key is revoked (empty p= field). Confirms whether mail signed with the sel2 selector will successfully verify.","failureModes":["Domain does not have a sel2._domainkey TXT record — returns not found or NXDOMAIN","DKIM record exists but is malformed and cannot be parsed","Cloudflare DoH is temporarily unreachable — upstream DNS failure","Domain name input is invalid or missing — returns validation error","Key is present but empty (p=) indicating revocation — flagged as revoked"],"whenToPreferThis":"Use this endpoint when you specifically need to inspect the DKIM 'sel2' selector for a domain — particularly to validate email signing configuration, audit key strength, detect revoked keys, or confirm that sel2-signed mail will pass DKIM verification. Prefer this over generic DNS TXT lookups when you need structured DKIM field parsing (v=, k=, key length, testing flag, revocation status) without having to parse raw TXT records yourself.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-20T00:59:35.113Z","isFirstParty":false,"canonicalSlug":"dkim-selector-sel2-public-key-lookup-25a696d6"}