{"uid":"cap_plIxxbRxLRQPMw9cX9e0H","slug":"dkim-selector-pic-public-key-lookup-7c70e3de","name":"DKIM Selector 'pic' Public Key Lookup","description":"DKIM public key for selector \"pic\" of a domain: looks up pic._domainkey.<domain> (TXT, Cloudflare DoH) and parses v=, k=, key type, public-key length, testing flag and whether the key is revoked (empty p=). Confirms that mail signed with the pic selector will verify. $0.01 per lookup.","url":"https://dns.intel.rallylive.ca/dns/dkim/pic?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","properties":{}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_X1sQ1LTsXr5-d3kyw2N1R","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Looks up and parses the DKIM public key for the 'pic' selector of a given domain via Cloudflare DoH DNS-over-HTTPS, returning key metadata and validity status.","exampleAgentPrompt":"Can you look up the DKIM public key for the 'pic' selector on example.com and tell me if the key is valid, what type it is, how long it is, and whether it's been revoked?","exampleUseCases":[{"title":"Pre-send DKIM health check","prompt":"Before we start the new email campaign, can you check the pic DKIM selector for ourcompany.com and confirm the key is valid, not revoked, and not in testing mode?"},{"title":"Email deliverability audit","prompt":"I'm debugging why emails from mybrand.com are failing DKIM verification — can you look up the pic selector DKIM record and tell me the key type, length, and whether anything looks wrong?"},{"title":"Third-party sender DKIM verification","prompt":"We've just set up a new email service that signs with the 'pic' selector — can you verify that the pic._domainkey DKIM record for sendingdomain.io is properly published and will pass verification?"}],"resultDescription":"Returns parsed details from the pic._domainkey.<domain> DNS TXT record including: DKIM version (v=), key type (k=, e.g. RSA or Ed25519), public key length in bits, whether the key is revoked (empty p= field), whether the testing flag (t=y) is set, and an overall confirmation of whether emails signed with the pic selector will successfully verify.","failureModes":["Domain does not have a pic._domainkey TXT record — returns not-found or empty result","DNS lookup failure via Cloudflare DoH — network or upstream resolver error","Malformed TXT record that cannot be parsed — partial or error response","Key is revoked (p= is empty) — returned as a valid lookup but marked revoked","Domain name not provided or invalid — request error"],"whenToPreferThis":"Use this endpoint when you specifically need to inspect the DKIM configuration for the 'pic' selector (commonly used by certain ESPs or mail platforms). Prefer this over generic DNS lookup tools when you need structured, pre-parsed output including key length, type, revocation status, and testing flag without writing your own TXT record parser. Choose the selector-specific sibling endpoints (postmark, sg, ml, sel1, etc.) when dealing with those respective selectors instead.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-20T00:59:42.440Z","isFirstParty":false,"canonicalSlug":"dkim-selector-pic-public-key-lookup-7c70e3de"}