Skip to content

DKIM key check

GET /api/v1/dkim/{domain}/{selector}

Fetches selector._domainkey.domain as TXT and inspects the DKIM key: key type, key length, revoked (empty p=) and testing (t=y) flags. If no DKIM record is found, found=false is returned with no further fields except status (the DNS RCODE).

NameTypeRequiredDescription
domainstringyes-
selectorstringyes-
StatusTypeDescription
200DkimResultDKIM key details (or found=false)
400objectError
429objectError
502objectError
FieldTypeRequiredDescription
apistringno-
domainstringno-
selectorstringno-
namestringnoQueried TXT name: selector._domainkey.domain
foundbooleanno-
statusintegernoDNS RCODE; only present when found=false
validbooleanno-
revokedbooleannoKey revoked (empty p= tag)
testingbooleannoTesting mode (t=y)
keyTypestringno(rsa, ed25519)
keyBitsinteger | nullno-
recordstringno-
Terminal window
curl -X GET "https://dns-doctor.com/api/v1/dkim/<domain>/<selector>" \
-H "Authorization: Bearer $REGFISH_API_KEY"

Fill in values - the call below updates as you type. Nothing is sent: the API does not currently allow browser requests from this domain (CORS). The API key is not stored.