DKIM key check

GET /api/v1/dkim/{domain}/{selector}

Fetches selector._domainkey.domain as TXT and inspects the DKIM key: key type, key length, revoked (empty p=) and testing (t=y) flags. If no DKIM record is found, found=false is returned with no further fields except status (the DNS RCODE).

Path parameters

Name	Type	Required	Description
`domain`	`string`	yes	—
`selector`	`string`	yes	—

Responses

Status	Type	Description
`200`	`DkimResult`	DKIM key details (or found=false)
`400`	`object`	Error
`429`	`object`	Error
`502`	`object`	Error

Response body

Field	Type	Required	Description
`api`	`string`	no	—
`domain`	`string`	no	—
`selector`	`string`	no	—
`name`	`string`	no	Queried TXT name: selector._domainkey.domain
`found`	`boolean`	no	—
`status`	`integer`	no	DNS RCODE; only present when found=false
`valid`	`boolean`	no	—
`revoked`	`boolean`	no	Key revoked (empty p= tag)
`testing`	`boolean`	no	Testing mode (t=y)
`keyType`	`string`	no	(`rsa`, `ed25519`)
`keyBits`	`integer \| null`	no	—
`record`	`string`	no	—

Example

curl -X GET "https://dns-doctor.com/api/v1/dkim/<domain>/<selector>" \
  -H "Authorization: Bearer $REGFISH_API_KEY"

Build a request

Fill in values — the call below updates as you type. Nothing is sent: the API does not currently allow browser requests from this domain (CORS). The API key is not stored.