Skip to content

DKIM key check

GET /api/v1/dkim/{domain}/{selector}

Fetches selector._domainkey.domain as TXT and inspects the DKIM key: key type, key length, revoked (empty p=) and testing (t=y) flags. If no DKIM record is found, found=false is returned with no further fields except status (the DNS RCODE).

NameTypeRequiredDescription
domainstringyes
selectorstringyes
StatusTypeDescription
200DkimResultDKIM key details (or found=false)
400objectError
429objectError
502objectError
FieldTypeRequiredDescription
apistringno
domainstringno
selectorstringno
namestringnoQueried TXT name: selector._domainkey.domain
foundbooleanno
statusintegernoDNS RCODE; only present when found=false
validbooleanno
revokedbooleannoKey revoked (empty p= tag)
testingbooleannoTesting mode (t=y)
keyTypestringno(rsa, ed25519)
keyBitsinteger | nullno
recordstringno
Terminal window
curl -X GET "https://dns-doctor.com/api/v1/dkim/<domain>/<selector>" \
-H "Authorization: Bearer $REGFISH_API_KEY"

Fill in values: the call below updates as you type. Nothing is sent: the API does not currently allow browser requests from this domain (CORS). The API key is not stored.