Free DNS tools

Check a published DKIM key

Fetches <selector>._domainkey.<domain>, follows a CNAME, parses the tags (RFC 6376 §3.6.1) and decodes the public key: RSA length against RFC 8301 (1024 bits minimum, 2048 recommended), Ed25519 as 32 raw bytes (RFC 8463). This checks the published key only; it verifies no signature.

Free, no key. Limited to 30 requests a minute and 300 a day per client IP across all four tools; identical queries are answered from a 60-second cache. Any completed check is 200, including "no record" and "lookup failed"; status and findings carry the verdict. Each finding has a stable code, a level and params; message is the English sentence built from them.

get/api/v1/tools/dkim

Request

  • Base URL: https://email-spam-tester.com (the document declares no server; this is the origin it was published from)
  • URL: https://email-spam-tester.com/api/v1/tools/dkim
  • Auth: none declared

Query parameters

domainstring nullable

Signing domain (d=).

selectorstring nullable

Selector (s=), e.g. google or s1.

Response

Successful Response

toolstring required
queryobject required

The inputs after normalisation.

checked_atstring required

When the lookups ran, ISO 8601 UTC.

duration_msinteger required
status'pass' | 'warn' | 'fail' | 'error' required

Overall verdict. "error" means the check could not complete (timeout, SERVFAIL); it is never "pass" when a lookup the verdict needs failed.

namestring required
cnamestring nullable required

Where a CNAME at the name pointed.

recordstring nullable required

Changes

No recorded changes to this operation across all 1 revision of this API.