How do I add a DKIM record in Vercel DNS?

To add a DKIM record in Vercel DNS, pass the label to vercel dns add. The dashboard leaves Name blank at the apex; the CLI uses @.

Managing DNS records is two forms of one product. The dashboard fields are Name, Type, Value, TTL, Comment, and for an MX a priority under More. Name is the prefix only. The same page says to leave Name blank for a root MX, and that a record can take up to 24 hours to show. TTL's default on that page is 60 seconds. The CLI is vercel dns add, with the domain, the name, the type and the value. For an apex row the CLI name is '@', which the email section of that page writes out. The dashboard and the CLI disagree on purpose: blank in one, @ in the other. These steps apply when the domain uses Vercel's nameservers. A domain on someone else's nameservers is edited there. Vercel does not host mailboxes. capturedOn: 2026-11-10.

Apex DKIM is not an apex name, so both forms take as1._domainkey. Apex SPF is the row that splits:

vercel dns add example.com as1._domainkey TXT "<sheet value>"
vercel dns add example.com '@' TXT "v=spf1 include:_spf.agentisend-dns.com ~all"
vercel dns add example.com send TXT "v=spf1 include:_spf.agentisend-dns.com -all"
vercel dns add example.com send MX feedback.agentisend-dns.com 10
vercel dns add example.com _dmarc TXT "v=DMARC1; p=none; rua=mailto:dmarc@reports.agentisend-dns.com"

Replace example.com with the zone. The DKIM value is the sheet value from GET /domains/{id}/setup, not a key this page can know. The page also says each name can hold only one SPF record, and the CLI adds a row, it does not merge one. If '@' already has a v=spf1 TXT, edit that value and add include:_spf.agentisend-dns.com before you add another.

POST /domains/{id}/verify is the check after Vercel's nameservers answer. GET /domains/{id} shows the row statuses. Hosts without this CLI are listed on the DNS provider page. The record set itself is Domains and DNS.

Written by the AgentiSend team.