Docs/APIs/Email Validator

Email Validator

Validate email addresses

OperationalCredits 20 per callp50 307msData ValidationStar

Overview

An email verification API and email checker for signup forms and CRM imports. Email Validator checks the address format, resolves the domain's MX records, follows the RFC fallback to the domain's A record, flags domains that publish a null MX, and reports whether the domain has SPF and DMARC records. It matches the domain against free, disposable and role-account lists, and returns a normalized address so +tag and Gmail-dot variants collapse to one. Every check runs over DNS, with no SMTP mailbox probe, so a slow mail server never holds up the response. Paid plans add a risk score and a suggested correction for domain typos.

Live Test Email Validator API →

Endpoint

One host, one path per API. The block below shows this call in four languages; every one of them is the same HTTP request. Making requests covers the timeouts, retries and parameter rules that apply to all of them. The SDKs wrap the same call in a typed client.

GEThttps://api.apiverve.com/v1/emailvalidator
curl "https://api.apiverve.com/v1/emailvalidator?email=support%40myspace.com" \
  -H "x-api-key: your_api_key_here"

Replace your_api_key_here with the key from your dashboard. When the inputs arrive as a list rather than one at a time, batch requests run up to 200 of them through this same API in a single call.

Authentication

Send your key in the x-api-key header. That is the only auth step — there is no token exchange and no per-endpoint scope to configure. Authentication covers creating, rotating and revoking keys.

401 is the only auth verdict

A 401 means the key is missing, invalid or expired. A 403 means the key is valid but not permitted here — blocked by a key restriction or an IP allow-list. Running out of credits is a 429.

Parameters

Sent in the query string. Premium parameters are accepted on every plan but only take effect on plans that include them.

ParameterTypeDescription
emailRequiredstringThe email address to validate (e.g., support@myspace.com)
email

Response

Every API returns the same three top-level keys, so one response handler covers your whole integration: status, error and data. Only data changes shape. Response format covers the envelope, the other output formats and how premium fields are withheld.

Sample response
{
  "status": "ok",
  "error": null,
  "data": {
    "email": "support@myspace.com",
    "domain": "myspace.com",
    "username": "support",
    "isRegexValid": true,
    "hasTypo": false,
    "isMxValid": true,
    "isValid": true,
    "isFreeEmail": false,
    "isCompanyEmail": true,
    "isDisposable": false,
    "isRoleAccount": true,
    "mxRecord": "mxa-00ac0e01.gslb.pphosted.com",
    "isNullMx": false,
    "canReceiveMail": true,
    "hasSpf": true,
    "hasDmarc": true,
    "isSubaddressed": false,
    "normalizedEmail": "support@myspace.com",
    "suggestedCorrection": null,
    "mailProvider": "Proofpoint",
    "isSecurityGateway": true,
    "riskScore": 10,
    "riskLevel": "low"
  }
}

Response fields

Paths are relative to data. Premium fields are absent rather than zeroed on plans that do not include them, so check for presence instead of comparing to 0.

FieldTypeExampleDescription
emailstring"support@myspace.com"The email address that was validated
domainstring"myspace.com"The domain portion extracted from the email
usernamestring"support"The username (local part) extracted from the email
isRegexValidbooleantrueEmail passes standard regex format validation
hasTypobooleanfalseThe address is malformed and fails format validation
isMxValidbooleantrueThe domain has valid mail exchange (MX) records and can receive mail
isValidbooleantrueIndicates whether the email address is valid
isFreeEmailbooleanfalseDomain belongs to a free consumer email provider
isCompanyEmailbooleantrueDomain appears to be a corporate/company domain
isDisposablebooleanfalseDomain is a known disposable or throwaway email provider
isRoleAccountbooleantrueMailbox is a role or shared address (e.g. info@, support@, noreply@) rather than a person
mxRecordstring"mxa-00ac0e01.gslb.pphosted.com"The preferred (lowest-priority) mail exchanger host for the domain, or null when it has none
isNullMxbooleanfalseThe domain publishes a null MX record (RFC 7505), declaring that it accepts no email
canReceiveMailbooleantrueThe domain can be sent mail: it has a real MX record, or no MX at all but an A record that mail falls back to (RFC 5321). Null if the fallback lookup could not complete. Unlike isMxValid, this follows the RFC fallback, so a parked domain with only a website address can be true
hasSpfbooleantrueThe domain publishes an SPF (v=spf1) record, a sign it is set up to send mail. Null if the TXT lookup could not complete
hasDmarcbooleantrueThe domain publishes a DMARC (v=DMARC1) record at _dmarc. Null if the lookup could not complete
isSubaddressedbooleanfalseThe address uses a +tag sub-address, e.g. jane+news@example.com
normalizedEmailstring"support@myspace.com"Canonical address for spotting duplicates: the +tag removed, and for Gmail the dots too (googlemail.com folds into gmail.com). Not a deliverability claim
suggestedCorrectionPremiumobjectnullThe likely intended email when a common domain typo is detected (e.g. gmial.com to gmail.com), otherwise null
mailProviderPremiumstring"Proofpoint"Who handles the domain's incoming mail, read from its MX records: Google, Microsoft, Zoho, Proofpoint and about 25 others. Null when the domain runs its own mail servers or uses a provider not on the list
isSecurityGatewayPremiumbooleantrueTrue when mailProvider is an email security gateway (Proofpoint, Mimecast, Cisco and similar) that filters mail before it reaches the real mailbox host, which is typical of larger companies; null when mailProvider is null
riskScorePremiumnumber10Composite 0-100 risk score combining deliverability, disposable, role and format signals (higher is riskier)
riskLevelPremiumstring"low"Risk band derived from the score: low, medium or high

Errors

Read the HTTP status first, then error for the specific reason. The body names the parameter that has to change. Error handling covers the full status list and which of them are worth retrying.

StatusMeaningWhat to do
400Input was rejectedRead error; it names the parameter.
401Key missing or invalidCheck the header name and the key value.
403Key valid, but not permittedA key restriction or IP allow-list; see key scoping.
429Rate limited, or out of creditsRead error to tell them apart; see rate limits.

Start from a template

Working apps built on this API, ready to deploy with your own key. Vercel asks for the key when you deploy; the code is on GitHub to change first.

Use cases

Signup Abuse Prevention
To stop fake signups, SaaS onboarding flows block temporary addresses by checking disposable flags before creating new trial accounts.
B2B Lead Routing
Sales teams verify company domains against free provider flags to route corporate inquiries directly to account executives.
Mailing List Hygiene
When scrubbing subscriber databases, email marketers filter out missing mail records and invalid syntax to protect sender reputation.
Customer Support Routing
Flag shared inboxes like billing or support addresses during ticket submission to direct automated receipts to named team members instead.
Free Trial Abuse
Store the normalized address at signup so jane+1@gmail.com and j.ane@gmail.com count as one person when a product hands out free trials or credits.

Other ways to use Email Validator

Set up Email Validator on APIVerve, or reach the same source a different way. Your APIVerve account and credits work on all of them — one key, one balance.

Give it to an AI agentConnect over MCP and your agent calls it as a native tool — Claude, Cursor, ChatGPT.VerveKit →Reference →
Google Sheets or ExcelA =VERVE() formula fills a column — no script, no export, recalculates in place.VerveSheets →Reference →
Ground an agent on itA cited, machine-checkable fact your model can't produce on its own.VerveContext →Reference →

Pages that use this API:

More in Data Validation:

Was this page helpful?