Private beta
Verify with confidence. Deliver with control.
An email verification API that catches invalid domains, disposable addresses and typos before they reach your sign-up form or outreach list.
POST /api/v1/verifications
{ "email": "possible_typo@test.veriflowmail.com" }
{
"email": "possible_typo@test.veriflowmail.com",
"status": "risky",
"reason": "possible_typo",
"suggestion": "possible_typo@gmail.com",
"score": 30,
"flags": {
"disposable": false,
"role": false,
"free_provider": false,
"catch_all": null
},
"mode": "fast"
}What a fast check catches
Fast checks look at the address and its domain's DNS in milliseconds. They never email anyone.
Typos, with a fix
The domain looks like a misspelling of a common provider.
possible_typoDisposable addresses
The domain belongs to a disposable (temporary) email service.
disposable_domainDomains that don't exist
The domain does not exist.
domain_not_foundDomains with no mail server
The domain exists but has no mail server.
no_mx_recordsRole addresses
The address belongs to a role or team (e.g. info@), not a person.
role_accountBroken syntax
The address is not a valid email address.
invalid_syntax
How it works
- 1
Create a free account
Confirm your email, then create an API key in the dashboard. It's shown once and stored only as a hash.
- 2
Try it in test mode
Test keys accept addresses at test.veriflowmail.com and return fixed results, so you can build without using your allowance.
- 3
Act on the answer
Every result has a status, a reason code and a score. Block undeliverable addresses, ask about risky ones, suggest the fix for typos.
Straight about limits
- A fast check confirms the domain can receive email, not that the mailbox exists.
- Deep checks, which ask the mail server whether the mailbox exists, aren't available yet. We'll add them only once our tests show they give trustworthy answers.
- We don't publish an accuracy percentage until we've measured one. Some providers hide whether a mailbox exists, so some answers will always be unknown.
- A temporary DNS failure is reported as
unknown, never as undeliverable, and unknown results don't count toward your allowance.
Careful with your data
- Stored results are deleted after 30 days.
- API keys are shown once and stored only as hashes. Revoking one takes effect on the next request.
- Passwords are hashed with Argon2id, and logs never contain addresses, passwords or keys.
- Every organisation's data is kept apart, and that's tested for every feature.
Start free
The free plan includes 5,000 fast checks a month and 60 requests a minute. No card needed.
