Email Validation API

Fast, accurate, and privacy-first email verification. Validate syntax, domain, MX records, SPF/DKIM/DMARC, detect disposable emails, suspicious patterns, and more.

0
Emails validated
0ms
Avg response time
0%
Cache hit rate
0
Emails stored

Comprehensive Validation

Everything you need to validate email addresses and protect your application from invalid, fake, or malicious emails.

Core Validation

Syntax Validation

RFC-compliant email format validation to catch typos and invalid addresses.

Domain & MX Verification

Verify domain exists and has MX records configured to receive mail.

Disposable Detection

Detect temporary and disposable email addresses from 4000+ providers.

Role-Based Detection

Identify role-based addresses like admin@, support@, info@.

Catch-All Detection

Detect domains configured to accept mail for any address.

Typo Suggestions

Suggest corrections for common domain typos like gmial.com.

Email Authentication (SPF/DKIM/DMARC)

SPF Validation

Parse and validate SPF records, check DNS lookup limits, analyze mechanisms.

DKIM Verification

Check 30+ common DKIM selectors (Google, SendGrid, Mailchimp, etc.).

DMARC Analysis

Validate DMARC policy, alignment modes, and reporting configuration.

Quality Indicators

Suspicious Patterns

Detect bot-generated emails, keyboard patterns, spam keywords with red flags.

Gravatar Check

Verify if email has an associated Gravatar profile (indicates real person).

Subdomain Detection

Identify emails on subdomains (mail.example.com) and extract root domain.

Activity Indicator

SMTP-based signals suggesting whether the mailbox is actively used.

Advanced Features

High-Performance Cache

Lightning-fast results with intelligent long-term caching. Valid emails stay valid.

Alias Detection

Identify Gmail dots, plus addressing, and return canonical address.

Batch Processing

Validate up to 100 emails in a single API request with rate limiting protection.

Try It Now

Enter an email address to see the comprehensive validation in action.

of demo validations remaining
Demo limit reached
Deep Verification (SMTP)
Verify mailbox exists
Domain Auth (SPF/DKIM/DMARC)
Check email security config
Score
Result from cache (cached at )

Core Validation

Syntax
Domain
MX Records
Disposable
Role-Based
Catch-All
Subdomain
Mailbox

Quality Indicators

Gravatar
Pattern Analysis
Risk: %
Red Flags:
No suspicious patterns detected
Activity Indicator
Likely Active: ( confidence)
Subdomain Detected
Root domain:

SMTP Deep Verification

Mailbox
Confidence
Catch-All
Response Time
SMTP Response
Error:

Domain Authentication (SPF/DKIM/DMARC)

Authentication Score
SPF
DKIM
Selectors:
DMARC
Policy:
Canonical address:
Did you mean: ?

Demo Limit Reached

You've used all 10 demo validations. Get a free API key to continue with 10,000 validations per month!

Simple, Transparent Pricing

Start free, upgrade when you need more.

Free

$0/month

Perfect for getting started

  • 10,000 validations per month
  • All validation features
  • SPF/DKIM/DMARC validation
  • Gravatar & pattern detection
  • Batch processing (up to 100)
POPULAR

Pro

$100/month

For high-volume applications

  • Unlimited validations
  • All validation features
  • SPF/DKIM/DMARC validation
  • Higher rate limits (1000 req/min)
  • Priority support

Special intro pricing!

Frequently Asked Questions

Everything you need to know about email validation

What is email validation?

Email validation is the process of verifying that an email address is valid, deliverable, and safe to send to. It checks syntax, domain existence, MX records, and can detect disposable or role-based addresses. This helps improve email deliverability and protect your sender reputation.

How many free email validations do I get?

The free tier includes 10,000 email validations per month, which is perfect for small projects, startups, and testing. No credit card required to get started.

What does the email validation API check?

Our API performs comprehensive validation including:

  • Email syntax validation (RFC 5322 compliant)
  • Domain existence and DNS records
  • MX record verification
  • Disposable email detection (4,000+ domains)
  • Role-based address detection (admin@, support@, etc.)
  • Catch-all server detection
  • SPF/DKIM/DMARC authentication checks
  • Gravatar presence (indicates real person)
  • Suspicious pattern detection
  • Typo suggestions for common domains

Is the email validation API privacy-first?

Yes! We only store MD5 hashes of email addresses in our cache - never the actual email addresses. This means even if our database were compromised, no personally identifiable email addresses could be extracted. Your users' privacy is protected by design.

Can I validate emails in bulk?

Yes! Our batch endpoint allows you to validate up to 100 emails in a single API request. This is perfect for validating email lists, cleaning up databases, or processing signup forms with multiple addresses.

Do you have a .NET client library?

Yes! We offer an official EmailValidatr.Client NuGet package for .NET developers. It provides a strongly-typed client with async methods, dependency injection support, and helper methods like IsValidAsync(), IsDisposableAsync(), and more.

dotnet add package EmailValidatr.Client

Easy Integration

Get started in minutes with our simple API.

# Validate with all features
curl -X GET "https://emailvalidatr.com/api/validate?email=user@example.com&includeDomainAuth=true" \
  -H "X-API-Key: your_api_key"

# Deep verification (SMTP check)
curl -X GET "https://emailvalidatr.com/api/validate?email=user@example.com&deep=true" \
  -H "X-API-Key: your_api_key"

# Batch validation
curl -X POST "https://emailvalidatr.com/api/validate/batch" \
  -H "Content-Type: application/json" \
  -H "X-API-Key: your_api_key" \
  -d '{"emails": ["user1@example.com", "user2@example.com"], "include_domain_auth": true}'
// Full validation with all features
const response = await fetch(
  'https://emailvalidatr.com/api/validate?email=user@example.com&includeDomainAuth=true',
  { headers: { 'X-API-Key': 'your_api_key' } }
);

const result = await response.json();

// Access quality indicators
console.log('Has Gravatar:', result.validations.quality_indicators?.has_gravatar);
console.log('Suspicious:', result.validations.quality_indicators?.suspicious_patterns?.is_suspicious);
console.log('Red Flags:', result.validations.quality_indicators?.suspicious_patterns?.red_flags);

// Access domain authentication
console.log('SPF Valid:', result.validations.domain_authentication?.spf?.is_valid);
console.log('DKIM Found:', result.validations.domain_authentication?.dkim?.exists);
console.log('DMARC Policy:', result.validations.domain_authentication?.dmarc?.policy);
console.log('Auth Score:', result.validations.domain_authentication?.authentication_score);
// Using EmailValidatr.Client NuGet package
using EmailValidatr.Client;

var client = new EmailValidatrClient("your_api_key");

// Full validation with domain auth
var result = await client.ValidateAsync("user@example.com", new ValidationOptions
{
    DeepVerification = true,
    IncludeDomainAuth = true
});

// Check quality indicators
Console.WriteLine($"Has Gravatar: {result.Validations.QualityIndicators?.HasGravatar}");
Console.WriteLine($"Suspicious: {result.Validations.QualityIndicators?.SuspiciousPatterns?.IsSuspicious}");

// Check domain authentication
var domainAuth = result.Validations.DomainAuthentication;
Console.WriteLine($"SPF Valid: {domainAuth?.Spf?.IsValid}");
Console.WriteLine($"Auth Score: {domainAuth?.AuthenticationScore}");

// Quick checks
bool isSuspicious = await client.IsSuspiciousAsync("spam123456@example.com");
bool? hasGravatar = await client.HasGravatarAsync("user@example.com");
# Check domain authentication only (SPF/DKIM/DMARC)
curl -X GET "https://emailvalidatr.com.com/api/domain-auth?domain=example.com" \
  -H "X-API-Key: your_api_key"

# With custom DKIM selectors
curl -X POST "https://emailvalidatr.com.com/api/domain-auth" \
  -H "Content-Type: application/json" \
  -H "X-API-Key: your_api_key" \
  -d '{"domain": "example.com", "dkim_selectors": ["google", "selector1", "custom"]}'

# Response includes:
# - SPF: record, mechanisms, all_mechanism, warnings
# - DKIM: selectors_found, public key status
# - DMARC: policy, subdomain_policy, percentage, rua/ruf
# - authentication_score: 0-100 based on configuration

Privacy First

We never store email addresses. Only MD5 hashes are used for usage tracking, ensuring your data stays private and compliant with GDPR, CCPA, and other privacy regulations.

GDPR Compliant
CCPA Compliant
No Email Storage
Zero Tracking

Contact Us

Have questions, feedback, or need support? We'd love to hear from you.

/5000 characters (minimum 10 required)

Message Sent!
Thank you for reaching out. We'll get back to you soon.
Failed to Send

By registering, you agree to our terms of service. We'll only use your email to send important updates about your API key.

Important: Copy and save this key now. It won't be shown again.

Pro Account Active