Overview
Validate first. Gate signup with one field.
Email Score inspects an address or bare domain, then returns verdict. Your backend can continue onboarding when the value is allow, or reject the attempt when it is block.
Integration rule of thumb
Call validate from your server. Branch on verdict === "allow". Store policyReason, checks.disposable, and deliverability for support tickets and analytics. Do not invent your own score from those fields unless you have a custom policy.
What runs in a validation
- Parse: confirm the input is a usable email or domain string.
- List and Space rules: apply disposable / block lists and any allow or block rules on your Space.
- Mail signals: look up DNS and MX (or skip when a known provider says DNS is unnecessary).
- Verdict: set
allowonly whenchecks.syntaxispass,checks.disposableismiss, and deliverability isdeliverable. Every other outcome isblock.
Email vs domain requests
user@company.com
Full address path. You get provider classification, disposable checks, and domain mail signals in one response.
company.com
Domain-only path. Useful when you already separated the host, or when you want a host-level gate before collecting a full email.
Prefer POST /api/v1/validate/detect if your client may send either shape. Both paths return the same response model, including verdict.
How to read allow and block
allow
Syntax passed, disposable checks missed, and mail signals look healthy. Safe default: create the account (or advance the next onboarding step).
block
Invalid syntax, disposable / blocklist hit, or deliverability that is undeliverable, unknown, or skipped. Safe default: stop with a neutral error and ask for another address.
Concrete outcomes
jordan@acme.io
Typical business domain with MX:
allow. Proceed with signup.guest@mail.tempmail.com
Matches a disposable / block list:
block. Reject without naming the list publicly.totally-broken
Fails parse:
block. Prompt the user to fix the field.
Space allowlists and blocklists still matter. A trusted host you allow, or an abusive host you block, updates the same verdict your API consumer reads.
Supporting fields (not the gate)
checks.disposableandpolicyReason- Explain list hits and overrides (clean, blocklist, allowlist, invalid syntax, and similar).
deliverability.status- Mail-ability signal: deliverable, undeliverable, unknown, or skipped. The usage page Status column mirrors this value. It is context for humans and charts, not a replacement for
verdict. providerandflags- Optional enrichment such as known mailbox providers and role accounts. Helpful for product analytics; still secondary to
verdict.
Email Score does not ship a 0 to 100 risk score. You get structured facts plus a single decision field built from those facts and your Space rules.
Next pages
- Quickstart: create a Space, mint a key, fire a first request.
- API reference: request bodies, auth headers, and response schemas for email, domain, detect, and account.
