Validate any email. Detect fraud. Enrich the data.

MailRook Email Validation runs real-time deliverability checks, disposable & fraud detection, and full domain intelligence — one API, 99.9% accurate.

Get started free 100 free checks/day — no credit card
GDPR Compliant
99.9% Uptime
Under 500ms
Try it out
or
Upload your list

Checking syntax, MX, SMTP, trust, gateway, and domain profile…

What we check
Mailbox exists and accepts email
Not a disposable address
Not a role or team inbox
Not a catch-all domain
Known mail provider lookup
Enterprise gateway detection
Company and domain profile
API and MCP-ready result
< 500ms
median check
99.9%
verdict accuracy
10
enterprise gateways
30+
data fields per check
01
Not just valid / invalid

A whole story behind every address.

Other validators reply with a flag. We open the envelope — deliverability, fraud risk, who runs the mail, what protects it, and how long the domain has existed. Built so a single check answers every question your team is about to ask.

Decide
Allow, challenge, or block — backed by a 0–100 trust score with itemised reasons.
Send
Know before you press send: gateway in front of the inbox, DMARC posture, catch-all behaviour.
Enrich
Domain age, registrar, ASN, MX provider, classification — every field a stable string in the API.
Result · [email protected] GET /v1/validate · 412 ms
Safe to send
Mailbox confirmed · trusted business domain
Overall
92/100

Will mail reach this inbox?

94/100
Mailbox accepts mail
Server confirmed [email protected] is real
verified
Not a catch-all
stripe.com rejects unknown addresses
reliable
Proofpoint detected

Messages scanned before reaching a person — expect stricter filtering.

Should you trust this signup?

88/100

Established domain · matched to a real business.

What's helping
Domain age 14y +24
Live website +18
Real organisation +12
Active SSL +8

What kind of email is this?

Type Company mailbox
Free provider no
Role account no (personal)
Provider Google Workspace
Dedupe alias [email protected]

Domain profile

Mail host
aspmx.l.google.com
Age
14 years
Registrar
MarkMonitor
Auth
SPF · DMARC reject
Every field above is in the JSON response See the API →
02 — Audiences

Built for the question you came with.

Five teams reach the same widget for five different reasons. MailRook Email Validation answers the right one first — in the language that team already uses.

For signup & checkout teams

Stop the throwaway accounts that looked fine.

Decide at the form, not at the database. Trust scores tell you whether to allow, challenge, or block — before the row ever lands in your users table.

Signup protection
Live signups · last 5 min
7 events
Established · Google Workspace · 9y
88
allow
Established · M365 · 12y
91
allow
Disposable infrastructure · mailinator pool
4
block
Risky TLD · domain 11 days old
31
verify
Established · Self-hosted · 6y
76
allow
Prospect · row 38 / 1,240
VP Engineering · Acme Corp · acme-corp.com
Deliverability
87 /100
Mailbox confirmed
Trust
79 /100
12y · real biz
DMARC
reject
enforced
Outreach signals
Type Company
Role account no
Free provider no
Catch-all no
Disposable no
Dedupe alias [email protected]
Proofpoint Enterprise detected

Warm the sending domain and segment this campaign — strict gateway filtering ahead.

For cold outreach & SDR teams

See the gateway before you hit send.

Spot Proofpoint, Mimecast, Barracuda and seven more enterprise gateways via MX fingerprinting. Stop frying your domain reputation on prospects who were never going to receive cold mail.

Cold outreach deliverability
For marketing ops & list cleaners

Cut bounce rate. Keep the sender reputation.

Upload a CSV, get every address back with a verdict, a score, and the reason. Sort, threshold, suppress — protect the domain you spent years warming up.

Email list cleaning
spring-newsletter.csv 42,118 addresses
Cleaned
29,902deliverable
7,581risky
3,369invalid
1,266unknown
Address Score Verdict
[email protected] 94 deliverable
[email protected] 62 role · risky
[email protected] 12 invalid
[email protected] 55 catch-all
[email protected] 89 deliverable
GET /v1/validate/{email} · 200 OK
{
  "data": {
    "email":            "[email protected]",
    "normalized_email": "[email protected]",
    "domain":           "stripe.com",
    "mx_record":        "aspmx.l.google.com",
    "provider":         "Google Workspace",
    "result":           "deliverable",
    "score":            94,
    "isv_deliverable":  true,
    "isv_nocatchall":   true,
    "isv_nodisposable": true,
    "isv_nofreeemail":  true,
    "isv_nogeneric":    true,
    "protection_level": "enterprise",
    "email_security":   ["Proofpoint"],
    "trust_score":      88
  },
  "code": 0, "message": "ok"
}
MCP · Agent tool call connected
▸ tool: mailrook.validate_email
▸ args: { email: "[email protected]" }
◂ result: deliverable · score 81 · company mailbox
For developers & AI agents

The widget is the API response.

Every field rendered above is a stable JSON key in the API. Drop it into a signup endpoint or expose it to your AI agent via MCP — same shape, same names, no surprises.

03 — Differentiator

We name the gateway nobody else names.

Most validators won't tell you what's protecting the inbox. MailRook Email Validation fingerprints 10 enterprise email gateways via MX records — so you know which prospects sit behind hard filtering before you send a single message.

01
Proofpoint
most common
02
Mimecast
enterprise
03
Barracuda
mid-market
04
Cisco
IronPort
05
FortiMail
Fortinet
06
Trend Micro
cloud
07
Sophos
gateway
08
SpamExperts
hosting
09
Hornetsecurity
EU
10
FireEye
enterprise
Returned in email_security[] · per-check field How detection works →
04 — Use it

Three ways to check an email.

On this page, as a CSV, or from your code. Same engine, same fields, same JSON in the response.

A · Web

Paste one email.

Type or paste an address into the box at the top of this page. Answer in under a second. No signup.

Verdict deliverable · 87/100
Mailbox accepts mail 412 ms
Not a catch-all reliable
Company mailbox Google Workspace
Free email checkers
B · Bulk

Upload a list.

Drop a CSV with thousands of addresses. Download a cleaned file with a verdict and a score on every row.

drag & drop a CSV
spring-newsletter.csv
42,118 addresses · 3.2 MB
71% deliverable · 18% risky 8% invalid
Bulk list cleaning
C · API & MCP

Call it from your code.

One HTTP request from your app or signup form. Or one tool call from your AI agent over MCP.

curl
curl api.mailrook.com/v1/validate/[email protected] \
  -H "Authorization: Bearer …"
or via MCP
mailrook.validate_email
API docs & examples
05 — Pricing

Start free. Pay when you grow.

100 free checks every day — every account, forever. Add credits when you need volume. No subscription traps.

Free forever
$0 / month

Perfect for developers and small teams getting started with email validation.

  • 100 free checks per day
  • Single & bulk email validation
  • REST API access
  • Syntax, DNS, MX & mailbox checks
  • No credit card required
Get started free
Pay as you go
One-time purchase
$39

10,000 credits — use at your own pace. No subscription, no expiration.

Choose pack size
  • 10,000 verification credits
  • Credits never expire
  • Everything in the free plan
  • One-time payment — no recurring fees
  • $0.0039 per verification
Buy credits
High volume
Custom

For businesses and teams that need high-volume validation or dedicated infrastructure.

  • Unlimited or high-volume checks
  • Everything in the free plan
  • Priority support
  • SLA & dedicated infrastructure
  • Custom integrations & onboarding
Contact us
06 — Questions

Frequently asked.

MailRook Email Validation performs multiple checks: syntax validation, DNS and MX record lookup, mailbox deliverability verification, catch-all detection, disposable email detection, and free email provider identification. Each check returns a separate flag so you can decide how strict your filtering should be.

Single email validations typically complete in under 500 milliseconds. Bulk list processing depends on list size, but most lists of up to 10,000 addresses finish within a few minutes.

No. MailRook Email Validation does not permanently store the email addresses you validate. Addresses are processed in memory and discarded after the validation result is returned. We are fully GDPR compliant.

A catch-all (or accept-all) domain is configured to accept emails sent to any address at that domain, even if the specific mailbox does not exist. This makes it impossible to confirm whether a particular address is real. MailRook Email Validation flags these so you can handle them separately.

Yes. Use the REST API to validate emails in real time as users sign up. A single GET request returns the full validation result, making it straightforward to block invalid or disposable addresses at the point of entry.

Yes. Every account gets 100 free email checks per day — no credit card required. This lets you validate emails, test the API, and explore all features before committing to a paid plan.

Yes. MailRook Email Validation detects 10 enterprise email security gateways including Proofpoint, Mimecast, Barracuda, Cisco, and FortiMail via MX record analysis. Every validation returns an email_security array listing detected gateways and a protection_level field (none, basic, or enterprise) — helping cold outreach teams prioritize unprotected inboxes for higher reply rates.

— End —

Your next email — checked.

100 free checks every day. No credit card. Be running in the time it takes to read this sentence.