Sender Registry Signals API
Stop fake signups before they happen.
One API call at registration checks an email address and IP against the network: disposable email, Tor exit node, risky top-level domain, and senders our network has confirmed as bulk or malicious. Clean data at the front door.
100 checks a month free. No card needed.
{
"disposable": true,
"tor_exit": true,
"risky_tld": false,
"bulk_sender": { "flagged": false },
"known_malicious": { "flagged": false },
"sentinel": { "flagged": false },
"ip_reputation": { "flagged": true, "sources_agreeing": 4 },
"domain_reputation": { "flagged": false },
"spoofable": { "spoofable": false, "grade": "A", "spf": "strict", "dmarc": "reject" },
"mx": { "valid": true, "reason": "mx_found" },
"role_account": { "flagged": false }
}
Eleven signals, one request.
One call returns all eleven, grouped below by what you send us. Scoped keys shown once, a live usage view, and an honest answer for every signal.
From an email address
What the address itself looks like, then what the network already knows about it.
Disposable email
Throwaway and temporary email domains, from a list refreshed continuously.
Risky TLD
Emails on top-level domains disproportionately used for scams.
Role account
Shared mailboxes like info@, and send-only addresses like noreply@, returned as separate categories.
Bulk-sender reputation
Senders multiple independent organisations have flagged as unwanted bulk mail, with corroboration counts.
Known-malicious reputation
Senders and domains our network has confirmed as malicious. Intelligence you cannot get from a free list.
From an IP address
Where the request came from, from the public lists through to our own traps.
Tor exit node
IP addresses exiting the Tor network, a common signal for anonymous abuse.
IP reputation
IP addresses on multiple independent abuse blocklists, returned with how many sources agree.
Sentinel Network
IP addresses our own network of decoy-trapped sites has caught in the act, before they reach any public list.
From a domain
Live DNS, cached for 24 hours.
Domain spoofability
Whether a domain can be impersonated: weak or missing SPF and DMARC, with its A to F grade.
Mail deliverability
Whether the domain can receive email at all. Catches typos and fabricated domains before they reach your database.
Domain reputation
Whether the domain has been reported as a scam site, and how long it has been listed.
Check a payee before money moves.
One more endpoint answers a different question: is this bank account, crypto wallet, phone number or payment handle a network-confirmed fraud money target? Verify a payee inside your own payment or onboarding flow, before the money leaves. No-store: the value is hashed and discarded, and the response bands the count so it never fingerprints one source. Growth and above.
{ "value": "GB29 NWBK 6016 1331 9268 19",
"type": "bank_account" }
{
"flagged": true,
"status": "confirmed",
"entity_type": "bank_account",
"fraud_sightings": "2-5",
"first_seen": "2026-08-21"
}
Simple, usage-based pricing.
Start free. Move up a tier for more signals and more checks. Save 20% paid annually.
Free
Get started. No card needed.
100 checks / month
- Disposable email check
- Tor exit IP check
- Domain spoofability check
Starter
For a small app or side project.
1,500 checks / month
- Everything in Free
- IP reputation check
- Domain reputation check
- Mail deliverability check
- Role account detection
- Risky TLD check
Growth
Network reputation, where the real value is.
15,000 checks / month
- Everything in Starter
- Bulk-sender reputation
- Known-malicious reputation
- Sentinel Network intelligence
Scale
High volume for production traffic.
150,000 checks / month
- Everything in Growth
- Higher rate limit
- Priority email support
Already a Sender Registry customer? Integrate your account.
Query your own intelligence, submit reports, and receive webhooks with the account API included in your plan.
Registry & assessment API
Look up domains, senders and URLs, retrieve your assessments and campaigns, and submit reports programmatically.
Webhooks with delivery history
Choose the events you want, test before relying on them, and see every delivery attempt with its response status and automatic retries.
The same evidence, not a stripped model
Risk, Confidence and Network Confirmation as separate fields, plain-English summaries, and related-object references.
Not a developer? See Sender Registry plans.