CyberMax
CyberMax › Answers

A free email validation API you can call without a key

Updated 2026-10-17 · Data and API builders · by CyberMax

Short answer

Call Mailvett's validate endpoint with the address: it checks syntax, whether the domain has mail servers (MX), whether it is a disposable or role address (info@, sales@), suggests fixes for typos like gmial.com, and returns a verdict and a 0-100 score. The free tier is 50 calls a day without a key; up to 10 addresses per call.

Copy-paste code

One address, then several in one POST

curl "https://mailvett.cybermaxtools.com/api/validate?email=someone@gmial.com"

curl -X POST https://mailvett.cybermaxtools.com/api/validate \
  -H 'Content-Type: application/json' \
  -d '{"emails": ["ana@example.com", "info@company.com", "x@mailinator.com"]}'

Good to know

Validate at the moment of signup (and suggest the typo fix to the person) rather than cleaning a list months later.

No validator can promise an inbox exists without sending mail; a good one tells you which addresses are certainly bad and which are risky.

Mailvett API: Catch bad emails before you send or save

from $5

Mailvett validates up to 10 addresses per call (syntax, MX, provider, disposable, role, typo fixes, domain age, SPF, DMARC) with a verdict and score. Free: 50 calls a day; packs start small with no subscription.

Secure checkout · 14-day fix-or-refund if it doesn't work as described (terms)

Questions

Does it send an email to check?

No. It checks syntax, DNS and known lists; it never sends mail.

What does a role address mean?

A shared address like info@ or support@; fine for business contacts, often unwanted in a consumer signup.

Free: the Free API Starter Kit

Copy-paste calls for 4 APIs with free daily tiers (CVE priority, VIN recalls, US duty rates, email checks), then 5 short emails on KEV/EPSS, MCP and free data.

You get one email to confirm first. Then the kit, and 5 short emails over two weeks. One-click unsubscribe in every email; we never share your address.

Related answers

How to check what technology a website runs onFind a site's CMS, framework, analytics, CDN and email provider: response headers, page source, DNS records, aHow to use CISA's Known Exploited Vulnerabilities (KEV) catalogDownload CISA KEV as JSON, filter it with jq (ransomware use, vendor, due date), match it to your CVEs, and ra