API Endpoints Reference
Complete documentation of all InboxRisk API endpoints with request parameters, response formats, and code examples.
Authentication
All API requests must include your API key in the Authorization header. Use Bearer token authentication:
Authorization: Bearer YOUR_API_KEYℹ️ Tip: Get your API key from the dashboard after signing up. Never share it publicly or commit to version control.
/v1/email/risk-checkComprehensive email risk assessment combining disposable detection, fraud reports, domain reputation, and AI analysis.
Request Parameters
POST /v1/email/risk-check
Content-Type: application/json
Authorization: Bearer YOUR_API_KEY
{
"email": "user@example.com",
"check_smtp": true,
"check_domain": true,
"check_fraud_reports": true
}Response
{
"email": "user@example.com",
"risk_score": 32,
"risk_level": "medium",
"is_disposable": false,
"is_valid_format": true,
"is_smtp_valid": true,
"is_free": true,
"fraud_reports": 0,
"fraud_indicators": [],
"domain_risk": {
"domain": "example.com",
"age_days": 3650,
"reputation_score": 95,
"is_blacklisted": false,
"has_spf": true,
"has_dkim": true,
"has_dmarc": true
},
"created_at": "2026-07-07T10:30:00Z"
}/v1/email/disposable-checkFast check for temporary/disposable email addresses. Ideal for real-time validation in signup forms.
Request Parameters
POST /v1/email/disposable-check
Content-Type: application/json
Authorization: Bearer YOUR_API_KEY
{
"email": "user@tempmail.com"
}Response
{
"email": "user@tempmail.com",
"is_disposable": true,
"domain": "tempmail.com",
"provider": "TempMail",
"created_at": "2026-07-07T10:30:00Z"
}/v1/email/reputationGet sender reputation score and email deliverability status including SPF, DKIM, and DMARC verification.
Request Parameters
POST /v1/email/reputation
Content-Type: application/json
Authorization: Bearer YOUR_API_KEY
{
"email": "sender@company.com"
}Response
{
"email": "sender@company.com",
"reputation_score": 92,
"deliverability": "high",
"domain": "company.com",
"spf_status": "pass",
"dkim_status": "pass",
"dmarc_status": "pass",
"smtp_valid": true,
"catch_all": false,
"role_based": false,
"created_at": "2026-07-07T10:30:00Z"
}/v1/email/content-analysisAI-powered analysis of email content for phishing, fraud, and malicious indicators.
Request Parameters
POST /v1/email/content-analysis
Content-Type: application/json
Authorization: Bearer YOUR_API_KEY
{
"email": "user@example.com",
"subject": "Confirm Your Account",
"body": "Click here to verify your account...",
"html": "<html>...</html>"
}Response
{
"email": "user@example.com",
"phishing_score": 15,
"phishing_level": "low",
"fraud_indicators": [],
"malicious_links": [],
"suspicious_domains": [],
"ai_confidence": 0.94,
"created_at": "2026-07-07T10:30:00Z"
}/v1/domain/risk-checkAnalyze email domain for age, reputation, phishing history, and security records.
Request Parameters
POST /v1/domain/risk-check
Content-Type: application/json
Authorization: Bearer YOUR_API_KEY
{
"domain": "example.com"
}Response
{
"domain": "example.com",
"risk_score": 8,
"risk_level": "safe",
"age_days": 5475,
"reputation_score": 98,
"is_blacklisted": false,
"is_phishing": false,
"spf_configured": true,
"dkim_configured": true,
"dmarc_configured": true,
"created_at": "2026-07-07T10:30:00Z"
}/v1/email/bulk-checkBatch process multiple emails in a single request. Up to 10,000 emails per request. Perfect for data migration and list cleanup.
Request Parameters
POST /v1/email/bulk-check
Content-Type: application/json
Authorization: Bearer YOUR_API_KEY
{
"emails": [
"user1@example.com",
"user2@example.com",
"user3@example.com"
],
"check_smtp": true,
"check_fraud": true
}Response
{
"batch_id": "batch_12345",
"total": 3,
"processed": 3,
"results": [
{
"email": "user1@example.com",
"risk_score": 25,
"risk_level": "safe"
},
{
"email": "user2@example.com",
"risk_score": 78,
"risk_level": "high"
},
{
"email": "user3@example.com",
"risk_score": 45,
"risk_level": "medium"
}
],
"created_at": "2026-07-07T10:30:00Z"
}Error Responses
400Bad RequestInvalid parameters or malformed request body.
401UnauthorizedMissing or invalid API key. Check your Authorization header.
429Too Many RequestsRate limit exceeded. Check X-RateLimit headers and retry after delay.
500Internal Server ErrorTemporary server issue. Retry the request with exponential backoff.
Example Error Response
{
"error": {
"code": "invalid_email",
"message": "Email format is invalid",
"details": {
"email": "user@"
}
}
}Rate Limiting
All API requests are rate-limited based on your plan. Rate limit information is included in response headers.
Free Plan
100
requests per month
Pro Plan
50,000
requests per month
Burst: 1,000 req/sec
Enterprise
Unlimited
Custom rate limits available
Response Headers
X-RateLimit-Limit: 50000 — Monthly limit
X-RateLimit-Remaining: 49523 — Requests left
X-RateLimit-Reset: 1720310400 — Reset timestamp