AbuseGraphDocs
API reference

Email Intelligence

Standalone email risk scoring (disposable, domain, exposure) without a full check.

Score an email (or batch)

POST
/api/v1/email

Standalone email intelligence without a full risk check. Pass email or emails (max 1000). Single → { ok: true, result }. Batch → { ok: true, results: [...] }.

Authorization

x-api-key<token>

Workspace secret key (sk_test_… / sk_live_…). Prefer test keys in these docs. Create keys in the console — never commit real values.

In: header

Header Parameters

X-Request-Id?string

Optional client correlation id. Echoed on the response; minted when omitted.

Length8 <= length <= 128

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

application/json

application/problem+json

application/problem+json

application/problem+json

curl -X POST "https://example.com/api/v1/email" \  -H "Content-Type: application/json" \  -d '{    "email": "user@example.com"  }'
{  "ok": true,  "result": {    "email": "user@example.com",    "domain": "example.com",    "recommendation": "send",    "score": 12,    "disposable": false,    "risky": false,    "breach": false,    "signals": []  }}

Monitor

Daily exposure monitoring for domains you own and people you name. Three layers: employees on your systems and elsewhere (DNS-verified company domain), and users of your app (licensed app login host, e.g. app.acme.com). Alerts report where credentials appeared — never passwords. No auto-enroll.

Session

Create a short-lived sessionId from collect, then bind an account on check.