MailCheck.ai API

Beginner's Pick Email / No Auth Required Beginner HTTPS
Free to Use 5 per window (0 remaining at test time)
90 A+
Measured Score 0 50 100 Speed 20/30 Consistency 20/20 Security 20/20 Browser access 15/15 Transparency 15/15 TESTED 2026-08-10

Overview

MailCheck.ai (powered by UserCheck) is a free API that detects whether an email domain belongs to a known temporary or disposable email provider, helping prevent fake sign-ups without requiring authentication. It checks a continuously updated blocklist of throwaway email domains and returns a simple boolean result. No API key is needed for the basic disposable-check endpoint.

Beginner Tip

MailCheck.ai is one of the simplest no-auth APIs available — just append a domain to the URL and you get back a JSON object with a disposable field. Use it to block throwaway email addresses from your sign-up form with a single fetch call.

Measurement Record

What actually happened when we called this API from our own infrastructure. Every value below was recorded by the request, not copied from the provider's documentation.

Request
GET https://api.mailcheck.ai/domain/mailinator.com
Result
HTTP 200 · application/json · 354 bytes · compressed
Response time
157 ms (median of 3) · fastest 151 ms
Transport
TLSv1.3 · TLS_AES_256_GCM_SHA384 · certificate issued by Google Trust Services
Browser CORS
Allowed — Access-Control-Allow-Origin: *
Rate limit
5 per window (0 remaining at test time)
Served by
cloudflare
Recorded
2026-08-10

Fields Returned

Top-level fields present in the response we captured, with the type and value we actually received.

Field Type Value received
status integer 200
domain string mailinator.com
domain_age_in_days integer 8440
mx boolean true
mx_records array [1 item]
mx_providers array [0 items]
spf string strict
dmarc string reject
disposable boolean true
public_domain boolean false
relay_domain boolean false
free_subdomain boolean false
spam boolean true
did_you_mean null null

Captured Response

Captured from a real request to https://api.mailcheck.ai/domain/mailinator.com on 2026-08-10. Long arrays and nested objects are truncated to keep the shape readable.

JSON Response · Captured
{
  "status": 200,
  "domain": "mailinator.com",
  "domain_age_in_days": 8440,
  "mx": true,
  "mx_records": [
    {
      "hostname": "mail.mailinator.com",
      "priority": 1
    }
  ],
  "mx_providers": [],
  "spf": "strict",
  "dmarc": "reject",
  "disposable": true,
  "public_domain": false,
  "relay_domain": false,
  "free_subdomain": false,
  "spam": true,
  "did_you_mean": null
}

Field Reference

domain The domain name that was checked against the disposable email blocklist
mx True if the domain has valid MX records configured, indicating it can receive email
disposable True if the domain is on the known disposable or temporary email provider blocklist

Implementation Example

Calls a real endpoint of this API. Replace any placeholder credentials with your own key.

Request
const url = "https://www.mailcheck.ai/";
const response = await fetch(url);
if (!response.ok) throw new Error(`Request failed: ${response.status}`);
const data = await response.json();
console.log(data);

What Can You Build?

Note: These code examples are AI-generated and unverified. Always refer to the official API documentation for accurate usage.

How This API Fails

We deliberately sent this API a broken request and recorded exactly what came back on 2026-08-10. Knowing the shape of an error before you hit it makes error handling much easier to write.

HTTP 429 Requesting a path that does not exist application/json
{
  "status": 429,
  "error": "Too many requests"
}

Common Errors & Troubleshooting

Generated guidance based on this API's documentation, not observed by us. Treat it as a starting point and check against the provider's own error reference.

False positives — legitimate domains flagged as disposable Some corporate or educational domains share infrastructure with disposable providers
Warn the user rather than hard-blocking; display a message like "This looks like a temporary email — are you sure?" instead of rejecting outright
CORS blocked in browser requests Direct browser requests to external APIs are blocked by browser security policies if CORS headers are missing
Proxy the check through your own server endpoint rather than calling MailCheck.ai directly from client-side JavaScript
Domain not in blocklist despite being disposable New throwaway domains appear faster than blocklists update
Combine disposable-domain detection with MX record validation — disposable domains often lack proper mail server configuration

Measured Score Breakdown

Live HTTP request to the API endpoint

Speed 20/30
Consistency 20/20
Security 20/20
Browser access 15/15
Transparency 15/15
Endpoint Response Time 157ms

Fully tested on Aug 10, 2026

Technical Specifications

Auth No Auth
HTTPS REQUIRED
CORS UNKNOWN
Category Email
Difficulty Beginner
Endpoint last called: 2026-08-10

Related Tags

Similar APIs

View All →