Email & messaging

Verify an email address's deliverability via Icypeas (SMTP-level). Pass `email`. Returns `{ item: { _id } }` immediately — the search runs async. KEEP POLLING icypeas/result with that `id` (every 3-5s; Icypeas caps reads at 30/min) until `status` leaves NONE/SCHEDULED/IN_PROGRESS. FOUND/DEBITED = hit, NOT_FOUND/DEBITED_NOT_FOUND = processed but empty. Second verification rung next to tomba/email-verifier — same price, different infrastructure; cross-check risky addresses before a send.

Check a domain in one call: registration via RDAP (registered or likely available, registrar, created and expiry dates, status, nameservers; DNS fallback for TLDs without RDAP), DNS (A, NS, MX, CAA, DNSSEC) and email security (SPF, DMARC policy, DKIM on common selectors) with a 0 to 100 score, grade and findings. Params: domain (required).

Email verification: checks whether an email address really exists by asking its mail server (SMTP RCPT TO probe; no email is sent), on top of syntax, MX, disposable and role checks. Returns status deliverable, undeliverable (mailbox does not exist), catch_all (domain accepts any address), risky (disposable or mailbox full) or unknown (greylisting, server refused the check), plus the raw SMTP reply. Use it before sending outreach, to clean lead lists or to block fake sign-ups.

Validate an email address: RFC 5322 format check, domain MX record lookup, disposable provider detection, and role address detection (e.g. info@, admin@). Returns is_valid boolean and granular checks object. Use before storing or sending to email addresses to prevent bounces.

Scores one email address 0-100 with a verdict (ok, risky, disposable, undeliverable, invalid) and the evidence under it: every point lost is itemised with the field that proves it. 12,141 disposable domains from two maintained open lists pinned to a commit, 4,897 free providers, 1,018 role names, typo fix (gmial.com > gmail.com), live MX/SPF/DMARC. No SMTP probe, no API key.

Store memories from a conversation, like mem0's add: an AI model extracts durable facts about the user from the messages (or, with infer=false, stores each message as is), embeds them and saves them privately under your memory_key (a secret string you generate; required). Identical facts are stored once. Needs at least one of user_id, agent_id, app_id, run_id. Memories are kept for 365 days. Returns {event_id, status, results:[{id, memory, event: ADD|NONE}]}.

Check an email address before you use it: syntax, whether its domain has mail servers (MX, with null-MX and A-record fallback), disposable/throwaway providers, role accounts (info@, support@), free providers, and typo suggestions (gmial.com → gmail.com). Pass [email protected]. Does not contact the mailbox.

Compute an HMAC (MD5, SHA-1, SHA-256 or SHA-512) of text with a given key.

Everything about a domain in one call: registrar, creation and expiry dates and age from the registry's own RDAP, live DNS (A/AAAA/MX/NS), email authentication (SPF, DMARC policy) and the TLS certificate it serves (issuer, validity, days left, whether it covers the name). Pay-per-call via x402. An empty body is answered for the published example domain (example.com); send {"domain":"…"} for any other domain.

Validate and classify an email DOMAIN from public DNS: MX hosts + mail-provider, SPF and DMARC policy, plus disposable / free-webmail / role-account flags and a deliverability signal. No SMTP probing of individual mailboxes (privacy + ToS).

Fetch and parse a DKIM public-key record at <selector>._domainkey.<domain> (RFC 6376). Returns the parsed key params (algorithm, length, flags) so you can verify rotation status or key strength. Caller must know the selector - use email-deliverability if you don't.

Diagnose why a domain's email lands in spam: SPF posture, DMARC policy, DKIM key strength, MX targets, and a composite 0–100 score. Email deliverability skill pack: one x402 payment runs 6 underlying tools (spf-check, dmarc-check, dkim-lookup, email-deliverability, email-validate, dns-lookup); partial-success per step.

Check whether an email address has a Gravatar: hashes the normalized email (MD5, pure CPU - the raw address is never sent upstream), probes gravatar.com for an avatar, and fetches the public profile when one exists (display name, username, profile URL). Accepts a raw email or a precomputed MD5/SHA-256 hash. Signal-only: a Gravatar's existence suggests a real, web-active address but does NOT verify identity or deliverability - pair with /api/email-validate for MX checks.

Fetch and validate a domain's DMARC policy at _dmarc.<domain> (RFC 7489). Surfaces the enforcement policy (none/quarantine/reject), reporting addresses, alignment modes, and common misconfigs (no rua, p=none stuck for months, percent <100). Pair with SPF and DKIM for full Feb-2024 sender-rule compliance.

Full email auth posture: SPF, DMARC, DKIM, and composite deliverability score in one call. Email security skill pack: one x402 payment runs 4 underlying tools (spf-check, dmarc-check, dkim-lookup, email-deliverability); partial-success per step.

Validate an email address: syntax check plus live MX record lookup on the domain (deliverability signal, not a guarantee).

Fetch and validate a domain's SPF record (RFC 7208). Parses mechanisms (ip4/ip6/include/a/mx/all), counts DNS lookups against the famous 10-lookup limit, and flags the qualifier on `all` (-/fail, ~/softfail, ?/neutral). The first stop when an email is hitting the spam folder.

Lightweight English pluralization helper. Call when you label counts in agent messages without i18n frameworks. Returns pluralized word with count for $0.001 USDC via x402 on Base. No network, no keys, no retention; first-party local JSON only. Results are advisory; the caller owns budgets, auth, and production controls.

Leak and infostealer exposure of one e-mail address: infections that saved it (count, first/last seen, corporate vs user services), leak records and sources - aggregates only, never passwords, logins, devices or IPs; the address is echoed only as SHA-256. For addresses you own or are authorised to check

Receive-only email inbox on a clean domain for 7 days — for account verifications without phone, captcha or personal address. No sending.

Validate an email address in two layers: strict RFC-style syntax, then a live DNS MX lookup on the domain to confirm the recipient actually runs mail servers. Catches the typos and fake domains that pure regex misses. Use this when an agent needs to syntax + live MX check — can this address receive mail?.

DNS and list based verification. Never claims that a mailbox exists without evidence: without an SMTP probe the verdict for a routable address is "unknown", not "valid".

Check whether an email address is well-formed and its domain can receive mail, before you send. Five DNS checks on an email address, no message sent: syntax, MX presence and hosts, SPF record, DMARC policy, disposable domain, role address. Returns deliverable as NO, RISKY or LIKELY. It does not open an SMTP session and says so: mailbox existence is explicitly not c…

Compute an HMAC signature (hex) of an input string with a secret key. Supports sha256, sha512 and other algorithms — for webhook signing and message authentication.

Validate whether an input string is well-formed JSON. Returns a valid flag and a parser error message when invalid.

Email verification: is one address deliverable, disposable or a role account? Check ONE email address before you send to it: pass [email protected] and get a verdict (deliverable-domain, role-account, disposable, bad-shape or no-mail-domain) from its shape, its MX records read live over DNS, 25 known disposable-mail domains and 27 role-account names like info, support and admin. The mailbox itself is not probed, and the answer says so. Paid in USDC on Base.

Bulk email verification: up to 100 addresses in one call. Clean an email list: pass [email protected],[email protected] (up to 100 in one call) and get a verdict per address plus totals. Each address is checked for usable shape, for MX records read live over DNS, against 25 known disposable-mail domains and against 27 role-account names like info, support and admin. Verdicts are deliverable-domain, role-account, disposable, undeliverable, unknown or invalid, and each one says in words what it means.

Check up to 100 email addresses in one paid call, billed per address.

Check whether an email address is well-formed and its domain can actually receive mail — RFC-style syntax check plus a live MX (falling back to A) lookup — returning the parsed domain, sorted mail hosts, and a deliverable flag. Answers "is this email address real" and "will mail sent here bounce" without probing the mailbox itself. Use for lead cleaning, signup validation, and contact verification. Nothing stored.

HMAC of a message under a key — Genesis402 / UnyKorn Operator Network