MailGrade
Email verification and deliverability auditing, entirely from DNS. We never open an SMTP connection to anyone's mail server, and we never store an address.
jane@gmial.com is valid syntax. It has no mail server.
It is a customer who typed one letter wrong — and you will never hear from them again.
GET /v1/verify?email=jane@gmial.com
{
"verdict": "undeliverable",
"score": 10,
"suggestion": "jane@gmail.com",
"reasons": [
{ "code": "likely_typo",
"message": "The domain closely resembles gmail.com." }
]
}
Show the suggestion at your signup form and the bounce becomes a customer.
Check a domain — free, no sign-up
Grades SPF, DKIM, DMARC, MTA-STS and DNSSEC A–F, with the fix for every problem found. Example: cloudflare.com · browse 110 more
Free tools
| Check an SPF record | Reads the live SPF record for a domain, checks the enforcement policy, and counts the DNS-querying mechanisms against the limit that silently disables SPF entirely. |
|---|---|
| Check whether your domain can be spoofed | Anyone can put your domain in the From: field. What stops the message being delivered is a DMARC policy telling receivers to reject it. This checks whether yours does. |
| Check why your email lands in spam | Most spam-folder problems that come from configuration — as opposed to content or sending reputation — are visible in DNS. This checks the authentication records that receivers use to decide, and tells you which are missing. |
The API
GET /v1/verify | Score a single address: syntax, MX, disposable, role account, typo correction, mail-host identification. |
|---|---|
POST /v1/verify/batch | Up to 100 addresses per call. |
GET /v1/domain | Full SPF / DKIM / DMARC / MTA-STS / DNSSEC audit with a grade and a fix for every finding. |
GET /v1/datasets | Freshness of the disposable-domain list — currently 30,000+ domains, refreshed daily. |
curl "https://mailgrade.dev/v1/verify?email=jane@gmial.com" \ -H "x-rapidapi-key: YOUR_KEY"
Get a key
250 requests a month free, no card. Paid plans from $19/month. Billing, invoicing and tax are handled by RapidAPI.
Badges for your README

Free, keyless, and re-checked every time the page is viewed.
Why DNS-only
- Nothing we do can get an IP blocklisted. Most verifiers connect to the recipient's mail server to ask whether a mailbox exists. We never do.
- No stored recipient data. Addresses are scored in memory and discarded. Nothing to leak, nothing to subject-access, no data-processing agreement to sign. How that works.
- Deterministic. The same address returns the same score, with the evidence attached. No model in the request path, no sampling, no drift.
- The honest limitation: because we don't probe, we can't confirm that one specific mailbox exists. We tell you whether the domain accepts mail, whether the address is disposable or a role account, and whether it looks mistyped — which is where most bad addresses actually come from.