Authentication

Core checks work without authentication. A free account provides an API key and higher limits; a paid plan can add more capacity or premium features.

API keys

Pass your API key in either the X-Api-Key header or an Authorization: Bearer header.

X-Api-Key

curl -H "X-Api-Key: YOUR_API_KEY" \
  https://disify.com/api/email/[email protected]

Bearer

curl -H "Authorization: Bearer YOUR_API_KEY" \
  https://disify.com/api/email/[email protected]

Create and manage keys from your account dashboard. Keep keys server-side — never ship them in frontend code.

Usage tiers

Tier	Request rate	Validation quota	Bulk limit	Features
Anonymous (no key)	30/min	1,000/day per IP	10,000	Core features
Free (with account)	60/min	10,000/day, 30,000/month	12,000	Core features + API keys
Starter	120/min	No monthly cap	25,000	Core features, higher limits
Pro	500/min	No monthly cap	100,000	Core + premium features

Free validation quotas count unique addresses, not HTTP calls. For example, a bulk request containing 450 unique addresses consumes 450 validation units.

See pricing for full details, and Credits for pay-as-you-go overflow beyond your plan's limits.

Which tier do I need?

Choose capacity based on your request volume; core disposable detection is available on every tier. Choose Pro for the additional checks listed in Premium Features.

Rate limits at a glance

Limits apply per IP (anonymous) or per client account (authenticated). Multiple API keys on the same account share one allowance. Responses normally include:

• X-RateLimit-Limit — your per-minute limit
• X-RateLimit-Remaining — requests left in the current window

These headers can be absent on early failures or requests covered by credits. Exceeding a limit without available overflow credits returns 429. See Rate Limits, including the temporary limits for new free accounts.