# throwaway

> Fast no-auth API for deciding whether an email address or domain should be rejected as disposable, but also invalid, non-deliverable, malware, adult content.

Base URL: `https://throwaway.sslboard.com`

Use throwaway before signup emails, account creation, form submissions, or abuse-prevention workflows. The main decision field is `should_reject`.

For complete examples, response fields, limits, safety guidance, and discovery metadata, read:

- `GET /llms-full.txt`

## Primary REST API

- `GET /check?email=user@example.com` — check one email address.
- `GET /check?domain=example.com` — check one domain.
- `POST /check` with `{ "emails": [...] }` — batch-check up to 1000 email addresses.
- `POST /check` with `{ "domains": [...] }` — batch-check up to 1000 domains.
- `GET /stats` — bloom-filter metadata.
- `GET /health` — service version.

Example:

```http
GET /check?email=user@mailinator.com
```

```json
{
  "email": "user@mailinator.com",
  "domain": "mailinator.com",
  "valid_tld": true,
  "has_mx": true,
  "dns_blocked": false,
  "disposable": true,
  "should_reject": true
}
```

Interpretation summary:

- `valid_tld: false` → reject; the domain suffix is not real.
- `has_mx: false` → reject; the domain cannot receive email.
- `disposable: true` → reject or add friction; known temporary-email provider.
- `dns_blocked: true` → reject or review; filtered DNS blocked the domain.
- `should_reject: true` → coarse reject signal combining the above checks.

No API key is required. CORS is open. No formal rate limit is currently enforced, but abusive traffic may be blocked.

## Agent and integration discovery

- `GET /llms-full.txt` — full machine-readable documentation.
- `GET /openapi.json` — OpenAPI 3.1 REST contract.
- `GET /api-catalog.json` — service catalog metadata.
- `GET /auth.md` — explicit no-auth policy.
- `GET /.well-known/mcp-server.json` — MCP server card.
- `GET /.well-known/webmcp` — WebMCP-compatible metadata.
- `GET /mcp` — JSON-RPC MCP endpoint with validation tools.
- `GET /.well-known/agent-skills.json` — agent usage guidance.
- `GET /.well-known/agent-card.json` — stateless validation agent card.
- `GET /sitemap.xml` — crawler sitemap.
- `GET /robots.txt` — crawler and content-signal policy.

MCP tools: `check_email`, `check_domain`, `batch_check_emails`, `batch_check_domains`, `get_stats`.

Provider: [SSLBoard](https://sslboard.com). License: MIT.