# Email verification API launch

The first public release of the email verification API, keys, credits, and the dashboard playground.

Date: 2026-08-30

- `POST /v1/email` verifies one address: RFC syntax, live MX resolution, open disposable and role lists, typo suggestions, SPF and DMARC records, and a 0 to 100 risk score built from published weights.
- An SMTP mailbox handshake runs on every lookup whose domain accepts mail. No message is ever sent.
- MX provider classification names the infrastructure behind a domain (Google, Microsoft, Proofpoint, and others).
- Secret API keys (`sk_live_…`) are created from the dashboard, shown once, and stored hashed.
- Credits bill answers only: a deliverable or risky verdict costs 1 credit, undeliverable and invalid answers are free, and a repeat within 7 days is free.
- The dashboard playground runs the same lookups as the API.
- `spaw-form.js`, a form helper for the browser, checks addresses on blur, offers a did-you-mean correction, and never blocks a submit.

Reference: https://spaw.co/changelog/2026-08-30-email-verification-api-launch