
ALLOW
Keep the signup moving
No configured risk signal was found. Continue with your normal account flow.
Private beta / Email-first checks
SignupBear checks disposable addresses and your own email rules, then returns a clear signal. Your application always makes the final decision.
POST /v1/checkemail: "hello@mailinator.com"HIGH RISK
Disposable email domainReview or block
One signal, three clear outcomes
Read the reason, then apply the response that fits your signup policy.

ALLOW
No configured risk signal was found. Continue with your normal account flow.

REVIEW
Something deserves attention. Add verification or route the signup for review.

BLOCK
A disposable address or custom rule matched. Your application decides what happens next.
The decision path
Pass the address from your server-side signup handler.
Get an explainable risk level and a recommended action.
Allow, flag, review, or block according to your own policy.
Designed for the moment of signup
Call one endpoint from your signup handler. The response explains what was found and recommends an action without enforcing it.
Read the integration guideKnown disposable email domains
Optional plus-address detection
Your own domain and email blocklist
Live email check
This rate-limited demo uses SignupBear's server-side endpoint. No reusable API key is shipped to your browser.
Demo requests are rate limited and are not added to a workspace activity log.
hello@mailinator.comDisposable email domain. Recommended action: block.
{
"success": true,
"request_id": "demo-preview",
"status": "complete",
"risk_level": "high",
"recommended_action": "block",
"decision_source": "signupbear_policy",
"policy_version": "2026-07-beta-1",
"coverage": {
"email": "complete",
"ip": "not_requested"
},
"email": {
"address": "hello@mailinator.com",
"domain": "mailinator.com",
"disposable": true,
"subaddressed": false
},
"ip": null,
"reasons": [
{
"code": "DISPOSABLE_EMAIL_DOMAIN",
"message": "Disposable email domain"
}
]
}Frequently asked
SignupBear classifies the email address or domain you send to the API. It can detect known disposable domains, optional email subaddressing, and entries in your custom blocklist.
Private beta access