api reference
Versioning and deprecation
How the isBusinessEmail API is versioned, which changes are non-breaking, and how deprecations are announced with Deprecation and Sunset headers.
Versioning
The API version is in the path: /v1/…. Within a major version we don’t make breaking changes.
Non-breaking (can happen any time in /v1)
- New optional request fields and query parameters
- New response fields
- New values in open sets:
reasonscodes,mail.provider,workspace.other_suite,identity_provider, evidence tags - New endpoints
- New error
codes for new situations - Better verdicts: list updates, engine improvements and re-tuned confidence
Write clients that ignore unknown fields and treat unknown reason codes as informational.
Breaking (only in a new major version)
- Removing or renaming a field, endpoint or parameter
- Changing a field’s type or meaning
- Adding a new
categoryorrecommendationvalue - Changing the default
policy
Verdicts change; the contract doesn’t
The engine improves continuously: lists refresh nightly, reviewed domains get overrides, and DNS signals are re-weighted against our evaluation set. The same domain can therefore get a different category or confidence next month. That’s an improvement, not a contract change. If you depend on a stable decision for a user, store the verdict you acted on.
Deprecation process
When something in /v1 is going away (usually because /v2 replaces it):
- Announcement on the changelog and by email to account owners whose keys used the feature in the last 90 days.
Deprecationheader on affected responses from the day of the announcement.Sunsetheader (RFC 8594) with the removal date, plus aLinkto the migration guide.- At least 6 months between announcement and removal for anything with active usage.
- After the sunset date the endpoint returns
410 Gonewith a link to the docs.
HTTP/1.1 200 OK
Deprecation: @1798761600
Sunset: Sat, 01 Jan 2028 00:00:00 GMT
Link: <https://isbusinessemail.com/docs/changelog-policy>; rel="deprecation"
Watch for these headers in your logs or monitoring; they’re the earliest warning you’ll get.
The legacy /api/check
The original prototype endpoint, isbusinessemail.com/api/check, had no authentication and no limits. It now returns 410 Gone with a link to these docs. Move to /v1/check with a free key.
Where changes are announced
- Changelog: every API, engine and docs change worth knowing
- Email to account owners: deprecations, material changes to the Terms or Privacy Policy (30 days ahead), and security notices
/openapi.json: always matches production