Identity & Security APIs
Identity & Security APIs help apps decide who and what to trust. Email Verification and Phone Validation services check whether contact details are real, Fraud Detection covers device fingerprinting, order scoring and sanctions screening, and Threat Intel gathers IP reputation, malware and CVE data from sources like VirusTotal and the National Vulnerability Database. Smaller groups cover KYC, background checks and website scans such as SSL Labs.
| API | Pricing | Auth | Format | Free tier | Status |
|---|---|---|---|---|---|
Abstract Email Validation APIChecks whether an email address is real and deliverable via syntax, MX, and SMTP checks. Identity & Security › Email Verification | Freemium | API key | JSON | <100/day | Live |
AbuseIPDBCrowd-sourced IP address reputation and abuse reports for blocking malicious traffic. Identity & Security › Threat Intel | Freemium | API key | JSON | 1k–10k/day | Live |
AI DECISIONSScreens crypto wallet addresses for sanctions exposure, mixer use and illicit-wallet links across six chains. Identity & Security › Fraud Detection | Freemium | API key | JSON | <100/day | Live |
AlienVault Open Threat Exchange (OTX)Looks up threat intelligence on IPs, domains, URLs, and files: malware, passive DNS, and geo data. Identity & Security › Threat Intel | API key | JSON | — | Live | |
ApexVerifyPay-as-you-go API that verifies email addresses and phone numbers in real time. Identity & Security › Email Verification | Free trial | API key | JSON | — | Untested |
ArkForge Trust LayerSigns and timestamps proofs of API calls (Ed25519, RFC 3161, Sigstore) for AI agent audit trails. Identity & Security › Auth | Freemium | API key | JSON | — | Live |
BigDataCloud Phone & Email Verification APIValidates phone numbers (E.164, line type) and emails (syntax, MX, disposable) via GET calls. Identity & Security › Phone Validation | Freemium | API key | JSON | <100/day | Live |
BinaryEdgeInternet scan and threat-intel data; discontinued as self-serve after Coalition's acquisition. Identity & Security › Threat Intel | — | Deprecated | |||
CensysSearch engine for internet-connected hosts: open ports, services, certificates and banners. Identity & Security › Threat Intel | Freemium | API key | JSON | — | Live |
CheckThatPhoneValidates US/Canada phone numbers with carrier lookup, geolocation and TCPA litigator screening. Identity & Security › Phone Validation | Freemium | API key | JSON | <100/day | Live |
ChronoVerifyChecks a photo's capture time, location metadata, C2PA credentials and signs of editing Identity & Security › Fraud Detection | Freemium | API key | JSON | — | Untested |
Cloudmersive ValidateValidates email deliverability, phone numbers, EU VAT IDs, addresses and domains in one family. Identity & Security › Email Verification | Freemium | API key | JSON | <100/day | Live |
Complete Criminal ChecksSearches US sex offender registries, inmate records and active warrants by name across all 50 states. Identity & Security › Background Checks | Freemium | API key | JSON | — | Live |
CompliAPIScreens crypto addresses, emails, websites, and IDs against OFAC, EU, UK sanctions and crime lists. Identity & Security › Fraud Detection | Freemium | API key | JSON | 100–1k/day | Live |
CPFHubLooks up a Brazilian CPF number and returns the associated name, birth date, and gender. Identity & Security › Background Checks | Freemium | API key | JSON | — | Live |
Defend NetworkDaily JSON feed of exploited CVEs with CVSS/EPSS scores and CISA KEV status, no key needed. Identity & Security › Threat Intel | Free | None | JSON | Unlimited | Live |
DiditHosted or server-side KYC: ID document checks, liveness, face match, AML screening and KYB, priced per check. Identity & Security › KYC & Identity Verification | Freemium | API key | JSON | <100/day | Live |
DisifyChecks email syntax, DNS/MX records, and flags disposable or temporary email addresses. Identity & Security › Email Verification | Freemium | None | JSON | — | Live |
EmailRepReputation and risk score for an email address from breach, blacklist, and abuse signals. Identity & Security › Threat Intel | API key | JSON | — | Untested | |
EmailvalidationChecks an email's syntax, MX records, deliverability and disposable/free-domain status. Identity & Security › Email Verification | Freemium | API key | JSON | <100/day | Live |
FidroScores emails, IPs and Stripe payments for fraud risk using VPN, proxy and Tor detection. Identity & Security › Fraud Detection | Freemium | API key | JSON | <100/day | Live |
FilterListsDirectory of adblock/host filter lists with metadata: license, syntax, language, maintainer, tags per list. Identity & Security › Threat Intel | Free | None | JSON | Unlimited | Live |
FingerprintJS ProBrowser/device fingerprinting API returning a stable visitor ID plus bot, VPN, and tampering signals. Identity & Security › Fraud Detection | Freemium | API key | JSON | <100/day | Live |
FishFishCommunity-flagged database of phishing domains and URLs, with a live WebSocket feed of new entries. Identity & Security › Threat Intel | API key | JSON | Unlimited | Live | |
FOFACyberspace mapping search engine for finding and analyzing internet-exposed devices, services and assets. Identity & Security › Threat Intel | API key | JSON | — | Live | |
FraudLabs ProScreens e-commerce orders for fraud risk using IP, billing, and payment signals, returns a 1-100 score. Identity & Security › Fraud Detection | Freemium | API key | JSON | <100/day | Untested |
FullHuntAttack-surface intelligence: domain and subdomain details, host data, and internet-wide asset discovery. Identity & Security › Threat Intel | Freemium | API key | JSON | — | Live |
GitGuardian APIScans text or files for exposed secrets like API keys and credentials, with a free 10k-call/month tier. Identity & Security › Threat Intel | Freemium | API key | JSON | 100–1k/day | Live |
Google Safe Browsing APIChecks URLs against Google's lists of malware, phishing and unwanted-software sites. Identity & Security › Threat Intel | Free | API key | JSON | — | Live |
Have I Been PwnedChecks passwords against breach data (k-anonymity, no key) and looks up known data-breach exposure by domain. Identity & Security › Threat Intel | Freemium | API key | JSON | Unlimited | Live |
HeybounceReal-time email verification checking deliverability, MX records, and disposable/role addresses. Identity & Security › Email Verification | Free trial | API key | JSON | — | Live |
Hybrid AnalysisSubmits and looks up automated behavioral malware analysis reports powered by CrowdStrike Falcon Sandbox. Identity & Security › Threat Intel | Free | — | Untested | ||
IIN APILooks up a card's issuing bank, brand, type and country from its first 6-11 digits (BIN/IIN). Identity & Security › Fraud Detection | Freemium | API key | JSON | <100/day | Live |
Intelligence XSearch leaked data, darknet content, pastes and archived public web pages by term or selector. Identity & Security › Threat Intel | Freemium | API key | JSON | <100/day | Live |
IPLogsDetects VPN, proxy and Tor traffic per-request using 25+ network and client signals. Identity & Security › Threat Intel | Free | None | JSON | Unlimited | Untested |
IPWhois.net BlacklistCommunity-sourced blacklist to check and report abusive IP addresses by threat type. Identity & Security › Threat Intel | Freemium | None | JSON | 100–1k/day | Live |
Kickbox Disposable Email CheckerChecks whether an email domain belongs to a disposable/temporary-address provider. Identity & Security › Email Verification | None | JSON | Unlimited | Live | |
LoginRadiusHosted customer login, SSO and identity management API with social login and MFA. Identity & Security › Auth | Free trial | API key | JSON | — | Live |
mailboxlayerValidates email syntax, SMTP deliverability, disposable/role addresses and catch-all domains. Identity & Security › Email Verification | Freemium | API key | JSON | <100/day | Live |
MailboxValidatorChecks if an email address is deliverable, disposable, or from a free provider like Gmail. Identity & Security › Email Verification | Freemium | API key | JSON | <100/day | Live |
MailValidReal-time and bulk email verification: deliverability, catch-all, disposable, and role checks. Identity & Security › Email Verification | Freemium | API key | JSON | — | Live |
MalDatabaseDaily-updated feed of malware sample metadata: hashes, threat level, family, and dropped files. Identity & Security › Threat Intel | Freemium | API key | JSON | <100/day | Live |
MalShareCommunity malware sample repository: hash lookups, search, file downloads and daily sample lists. Identity & Security › Threat Intel | Free | API key | JSON | 1k–10k/day | Live |
MalwagonDetonates files, URLs, commands and documents in a sandbox VM and returns a scored verdict with IOCs. Identity & Security › Threat Intel | Freemium | API key | JSON | <100/day | Live |
MalwareBazaarCrowdsourced malware sample database: lookup and download samples by hash, YARA rule or ClamAV signature. Identity & Security › Threat Intel | Freemium | API key | JSON | 1k–10k/day | Live |
Microsoft Security Response Center (MSRC)Official Microsoft security bulletin and CVE data in CVRF/CSAF format, no key needed. Identity & Security › Threat Intel | None | JSON | Unlimited | Live | |
MobileAPI.devSpecs, images and pricing for 15,000+ phones, tablets and wearables by device or manufacturer. Identity & Security › Phone Validation | Freemium | API key | JSON | <100/day | Live |
Mozilla http scannerScans a website's HTTP response headers (CSP, HSTS, etc.) and returns a security grade and score. Identity & Security › Website Security | Free | None | JSON | Unlimited | Untested |
Mozilla TLS ObservatoryScans a domain's TLS setup and X.509 certificate chain and grades it against Mozilla's guidelines. Identity & Security › Website Security | Free | None | JSON | — | Deprecated |
National Vulnerability Database (NVD)US government database of CVE vulnerability records with CVSS scores, descriptions and references. Identity & Security › Threat Intel | Free | None | JSON | 10k+/day | Live |
Neetix LivelinessFace-match, passive liveness, document and age-estimation checks for selfie-based identity verification. Identity & Security › KYC & Identity Verification | Freemium | API key | JSON | — | Live |
NoParamChecks email addresses in real time for valid syntax, MX records, and disposable or role addresses. Identity & Security › Email Verification | Freemium | API key | JSON | <100/day | Untested |
NumlookupValidates phone numbers worldwide and returns carrier, line type and location details. Identity & Security › Phone Validation | Freemium | API key | JSON | <100/day | Live |
NumverifyValidates and looks up international phone numbers: format, carrier, line type, location. Identity & Security › Phone Validation | Freemium | API key | JSON | <100/day | Live |
OpenSanctionsScreens people and companies against global sanctions, PEP and watchlist data for AML/KYC checks. Identity & Security › Fraud Detection | Freemium | API key | JSON | — | Live |
PhishStatsSearchable phishing URL, IP, and domain database with ML confidence scores, updated every 90 minutes. Identity & Security › Threat Intel | Freemium | None | JSON | 100–1k/day | Live |
Phone ValidationChecks phone number validity, carrier, line type, and location across 190+ countries. Identity & Security › Phone Validation | Freemium | API key | JSON | <100/day | Live |
ProWebLook Email VerificationChecks email syntax, MX records, SMTP mailbox status and disposable-address detection Identity & Security › Email Verification | Paid | API key | JSON | — | Live |
Proweblook Phone Number CheckerValidates phone numbers globally and returns line type, carrier, format, and location. Identity & Security › Phone Validation | Freemium | API key | JSON | <100/day | Live |
ProWebLook WhatsApp Number CheckerChecks whether a phone number has an active WhatsApp account, including business accounts. Identity & Security › Phone Validation | Freemium | API key | JSON | <100/day | Live |
PulsediveThreat intelligence lookups for IPs, domains, and URLs with risk scoring and IOC enrichment. Identity & Security › Threat Intel | Freemium | API key | JSON | — | Live |
RankFabrik VerifySMTP-level email verification (valid/invalid/risky/unknown) that stops before sending, billed per result. Identity & Security › Email Verification | Freemium | API key | JSON | <100/day | Live |
ScaniiScans uploaded files for malware and threats across multiple detection engines, with regional data residency. Identity & Security › Threat Intel | Paid | API key | JSON | — | Live |
ScanMalwareScans URLs for malware and phishing in a sandboxed browser; search past scans by domain, IP or ASN. Identity & Security › Threat Intel | Free | None | JSON | 10k+/day | Degraded |
SecurityTrailsCurrent and historical DNS, WHOIS and domain/IP intelligence for security and threat-research tools. Identity & Security › Threat Intel | API key | JSON | — | Live | |
ShodanSearches internet-connected devices for open ports, services, banners and known vulnerabilities. Identity & Security › Threat Intel | Freemium | API key | JSON | — | Live |
SSL LabsRuns a deep SSL/TLS configuration test on any public HTTPS server and returns an A+ to F grade. Identity & Security › Website Security | Free | None | JSON | — | Untested |
SSLMate Certificate Search API (Cert Spotter)Lists publicly trusted SSL/TLS certificates issued for a domain, with issuer, expiry and revocation status. Identity & Security › Website Security | Freemium | API key | JSON | 1k–10k/day | Live |
ThreatClusterAI-clustered threat intel: incident clusters, IOCs, CVEs, APT profiles, ransomware leak-site data. Identity & Security › Threat Intel | Freemium | API key | JSON | — | Live |
TrueguardDetects disposable emails, VPN/proxy use, device fingerprints and bot signups for fraud checks. Identity & Security › Fraud Detection | Freemium | API key | JSON | <100/day | Untested |
TWZRD Agent IntelRisk-scores Solana agent/merchant wallets (wash trading, trust tier) for pre-payment checks. Identity & Security › Fraud Detection | Freemium | Other | JSON | — | Live |
uCheckerValidates whether an email address exists via SMTP/DNS checks, singly or in bulk up to millions of addresses. Identity & Security › Email Verification | Freemium | API key | JSON | — | Live |
URLhausDatabase of malicious URLs and malware samples used for phishing and malware distribution. Identity & Security › Threat Intel | Freemium | API key | JSON | — | Live |
URLScan.ioSearch public website scans for screenshots, DOM snapshots, and phishing/malware threat indicators. Identity & Security › Threat Intel | Freemium | API key | JSON | 100–1k/day | Live |
USA Caller LookupUS phone number lookup returning carrier, location, and FTC robocall complaint history, no key needed. Identity & Security › Phone Validation | Free | None | JSON | 10k+/day | Live |
UserAgent.AppParses raw user-agent strings into browser, OS, device, and bot details. Identity & Security › Fraud Detection | Freemium | API key | JSON | 100–1k/day | Live |
UserCheck (formerly MailCheck.ai)Flags disposable, role, and forwarding email addresses and suggests typo corrections via MX/domain checks. Identity & Security › Email Verification | Freemium | API key | JSON | <100/day | Live |
userstackParses a User-Agent string into device type, browser, OS and crawler-detection details. Identity & Security › Fraud Detection | Freemium | API key | JSON | <100/day | Live |
VerifyEDSearches 912K+ government-sourced school records and flags likely diploma mills for admissions review. Identity & Security › Fraud Detection | Freemium | None | JSON | Unlimited | Live |
VeriphoneValidates phone numbers and returns carrier, line type and country across 243 territories. Identity & Security › Phone Validation | Freemium | API key | JSON | <100/day | Live |
VeriRoute IntelLooks up US/Canada phone numbers for carrier routing, caller name, and spam reputation. Identity & Security › Phone Validation | Freemium | API key | JSON | <100/day | Live |
Verisys Antivirus APIScans submitted files or URLs for malware and NSFW content, credit-metered, GDPR-compliant. Identity & Security › Threat Intel | Free trial | API key | JSON | — | Live |
VirusTotalScans files, URLs, domains and IPs against dozens of antivirus engines and blocklists. Identity & Security › Threat Intel | Freemium | API key | JSON | 100–1k/day | Untested |
VulDBVulnerability and exploit intelligence database tracking CVEs and security advisories. Identity & Security › Threat Intel | — | Untested | |||
Web of TrustDomain and IP reputation/safe-browsing scores from WOT's user community and ML models. Identity & Security › Threat Intel | Free trial | — | Untested | ||
WhatIsMyBrowser.com APIDetects browser, OS, device and bots from user agents and client hints, flagging fake or risky requests. Identity & Security › Fraud Detection | Freemium | API key | JSON | 100–1k/day | Live |
XposedOrNotChecks emails and domains against known data breaches: breach details, exposed data types and risk scores. Identity & Security › Threat Intel | Freemium | None | JSON | 100–1k/day | Live |
Abstract Email Validation APIFreemiumLive
Checks whether an email address is real and deliverable via syntax, MX, and SMTP checks.
API key · JSON
<100/day
OpenAPI spec · llms.txt
AbuseIPDBFreemiumLive
Crowd-sourced IP address reputation and abuse reports for blocking malicious traffic.
API key · JSON
1k–10k/day
no machine-readable spec
AI DECISIONSFreemiumLive
Screens crypto wallet addresses for sanctions exposure, mixer use and illicit-wallet links across six chains.
API key · JSON
<100/day
no machine-readable spec
AlienVault Open Threat Exchange (OTX)Live
Looks up threat intelligence on IPs, domains, URLs, and files: malware, passive DNS, and geo data.
API key · JSON
—
no machine-readable spec
ApexVerifyFree trialUntested
Pay-as-you-go API that verifies email addresses and phone numbers in real time.
API key · JSON
—
no machine-readable spec
ArkForge Trust LayerFreemiumLive
Signs and timestamps proofs of API calls (Ed25519, RFC 3161, Sigstore) for AI agent audit trails.
API key · JSON
—
llms.txt
BigDataCloud Phone & Email Verification APIFreemiumLive
Validates phone numbers (E.164, line type) and emails (syntax, MX, disposable) via GET calls.
API key · JSON
<100/day
llms.txt
BinaryEdgeDeprecated
Internet scan and threat-intel data; discontinued as self-serve after Coalition's acquisition.
·
—
no machine-readable spec
CensysFreemiumLive
Search engine for internet-connected hosts: open ports, services, certificates and banners.
API key · JSON
—
no machine-readable spec
CheckThatPhoneFreemiumLive
Validates US/Canada phone numbers with carrier lookup, geolocation and TCPA litigator screening.
API key · JSON
<100/day
llms.txt
ChronoVerifyFreemiumUntested
Checks a photo's capture time, location metadata, C2PA credentials and signs of editing
API key · JSON
—
OpenAPI spec · llms.txt
Cloudmersive ValidateFreemiumLive
Validates email deliverability, phone numbers, EU VAT IDs, addresses and domains in one family.
API key · JSON
<100/day
OpenAPI spec
Complete Criminal ChecksFreemiumLive
Searches US sex offender registries, inmate records and active warrants by name across all 50 states.
API key · JSON
—
no machine-readable spec
CompliAPIFreemiumLive
Screens crypto addresses, emails, websites, and IDs against OFAC, EU, UK sanctions and crime lists.
API key · JSON
100–1k/day
MCP server · llms.txt
CPFHubFreemiumLive
Looks up a Brazilian CPF number and returns the associated name, birth date, and gender.
API key · JSON
—
llms.txt
Defend NetworkFreeLive
Daily JSON feed of exploited CVEs with CVSS/EPSS scores and CISA KEV status, no key needed.
None · JSON
Unlimited
llms.txt
DiditFreemiumLive
Hosted or server-side KYC: ID document checks, liveness, face match, AML screening and KYB, priced per check.
API key · JSON
<100/day
no machine-readable spec
DisifyFreemiumLive
Checks email syntax, DNS/MX records, and flags disposable or temporary email addresses.
None · JSON
—
no machine-readable spec
EmailRepUntested
Reputation and risk score for an email address from breach, blacklist, and abuse signals.
API key · JSON
—
no machine-readable spec
EmailvalidationFreemiumLive
Checks an email's syntax, MX records, deliverability and disposable/free-domain status.
API key · JSON
<100/day
llms.txt
FidroFreemiumLive
Scores emails, IPs and Stripe payments for fraud risk using VPN, proxy and Tor detection.
API key · JSON
<100/day
MCP server · llms.txt
FilterListsFreeLive
Directory of adblock/host filter lists with metadata: license, syntax, language, maintainer, tags per list.
None · JSON
Unlimited
OpenAPI spec
FingerprintJS ProFreemiumLive
Browser/device fingerprinting API returning a stable visitor ID plus bot, VPN, and tampering signals.
API key · JSON
<100/day
llms.txt
FishFishLive
Community-flagged database of phishing domains and URLs, with a live WebSocket feed of new entries.
API key · JSON
Unlimited
no machine-readable spec
FOFALive
Cyberspace mapping search engine for finding and analyzing internet-exposed devices, services and assets.
API key · JSON
—
no machine-readable spec
FraudLabs ProFreemiumUntested
Screens e-commerce orders for fraud risk using IP, billing, and payment signals, returns a 1-100 score.
API key · JSON
<100/day
OpenAPI spec · llms.txt
FullHuntFreemiumLive
Attack-surface intelligence: domain and subdomain details, host data, and internet-wide asset discovery.
API key · JSON
—
llms.txt
GitGuardian APIFreemiumLive
Scans text or files for exposed secrets like API keys and credentials, with a free 10k-call/month tier.
API key · JSON
100–1k/day
OpenAPI spec
Google Safe Browsing APIFreeLive
Checks URLs against Google's lists of malware, phishing and unwanted-software sites.
API key · JSON
—
no machine-readable spec
Have I Been PwnedFreemiumLive
Checks passwords against breach data (k-anonymity, no key) and looks up known data-breach exposure by domain.
API key · JSON
Unlimited
no machine-readable spec
HeybounceFree trialLive
Real-time email verification checking deliverability, MX records, and disposable/role addresses.
API key · JSON
—
no machine-readable spec
Hybrid AnalysisFreeUntested
Submits and looks up automated behavioral malware analysis reports powered by CrowdStrike Falcon Sandbox.
·
—
no machine-readable spec
IIN APIFreemiumLive
Looks up a card's issuing bank, brand, type and country from its first 6-11 digits (BIN/IIN).
API key · JSON
<100/day
no machine-readable spec
Intelligence XFreemiumLive
Search leaked data, darknet content, pastes and archived public web pages by term or selector.
API key · JSON
<100/day
no machine-readable spec
IPLogsFreeUntested
Detects VPN, proxy and Tor traffic per-request using 25+ network and client signals.
None · JSON
Unlimited
llms.txt
IPWhois.net BlacklistFreemiumLive
Community-sourced blacklist to check and report abusive IP addresses by threat type.
None · JSON
100–1k/day
no machine-readable spec
Kickbox Disposable Email CheckerLive
Checks whether an email domain belongs to a disposable/temporary-address provider.
None · JSON
Unlimited
no machine-readable spec
LoginRadiusFree trialLive
Hosted customer login, SSO and identity management API with social login and MFA.
API key · JSON
—
llms.txt
mailboxlayerFreemiumLive
Validates email syntax, SMTP deliverability, disposable/role addresses and catch-all domains.
API key · JSON
<100/day
llms.txt
MailboxValidatorFreemiumLive
Checks if an email address is deliverable, disposable, or from a free provider like Gmail.
API key · JSON
<100/day
OpenAPI spec · llms.txt
MailValidFreemiumLive
Real-time and bulk email verification: deliverability, catch-all, disposable, and role checks.
API key · JSON
—
OpenAPI spec · llms.txt
MalDatabaseFreemiumLive
Daily-updated feed of malware sample metadata: hashes, threat level, family, and dropped files.
API key · JSON
<100/day
no machine-readable spec
MalShareFreeLive
Community malware sample repository: hash lookups, search, file downloads and daily sample lists.
API key · JSON
1k–10k/day
no machine-readable spec
MalwagonFreemiumLive
Detonates files, URLs, commands and documents in a sandbox VM and returns a scored verdict with IOCs.
API key · JSON
<100/day
MCP server
MalwareBazaarFreemiumLive
Crowdsourced malware sample database: lookup and download samples by hash, YARA rule or ClamAV signature.
API key · JSON
1k–10k/day
no machine-readable spec
Microsoft Security Response Center (MSRC)Live
Official Microsoft security bulletin and CVE data in CVRF/CSAF format, no key needed.
None · JSON
Unlimited
OpenAPI spec · MCP server
MobileAPI.devFreemiumLive
Specs, images and pricing for 15,000+ phones, tablets and wearables by device or manufacturer.
API key · JSON
<100/day
llms.txt
Mozilla http scannerFreeUntested
Scans a website's HTTP response headers (CSP, HSTS, etc.) and returns a security grade and score.
None · JSON
Unlimited
no machine-readable spec
Mozilla TLS ObservatoryFreeDeprecated
Scans a domain's TLS setup and X.509 certificate chain and grades it against Mozilla's guidelines.
None · JSON
—
no machine-readable spec
National Vulnerability Database (NVD)FreeLive
US government database of CVE vulnerability records with CVSS scores, descriptions and references.
None · JSON
10k+/day
no machine-readable spec
Neetix LivelinessFreemiumLive
Face-match, passive liveness, document and age-estimation checks for selfie-based identity verification.
API key · JSON
—
OpenAPI spec
NoParamFreemiumUntested
Checks email addresses in real time for valid syntax, MX records, and disposable or role addresses.
API key · JSON
<100/day
llms.txt
NumlookupFreemiumLive
Validates phone numbers worldwide and returns carrier, line type and location details.
API key · JSON
<100/day
llms.txt
NumverifyFreemiumLive
Validates and looks up international phone numbers: format, carrier, line type, location.
API key · JSON
<100/day
no machine-readable spec
OpenSanctionsFreemiumLive
Screens people and companies against global sanctions, PEP and watchlist data for AML/KYC checks.
API key · JSON
—
OpenAPI spec · llms.txt
PhishStatsFreemiumLive
Searchable phishing URL, IP, and domain database with ML confidence scores, updated every 90 minutes.
None · JSON
100–1k/day
llms.txt
Phone ValidationFreemiumLive
Checks phone number validity, carrier, line type, and location across 190+ countries.
API key · JSON
<100/day
OpenAPI spec · llms.txt
ProWebLook Email VerificationPaidLive
Checks email syntax, MX records, SMTP mailbox status and disposable-address detection
API key · JSON
—
OpenAPI spec · llms.txt
Proweblook Phone Number CheckerFreemiumLive
Validates phone numbers globally and returns line type, carrier, format, and location.
API key · JSON
<100/day
OpenAPI spec · llms.txt
ProWebLook WhatsApp Number CheckerFreemiumLive
Checks whether a phone number has an active WhatsApp account, including business accounts.
API key · JSON
<100/day
OpenAPI spec · llms.txt
PulsediveFreemiumLive
Threat intelligence lookups for IPs, domains, and URLs with risk scoring and IOC enrichment.
API key · JSON
—
llms.txt
RankFabrik VerifyFreemiumLive
SMTP-level email verification (valid/invalid/risky/unknown) that stops before sending, billed per result.
API key · JSON
<100/day
llms.txt
ScaniiPaidLive
Scans uploaded files for malware and threats across multiple detection engines, with regional data residency.
API key · JSON
—
no machine-readable spec
ScanMalwareFreeDegraded
Scans URLs for malware and phishing in a sandboxed browser; search past scans by domain, IP or ASN.
None · JSON
10k+/day
MCP server · llms.txt
SecurityTrailsLive
Current and historical DNS, WHOIS and domain/IP intelligence for security and threat-research tools.
API key · JSON
—
no machine-readable spec
ShodanFreemiumLive
Searches internet-connected devices for open ports, services, banners and known vulnerabilities.
API key · JSON
—
OpenAPI spec
SSL LabsFreeUntested
Runs a deep SSL/TLS configuration test on any public HTTPS server and returns an A+ to F grade.
None · JSON
—
no machine-readable spec
SSLMate Certificate Search API (Cert Spotter)FreemiumLive
Lists publicly trusted SSL/TLS certificates issued for a domain, with issuer, expiry and revocation status.
API key · JSON
1k–10k/day
no machine-readable spec
ThreatClusterFreemiumLive
AI-clustered threat intel: incident clusters, IOCs, CVEs, APT profiles, ransomware leak-site data.
API key · JSON
—
OpenAPI spec · llms.txt
TrueguardFreemiumUntested
Detects disposable emails, VPN/proxy use, device fingerprints and bot signups for fraud checks.
API key · JSON
<100/day
llms.txt
TWZRD Agent IntelFreemiumLive
Risk-scores Solana agent/merchant wallets (wash trading, trust tier) for pre-payment checks.
Other · JSON
—
OpenAPI spec · MCP server · llms.txt
uCheckerFreemiumLive
Validates whether an email address exists via SMTP/DNS checks, singly or in bulk up to millions of addresses.
API key · JSON
—
OpenAPI spec
URLhausFreemiumLive
Database of malicious URLs and malware samples used for phishing and malware distribution.
API key · JSON
—
no machine-readable spec
URLScan.ioFreemiumLive
Search public website scans for screenshots, DOM snapshots, and phishing/malware threat indicators.
API key · JSON
100–1k/day
no machine-readable spec
USA Caller LookupFreeLive
US phone number lookup returning carrier, location, and FTC robocall complaint history, no key needed.
None · JSON
10k+/day
llms.txt
UserAgent.AppFreemiumLive
Parses raw user-agent strings into browser, OS, device, and bot details.
API key · JSON
100–1k/day
no machine-readable spec
UserCheck (formerly MailCheck.ai)FreemiumLive
Flags disposable, role, and forwarding email addresses and suggests typo corrections via MX/domain checks.
API key · JSON
<100/day
llms.txt
userstackFreemiumLive
Parses a User-Agent string into device type, browser, OS and crawler-detection details.
API key · JSON
<100/day
llms.txt
VerifyEDFreemiumLive
Searches 912K+ government-sourced school records and flags likely diploma mills for admissions review.
None · JSON
Unlimited
OpenAPI spec · llms.txt
VeriphoneFreemiumLive
Validates phone numbers and returns carrier, line type and country across 243 territories.
API key · JSON
<100/day
no machine-readable spec
VeriRoute IntelFreemiumLive
Looks up US/Canada phone numbers for carrier routing, caller name, and spam reputation.
API key · JSON
<100/day
MCP server · llms.txt
Verisys Antivirus APIFree trialLive
Scans submitted files or URLs for malware and NSFW content, credit-metered, GDPR-compliant.
API key · JSON
—
OpenAPI spec
VirusTotalFreemiumUntested
Scans files, URLs, domains and IPs against dozens of antivirus engines and blocklists.
API key · JSON
100–1k/day
llms.txt
VulDBUntested
Vulnerability and exploit intelligence database tracking CVEs and security advisories.
·
—
no machine-readable spec
Web of TrustFree trialUntested
Domain and IP reputation/safe-browsing scores from WOT's user community and ML models.
·
—
no machine-readable spec
WhatIsMyBrowser.com APIFreemiumLive
Detects browser, OS, device and bots from user agents and client hints, flagging fake or risky requests.
API key · JSON
100–1k/day
no machine-readable spec
XposedOrNotFreemiumLive
Checks emails and domains against known data breaches: breach details, exposed data types and risk scores.
None · JSON
100–1k/day
no machine-readable spec
Nothing matches that combination. Clear the filters and start from the category.
Choosing an Identity & Security API
Is there a free Identity & Security API?
Yes. SSL Labs, Defend Network, FilterLists, Google Safe Browsing API, Hybrid Analysis and 6 others are free to use, and VirusTotal, Have I Been Pwned, Abstract Email Validation API, AbuseIPDB, AI DECISIONS and 54 others have a free tier alongside paid plans.
Which Identity & Security APIs work without an API key?
SSL Labs, Defend Network, Disify, FilterLists, IPLogs and 10 others need no key or sign-up, so you can try them with a plain request.
Can I call an Identity & Security API from front-end JavaScript?
Defend Network, Disify, IPWhois.net Blacklist, Kickbox Disposable Email Checker, National Vulnerability Database (NVD) and 3 others allow cross-origin requests and need no key, so they work straight from the browser. For the others, call them from your server so your key stays private.
Can I use Identity & Security APIs in a commercial project?
Abstract Email Validation API, AbuseIPDB, ApexVerify, ArkForge Trust Layer, CheckThatPhone and 23 others permit commercial use. VirusTotal, SSL Labs, Complete Criminal Checks, Google Safe Browsing API, Intelligence X and 13 others restrict it, for example to non-commercial or attributed use, so read the terms first.
Which Identity & Security APIs work with AI agents?
Microsoft Security Response Center (MSRC) and TWZRD Agent Intel have both an MCP server and an OpenAPI spec. CompliAPI, Fidro, Malwagon, ScanMalware and VeriRoute Intel have an MCP server, so an AI agent can call them directly. Abstract Email Validation API, ChronoVerify, Cloudmersive Validate, FilterLists, FraudLabs Pro and 14 others publish an OpenAPI spec for generating clients and tools.
Browse by subcategory: Auth APIs · Email Verification APIs · Phone Validation APIs · Fraud Detection APIs · Threat Intel APIs · Background Checks APIs · KYC & Identity Verification APIs · Website Security APIs
Popular topics: IP Reputation APIs · Phishing & Malicious URLs APIs · CVE & Vulnerabilities APIs · Data Breach APIs