Endpoint
POST https://requiems.xyz/v1/systems/user/verify
Verify User
Deep-verify an email address using domain-level signals including WHOIS age, MX records, and domain availability. Optional IP check. Use for high-value or suspicious accounts.
Parameters
| Name |
Type |
Required |
Location |
Description |
email |
string |
yes |
body |
Email address to verify. Domain-level WHOIS, MX, and DNS checks are run automatically. |
ip_address |
string |
no |
body |
Optional IPv4 or IPv6 address. When provided, VPN and proxy signals are added to the result. |
Request Example
{
"email": "user@example.com",
"ip_address": "45.33.32.156"
}
Response Example
{
"data": {
"verified": true,
"confidence": 0.92,
"risk_score": 0.08,
"flags": [],
"signals": {
"email": {
"valid": true,
"disposable": false,
"mx_valid": true
},
"domain": {
"age_days": 4521,
"has_mx": true,
"has_a_records": true,
"available": false
},
"ip": {
"is_vpn": false,
"is_proxy": false,
"fraud_score": 0.02
}
}
},
"metadata": {
"timestamp": "2026-01-01T00:00:00Z"
}
}
Response Fields
| Field |
Type |
Description |
verified |
boolean |
True when risk score is below 0.3, confidence is above 0.5, email is valid, domain has MX, and domain is registered |
confidence |
number |
Confidence in the verification result, based on how many signals resolved |
risk_score |
number |
Composite risk score from 0.0 to 1.0 |
flags |
array |
Triggered risk flags. Possible values: email_invalid, disposable_email, no_mx, domain_not_registered, young_domain, whois_unavailable, ip_risk |
signals.email |
object |
Email validation result |
signals.domain |
object |
Domain intelligence including WHOIS age, MX and A record presence, and registration status |
signals.ip |
object |
IP risk signals. Null when ip_address was not provided |
Errors
undefined 422 — email field is missing or emptyundefined 401 — Missing or invalid API key
1---
2name: identity-risk-post-verify
3api: Identity & Risk System
4method: POST
5path: /v1/systems/user/verify
6base_url: https://requiems.xyz
7description: Deep-verify an email address using domain-level signals including WHOIS age, MX records, and domain availability. Optional IP check. Use for high-value or suspicious accounts.
8---
9
10## Endpoint
11
12**POST https://requiems.xyz/v1/systems/user/verify**
13
14## Verify User
15
16Deep-verify an email address using domain-level signals including WHOIS age, MX records, and domain availability. Optional IP check. Use for high-value or suspicious accounts.
17
18## Parameters
19
20| Name | Type | Required | Location | Description |
21| ---- | ---- | -------- | -------- | ----------- |
22| `email` | string | yes | body | Email address to verify. Domain-level WHOIS, MX, and DNS checks are run automatically. |
23| `ip_address` | string | no | body | Optional IPv4 or IPv6 address. When provided, VPN and proxy signals are added to the result. |
24
25## Request Example
26
27```json
28{
29 "email": "user@example.com",
30 "ip_address": "45.33.32.156"
31}
32```
33
34## Response Example
35
36```json
37{
38 "data": {
39 "verified": true,
40 "confidence": 0.92,
41 "risk_score": 0.08,
42 "flags": [],
43 "signals": {
44 "email": {
45 "valid": true,
46 "disposable": false,
47 "mx_valid": true
48 },
49 "domain": {
50 "age_days": 4521,
51 "has_mx": true,
52 "has_a_records": true,
53 "available": false
54 },
55 "ip": {
56 "is_vpn": false,
57 "is_proxy": false,
58 "fraud_score": 0.02
59 }
60 }
61 },
62 "metadata": {
63 "timestamp": "2026-01-01T00:00:00Z"
64 }
65}
66```
67
68## Response Fields
69
70| Field | Type | Description |
71| ----- | ---- | ----------- |
72| `verified` | boolean | True when risk score is below 0.3, confidence is above 0.5, email is valid, domain has MX, and domain is registered |
73| `confidence` | number | Confidence in the verification result, based on how many signals resolved |
74| `risk_score` | number | Composite risk score from 0.0 to 1.0 |
75| `flags` | array<string> | Triggered risk flags. Possible values: email_invalid, disposable_email, no_mx, domain_not_registered, young_domain, whois_unavailable, ip_risk |
76| `signals.email` | object | Email validation result |
77| `signals.domain` | object | Domain intelligence including WHOIS age, MX and A record presence, and registration status |
78| `signals.ip` | object | IP risk signals. Null when ip_address was not provided |
79
80## Errors
81
82- `undefined` **422** — email field is missing or empty
83- `undefined` **401** — Missing or invalid API key
gabrielmoreira