---
title: "API Reference"
description: "Complete API reference for Autheona Trust Verification API. REST API documentation with authentication, endpoints, parameters, responses, and integration examples for real-time email validation."
keywords: "email validation api, email verification api reference, rest api documentation, Trust Verification API, autheona api docs, email validation endpoint, api authentication, email api integration, real-time email validation api"

robots: index, follow
permalink: /docs/api-reference/

order: 1
category: API Reference

eleventyNavigation:
  key: API Reference
  order: 1

layout: docs.html
---

# API Reference

The Autheona API provides real-time verification for your signup flows. This REST API validates email addresses based on your project's configured rules and returns detailed analysis.

## Base URL

```
https://api.autheona.com/v1
```

All API requests must use HTTPS.

## Authentication

Authenticate using Bearer tokens in the Authorization header:

```
Authorization: Bearer YOUR_ACCESS_TOKEN
```

## Rate Limits

Rate limits are enforced per access token:

- **Limit**: 10 requests per second
- **Window**: 1 second
- **TTL**: 3 seconds

Monthly API call quotas are enforced at the account level based on your subscription plan. API calls count toward your monthly quota for production projects. Sandbox project calls do not count toward quota.

If you exceed the rate limit, the API will return an error. Implement exponential backoff in your integration to handle rate limit errors gracefully.

## Request Format

All requests must use:

- **Method**: POST
- **Content-Type**: application/json
- **Body**: JSON with required parameters

## Response Format

All responses are returned as JSON with:

- **Success**: HTTP 200 with validation results
- **Bad Request**: HTTP 400 for invalid parameters
- **Server Error**: HTTP 500 for internal errors

## Rate Limits

Rate limits are enforced at the account level based on your subscription plan. API calls count toward your monthly quota unless made from sandbox projects.

## Key Concepts

- **Passed** - Boolean indicating if the email passed all enabled validation rules.
- **Soft Check** - Optional parameter to perform validation without storing domain information. Analytics data is still stored, but detailed domain data is not.
- **Show Results** - Include detailed error codes, warnings, and analyzed data in the response.
- **Show Steps** - Include the list of validation steps that were executed.
- **Risk Score** - Computed score from 0 (clean) to 100 (high risk) based on enabled checks.
- **Domain Health** - Classification of domain quality: excellent, healthy, risky, suspicious, dead, or unknown.