---
title: "Is this e-mail really from who it says? (raw headers in, checks and read out)"
method: POST
path: "/v1/email-check"
tags: ["screen"]
---

# Is this e-mail really from who it says? (raw headers in, checks and read out)

`POST /v1/email-check`

## Request

- Base URL: `https://jid.com`
- URL: `https://jid.com/v1/email-check`
- Auth: one of:
  - none
  - HTTP bearer

No key: free tier (rate-limited per IP). With a key: 1 check. Reads the receiving server's Authentication-Results (SPF, DKIM, DMARC), Received-SPF, DKIM alignment with From, Reply-To vs From, and whether the From domain or a business display name imitates a known company's registered domain. Returns checks and a read (headline, engage | verify_first | do_not_engage, failed checks, lookup links), the From and Reply-To domains and the authentication results. The headers are processed in memory and never stored. Deterministic, no AI.

## Request body

- object
  - `headers` string, required: The raw message headers (Show original / View source); the body is not needed.

## Response `200`

Checks and read

- object

## Other responses

- `400`: Error
- `402`: Error
- `429`: Error

---

[API](https://skmtc.dev/jid/apis/jid-api.md) · [All operations](https://skmtc.dev/jid/apis/jid-api/llms.txt) · [OpenAPI document](https://skmtc.dev/jid/apis/jid-api/revisions/453a19ce3d5d?raw)