---
title: "Request Code"
method: POST
path: "/api/buyer-verification/request"
tags: ["Buyer verification (internal)"]
---

# Request Code

`POST /api/buyer-verification/request`

## Request

- Base URL: `https://api.ruzora.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.ruzora.com/api/buyer-verification/request`
- Auth: none declared

Always ``{sent: true, verification_id, email_masked}`` for a valid work
email, whether or not an account exists. A limit only UNKNOWN addresses
meet answers the same way, sends nothing and records a withheld row that
the 10-minute per-inbox and per-session caps count, so both kinds see
the same sequence (#478 M1, follow-up 3). Enumeration is reduced, not
closed: a prober can still tell a known address by counting a
per-source budget with inboxes of its own, at the cost of ONE email to
it (which the target sees), and the daily cap tells after 10 emails to
it; see the service module docstring. The email goes out in
the background so the answer time does not depend on Resend.

## Request body

- RequestIn
  - `email` string, required
  - `channel` 'mcp'
  - `mcp_client` string, nullable
  - `action_label` string, nullable

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/ruzora/apis/ruzora-candidate-crm-api.md) · [All operations](https://skmtc.dev/ruzora/apis/ruzora-candidate-crm-api/llms.txt) · [OpenAPI document](https://skmtc.dev/ruzora/apis/ruzora-candidate-crm-api/revisions/f9b8223f3ac4?raw)