Request
local@domain with a dotted
domain; otherwise 400 {"error":"invalid_address"}.
Response (200)
Same shape for registered and unregistered addresses:
Decoys
Unregistered emails get stable decoys. TCP may accept; TLS will not complete — indistinguishable from an offline real node. Do not use timing or field differences to infer registration.Rate limits
429 {"error":"rate_limited","detail":"too many requests"} with Retry-After: 60 is
common. The relay does not say which limiter fired (IP vs email). Back off.