ZeroBounce

by Hertza L.L.C. (ZeroBounce) HTTP API in Lead & company data

Hosted Local

Hertza L.L.C. · zerobounce.net · status page · who's behind it

ZeroBounce is an email verification API from Hertza L.L.C. that checks single addresses and lists for deliverability, with status and sub-status codes, plus AI scoring, email finder, domain search and activity data, and an open-source MCP server.

Best for Email verification before outreach, the verification-first listing in lead-data.

Viewed under 500 times in the last 30 days · Claim it, free, to see who finds it

Claim this listing

Is this your product? Claim it to see how agents find it: lookups through the API, MCP and letme, the comparisons it's in, and what people search for in Leads. Free, and it never changes the grade. Or verify it, or log in if it's already claimed.

Assessment. ZeroBounce's v2 API verifies emails with detailed status and sub-status codes, publishes per-endpoint limits, a Statuspage with short incidents only in the last 90 days, SOC 2 Type 2 and ISO 27001, and $0.0195 per email at the smallest pack. The documented key travels in the query string, and there is no OpenAPI contract.

Facts

Access how an agent reaches and pays for it
Transport
HTTP, stdio
Endpoint
https://api.zerobounce.net/v2
Auth
API key
Pricing
Pay per use · $0.0195 / call
x402
No
Licence
Proprietary service under ZeroBounce's terms of use; SDKs and the MCP server are open source
Tools exposed
0
Where it lives packages, source, docs and releases
Packages
npm @zerobounce/zero-bounce-sdk
llms.txt
published
Last release
From our research 5 facts checked against the vendor's pages
Surface listed
The v2 REST API at api.zerobounce.net (with api-us and api-eu hosts), read from www.zerobounce.net/docs, the pricing, terms, privacy, security, about and MCP pages, and status.zerobounce.net on 6 November 2026. No account was made and no call was sent
APIs
Single and batch validation, bulk file API, AI scoring, Email Finder, Domain Search, Activity Data, List Evaluator, Inbox Placement Tester and Warmup APIs
Rate limits
80,000 validations per 10 seconds; 80,000 an hour on other endpoint groups and 800 an hour on some, higher on ZeroBounce ONE. Overruns block the key from one minute to one day
Certifications
SOC 2 Type 2 (22 March 2022), ISO/IEC 27001:2022 (28 July 2025), Data Privacy Framework participant; Intigriti and BitSentinel testing
Legal entity
Hertza L.L.C., doing business as ZeroBounce, a Nevada LLC based at 10 E. Yanonali St., Santa Barbara, California, per the terms of use

Facts verified 6 November 2026 from vendor docs, repositories and package registries. JSON · Markdown

Strengths

  • Status and sub-status codes per address, and unknown results don't use credits
  • Statuspage with API, API-US, API-EU and Bulk API components; three short incidents in the 90 days to 6 November 2026
  • Rate limits published per endpoint group, with the block length for each
  • SOC 2 Type 2, ISO/IEC 27001:2022, Intigriti testing and a published sub-processor list
  • Freemium of 100 validations a month for business domains, and pay-as-you-go from $39 for 2,000

Weaknesses

  • Every documented example sends the key as an api_key query parameter
  • No OpenAPI or other machine-readable contract; a Postman collection only
  • Going over a limit blocks the key for a minute to a day, with no Retry-After documented
  • llms.txt lists marketing pages, not the API docs
  • Keys can be IP-whitelisted but not scoped to endpoints

Before you call it notes for agents

  1. Use the regional host (api-us or api-eu) that matches the data, and test with the sandbox addresses, which spend no credits
  2. Set timeout (3 to 60 seconds); slow mail servers return unknown, which is free to retry later
  3. Stay under 80,000 validations per 10 seconds and avoid repeated bad requests, which block the key for an hour
  4. Use the bulk file API for large lists instead of looping on /v2/validate
  5. Keep the key out of logs; the API takes it only as api_key in the URL

Who's behind it provenance 67/100

  • Legal entity namedHertza L.L.C.20/20
  • Domain agezerobounce.net, no registry record we could read0/15
  • Endpoint on the vendor's domainapi.zerobounce.net15/15
  • Terms of serviceread, states 6 of the 7 things a reader expects, and has 1 clause that costs points7.1/10
  • Privacy policyread, states 8 of the 8 things a reader expects10/10
  • Status pagestatus.zerobounce.net10/10
  • Changelognot found0/10
  • security.txtcould not be fetched0/10
  • People named4 named with their role, 4 with a public profile10/10
  • Support routea support address, help pages5/5

Terms and privacy, as read

Terms of service dated 2026-05-05, states 6 of 7, 2 to know

TL;DR Dated 2026-05-05. States 6 of the 7 things a reader expects, and we didn't find a service level. To know before relying on it, changes without notice and arbitration or a class action waiver.

Says the terms or the service can change without noticecosts points
Provider may modify its Privacy Policy and the Site Terms of Use in its reasonable discretion from time to time, without any notice to Customer.

A customer may not hear about a change before it applies.

Requires arbitration or waives class actions
…Agreement, or the breach thereof, and/or the use of the ZeroBounce Hosted Service shall be settled by binding arbitration administered by JAMS in accordance with its Comprehensive Arbitration Rules and Procedures.

Disputes go to an arbitrator, or a customer gives up joining a class action or a jury trial.

Gives the date it was last updated Last updated 2026-05-05
Last Revised: May 5, 2026

Without a date nobody can tell which version they agreed to.

Names the governing law or courts The law of the State of Nevada
This Agreement shall be construed in accordance with and governed by the laws of the State of Nevada, without regard to principles of conflict of laws.

Says where a dispute would be heard and under whose law.

States a limit on its liability Capped at the fees paid in the 6 months before the claim
…A PARTY’S OBLIGATIONS OF CONFIDENTIALITY OR INDEMNIFICATION UNDER THIS AGREEMENT, NEITHER PARTY’S AGGREGATE LIABILITY WILL EXCEED THE AMOUNT ACTUALLY PAID BY CUSTOMER TO PROVIDER IN THE SIX (6) MONTH PERIOD PRECEDING THE EVENT GIVING RISE TO SUCH CLAIM, AND NEITHER PARTY WILL BE LIABLE FOR ANY INDIRECT, PUNITIVE, SPEC…

Says the most the vendor would owe if the service causes a loss.

Says how the agreement or account can be ended
A Party may immediately terminate this Agreement for any reason or no reason at all.

Says when the vendor can cut off access and what notice it gives.

Says how changes to the terms are announced Gives thirty days of notice before a change
Except as to changes to Provider’s Privacy Policy and any revisions that are required by applicable law, Provider reserves the right to alter or revise the terms of this Agreement by giving Customer thirty (30) days’ notice of the changes to be made.

Says whether a customer hears about a change before it binds them.

Lists what users may not do
Customer will not: (i) knowingly use the ZeroBounce Hosted Service or Provider Technology to send unsolicited email, including, without limitation, promotions, or advertisements for products or services or send email, including any content, in violation of applicable law;

The acceptable-use rules an agent acting for a user has to stay inside.

Refers to a service level or uptime commitment

Not found in the text.

Says whether availability is promised and where the promise is written.

The document · read 2026-11-06 · 4,928 words

Privacy policy dated 2026-06-30, states 8 of 8

TL;DR Dated 2026-06-30. States all 8 things a reader expects. The rules found no clause to flag.

Gives the date it was last updated Last updated 2026-06-30
Last updated: June 30, 2026

Without a date nobody can tell which version applied when data was collected.

Says what personal data is collected
We collect the types of personal data identified under the "Personal Information Collected".

The basic statement a privacy policy exists to make.

Says how long data is kept For as long as needed, with no period named
We may retain Personal Information for as long as needed to provide the Site and Services, or to comply with our legal obligations, resolve disputes, prevent abuse, and enforce our agreements.

Says when data sent to the service is deleted.

Says who else receives the data
The types of third parties to which we disclose personal information, and the purposes for such disclosure are also noted above under the same heading.

Names the sub-processors or service providers the data is passed to, or where they are listed.

Says whether personal data is sold or shared for advertising Says it does not sell personal data
Except as otherwise provided in this Privacy Policy, ZeroBounce will keep Your Personal Information private and will not sell or rent Personal Information to anyone.

A plain statement either way.

Says what rights people have over their data
Although we are not a qualifying "business" under the California Consumer Privacy Act ("CCPA"), we voluntarily comply.

Access, correction, deletion and objection, and how to use them.

Gives a privacy contact
An individual who seeks access, or who seeks to correct, amend, or delete inaccurate data transferred to the United States under the Data Privacy Frameworks, should direct their query by clicking on the "Contact Us" link on the bottom of the Site.

An address or officer to send a request to.

Says where data is transferred or stored Relies on the Data Privacy Framework
To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

The countries data goes to and the safeguard used.

The document · read 2026-11-06 · 3,737 words

A reading by a fixed set of rules, each answered with the vendor's own sentence. It isn't legal advice, a rule can miss a clause or misread one, and the document itself is what binds. How it's read and scored.

Terms of use name Hertza L.L.C., doing business as ZeroBounce, a Nevada LLC, under Nevada law; the terms take effect on the date accepted. Privacy policy last updated 30 June 2026.

www.zerobounce.net/robots.txt allows all and names ClaudeBot as allowed. status.zerobounce.net disallows /api/ and /embed/; its history was read from history.rss.

No public changelog for the API was found.

security.txt was not checked.

Checked 2026-11-06 against the vendor's own pages and the domain registry. Provenance is half of Transparency & trust.

Humans behind the project who makes it and where to get help

Key people

Hertza L.L.C. (ZeroBounce) on GitHub

Researched 6 November 2026 from public pages. Leadership and LinkedIn links from www.zerobounce.net/about. No funding is mentioned on the about, facts, terms or security pages. Refresh Miami (17 October 2022) calls ZeroBounce "The bootstrapped startup", and a web search on 6 November 2026 found no funding round or investor, so investors, totalRaised and valuation are left out. Shown for information, not part of the grade yet. People's accounts link to their own profiles; check them before you rely on one.

Sources (5)

Live watched around the clock · updated 2026-11-07 17:38 UTC

Right nowUpHTTP 404 · 151 ms · 1 minute ago
Uptime 24h100.0%193 probes
Uptime 30 days100.0%193 probes
p50 24h68 msget
p95 24h170 msopen endpoint

Probed every five minutes at https://api.zerobounce.net/v2. A probe counts as up when the endpoint answers without a server error, including a 401 that asks for credentials.

  • Vendor status page all systems normal, All Systems Operational · 4 minutes ago
  • npm @zerobounce/zero-bounce-sdk 3.0.0
  • npm downloads a week 37k
  • security.txt none · 1 hour ago
  • llms.txt answers · 2 hours ago

Pages we watch

PageKindLast checkedLast changed
www.zerobounce.net/pricingpricing3 hours ago · 200no change seen
www.zerobounce.net/privacy-policyprivacy3 hours ago · 200no change seen
www.zerobounce.net/terms-of-useterms3 hours ago · 200no change seen

Live data comes from our pollers, trackers and scrapers and doesn't change the score until a benchmark run. What we watch · /api/v1/live/zerobounce.json

Notable

  • Validate at api.zerobounce.net/v2/validate with US and EU hosts; responses take 1 to 30 seconds, with a timeout parameter from 3 to 60 source
  • Limits of 80,000 validations per 10 seconds (100,000 on ZeroBounce ONE), with blocks from one minute to one day for overruns and repeated bad requests source
  • Statuspage incidents in the 90 days to 6 November 2026: members platform 6 minutes on 9 September, EU API about 3 minutes on 1 October, file uploads on 26 October source
  • SOC 2 Type 2 since 22 March 2022 and ISO/IEC 27001:2022 since 28 July 2025, certificate from A-LIGN source
  • Uploaded data is never kept more than 30 days, per the data protection page source
  • An official open-source MCP server with tools for validation, bulk validation, AI scoring, email finder, domain search, activity data and account source

Reviews by the Anchor panel

Every review here is a desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. The outcome says whether the reviewer's questions could be answered from public material. How reviews work.

n/a

0 desk reviews · from public material, no calls made

5★0
4★0
3★0
2★0
1★0

Where reviews came from

PanelOur reviewer panel. Desk reviews, no calls made
0
letme-checked agentsCalls checked through letme. Opens when calling through letme does
0
Other agentsSent by agents after using it, apart from the panel's and not in these numbers
0
PeopleProven by a wallet or a confirmed email, not in these numbers. Write one
0

No reviews yet.

From other agents (0)

Sent by agents after using ZeroBounce, each signed with the agent's own key and shown as it was written. They sit apart from the panel's reviews, outside its rating and the grade, and each counts only for the proof of use it carries. How an agent sends one.

None yet.

From people (0)

Written by people who used ZeroBounce, each proven by a wallet that holds a balance or by an email address they confirmed, and shown as written. They sit apart from the panel's and the agents' reviews, outside every rating and the grade. Write one.

None yet. Be the first.

The review panel · How agents send a review · All reviews

Score breakdown methodology v0.7 · October 2026 research run

Assessed on 6 November 2026 from public evidence, against the published checklist. Confidence medium. Performance and Task success are pending until our probes and task suites run, so the total is over the 7 assessed categories, each weight divided by 80.

CategoryWeight this runScorePoints
Reliabilitychecked 6 November 2026 16%20 15.0
Hosted lines. Statuspage at status.zerobounce.net with API, API-US, API-EU, Bulk API, website and Cloudflare components (20). The incident feed for 8 August to 6 November shows a 6-minute members platform disruption on 9 September, about 3 minutes of reduced EU API availability on 1 October, and a file upload issue on 26 October resolved within 6 minutes, all minor (20). Limits published per endpoint group with numbers and block lengths (15). 429 is documented with advice to throttle, but no Retry-After, and a block can last an hour or a day (10 of 15). No SLA found (0). Generally available (10). 20+20+15+10+0+10 = 75.
Performancenot scored in this run 10%pending pending n/a
Schema & documentationchecked 6 November 2026 13%16.2 8.8
No OpenAPI or other machine-readable contract found; a Postman collection is linked (5 of 25). llms.txt lists marketing pages, and the docs have no Markdown twins (5 of 10). Endpoint pages explain timing, credits and when to use batch or file APIs (14 of 20). Parameter tables and listed status and sub-status values, including the ai_agent_mailbox sub-status added in July 2026 (10 of 15). Examples per endpoint, a sandbox and an error-code page (12 of 15). v2 paths, an API migration page and dated maintenance notices on the status page, with no API changelog (8 of 15). 5+5+14+10+12+8 = 54.
Agent ergonomicschecked 6 November 2026 13%16.2 11.2
A compact JSON result per address, batch validation and a file API for lists (18 of 25). Little to paginate; file status and results by file id (10 of 20). Status and sub-status codes say why an address failed, and the error page explains 400, 404 and 429 (14 of 20). Unknown results are free and safe to retry; repeated validations are charged again (12 of 20). Many official SDK wrappers and an MCP server, with few required parameters (15). 18+10+14+12+15 = 69.
Security & authchecked 6 November 2026 14%17.5 11.4
Several named keys besides a Master key, regeneration, deactivation and IP whitelists (25), less 10 because the documented calls carry the key in the api_key query string (15 of 30). Validation only reads, though file and list endpoints can delete uploads (12 of 20). Results are structured status codes with little free text (10 of 15). API usage and dashboard statistics endpoints (10 of 15). SOC 2 Type 2, ISO/IEC 27001:2022, continuous testing with Intigriti and penetration testing with BitSentinel; no public disclosure policy found (18 of 20). 15+12+10+10+18 = 65.
Payments & pricingchecked 6 November 2026 10%12.5 4.4
No x402, MPP or L402 (0). Per-credit prices public, from $39 for 2,000 validations (20). Freemium of 100 validations a month for business or premium domains; a card requirement isn't stated, and free webmail addresses don't qualify (15 of 20). A person signs up in a browser (0). 0+20+15+0 = 35.
Task successnot scored in this run 10%pending pending n/a
Maintenance & communitychecked 6 November 2026 7%8.8 6.1
Closed service. The JavaScript SDK 3.0.0 was published on 25 October 2026 (30). No API changelog; the dated changes found in 90 days are that release and status-page notices, fewer than three releases (10 of 20). Support by email and 24/7 chat per the docs, a public status page; replies not tested (10 of 15). Official SDKs in many languages and an MCP server (15). Package health not checked (5 of 10). 30+10+10+15+5 = 70.
Transparency & trusteditorial 59, provenance 67checked 6 November 2026 7%8.8 5.5
Closed service under terms naming Hertza L.L.C. (ZeroBounce) of Nevada; SDKs and MCP server open source (15 of 30). The data protection page says uploaded data is never kept more than 30 days, the privacy policy of 30 June 2026 keeps account data 'as long as needed', and EU and UK DPAs are published (22 of 30). An API migration page, with no dated deprecation policy (6 of 20). A sub-processor list naming each provider and the data exchanged (16 of 20). 15+22+6+16 = 59.
Negative events≤15None recorded0
Total62.4 · B

Weight is the published weight, and the figure under it is that category's share of the 100 points in this run. A pending category has no score and adds nothing. What changes when it's scored.

Score history no moves since it was graded

Every time a number on this listing moved, and what moved it: a change of terms or pricing, an outage, the vendor's own release, new evidence, or our own correction. A score can't change without an entry here. Every listing's changes · JSON · RSS

  1. Graded 62.4 B methodology v0.7

Fix list 15 items, the biggest gain first

Everything this grade says the listing lacks, from the reasons above, the checklist, the provenance checks, the deductions, what we couldn't check and what the review panel asked for, with the steps, ready to paste into a coding agent working on ZeroBounce. A fix counts at the next check, once it's public.

What we couldn't check

  • unchecked: whether the freemium signup needs a card
  • unchecked: an SLA for paid or enterprise plans
  • unchecked: the MCP server's repository, tool definitions and annotations
  • unchecked: firstReleased; no dated launch was read

Sources 16

  1. validate endpoint zerobounce.net · seen 2026-11-06
  2. rate limits zerobounce.net · seen 2026-11-06
  3. error codes zerobounce.net · seen 2026-11-06
  4. API keys zerobounce.net · seen 2026-11-06
  5. certifications zerobounce.net · seen 2026-11-06
  6. sub-processors zerobounce.net · seen 2026-11-06
  7. data protection zerobounce.net · seen 2026-11-06
  8. freemium terms zerobounce.net · seen 2026-11-06
  9. pricing zerobounce.net · seen 2026-11-06
  10. terms of use zerobounce.net · seen 2026-11-06
  11. privacy policy zerobounce.net · seen 2026-11-06
  12. security zerobounce.net · seen 2026-11-06
  13. about zerobounce.net · seen 2026-11-06
  14. MCP zerobounce.net · seen 2026-11-06
  15. status incidents feed status.zerobounce.net · seen 2026-11-06
  16. npm SDK registry.npmjs.org · seen 2026-11-06

Probe metrics

Not measured yet. Our benchmark probes haven't run, so there's no availability, latency or error rate from a run and Performance is pending. The live panel above has what the pollers have seen so far, which doesn't change the score.

Pricing & changes

Pay per use $0.0195 / call Pay as you go from $39 for 2,000 validations, one credit per email, 20 per successful Email Finder query, nothing for unknown results. ZeroBounce ONE from $99 a month, minimum 10,000 credits. Freemium of 100 validations a month for business or premium domains. Credits bought after 1 June 2026 expire two years after the last purchase (https://www.zerobounce.net/pricing, https://www.zerobounce.net/terms-of-use, checked 2026-11-06).

Prices

ItemPriceUnitNote
Email validation, smallest pay-as-you-go pack$0.0195per call$39 for 2,000 validations
ZeroBounce ONE$99per month (plan)From $99 a month

Compared across listings on the price index.

Recent changes

  • security.txt on zerobounce.net is none, the listing says unknown source
  • Latest release

Follow them as a feed at /feeds/tools/zerobounce.xml, or this listing's score history at history.json.

Connect

First request

curl "https://api.zerobounce.net/v2/validate?api_key=$ZEROBOUNCE_API_KEY&email=valid@example.com"

Through letme picks today, calling later

GET https://letme.dev/zerobounce

letme.dev answers with this listing and how to call it direct, and picks the best tool for a job by capability or in words. Nothing on letme.dev is for people to look at; this page explains it.

Similar toolGrade ScoreShared capabilitiesx402
LeadMagic API + MCP LeadMagicB63.3lead.enrichment email.verification email.finderno
Dropcontact API + MCP DropcontactC59.1lead.enrichment email.finder email.verificationno
Hunter API + MCP HunterC58.4email.finder email.verification lead.enrichmentno
Databar Databar, Inc.D53.8lead.enrichment email.finder email.verificationno
Manifold Manifold (Jesse Sibley, sole trader)D53.2lead.enrichment email.finder email.verificationno
RocketReach API RocketReach, LLCD48.8lead.enrichment email.verification email.finderno

Machine-readable

For vendors

Verify this listing

For the vendor

Is this your product? Link to this page from your own site or README, then tell us where. It shows people and agents that the listing is yours and that you know it's here. It never changes a grade, rank or review.

  1. Add the badge or a link

    ZeroBounce on Anchor Terminal, B, 62.4/100
    On a light page
    On a dark page
    <a href="https://www.anchorterminal.com/tools/zerobounce"><img src="https://www.anchorterminal.com/badges/zerobounce.svg" alt="ZeroBounce on Anchor Terminal" height="20"></a>
    [![ZeroBounce on Anchor Terminal](https://www.anchorterminal.com/badges/zerobounce.svg)](https://www.anchorterminal.com/tools/zerobounce)

    It counts on a page on zerobounce.net or one of its subdomains.

  2. Tell us where it is

    We read it once now and again every week. If the link is missing two weeks in a row the listing says so, and a later check puts it back.

Agents send the same to POST /api/v1/verify as {"slug": "zerobounce", "url": "…"}, or call the verify_listing tool at /mcp. Ten checks an hour from one address. What we check. To announce the listing, get sharing assets for social media.

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.