Email domain checks
Check disposable domains, missing MX records, and other basic email-domain problems before an account is created.
Signup And Request Screening
Send email, IP, user agent, and hostname. Get back allow, challenge, review, or block with a score, reasons, and evidence.
Events
signup, login, first_action
Returns
decision, score, reasons
Setup
project, token, API call
What It Checks
Use Bitterscreen at signup, login, or first action. Start with the obvious checks first, then review the score, reasons, and recent event history in the dashboard.
Email domain checks
Check disposable domains, missing MX records, and other basic email-domain problems before an account is created.
Traffic and velocity checks
Look at IP, domain, and session patterns so repeated signups or bursts can be challenged or blocked.
Project rules
Keep allowlists and blocklists per project so each app can enforce its own policy.
Review history
Store recent events, decisions, and feedback so you can see what happened and adjust policy over time.
API
Send `signup`, `login`, or `first_action` with email, IP, user agent, and hostname. The response includes a decision, a score, reasons, and a TTL.
API behavior
Request
curl -X POST https://bitterscreen.com/api/v1/screen \
-H "Authorization: Bearer bsrn_live_..." \
-H "Content-Type: application/json" \
-d '{
"event_type": "signup",
"email": "person@example.com",
"ip": "203.0.113.10",
"user_agent": "Mozilla/5.0",
"site_hostname": "app.example.com"
}'Response
{
"screening_id": "scrn_01H...",
"decision": "review",
"score": 58,
"reasons": [
"mx_missing",
"domain_recently_seen"
],
"ttl_seconds": 900
}Pricing
Choose a plan, create a project, copy its token, and start calling the API.
For one app that needs a real screening layer, not a security team.
For teams screening multiple apps or heavier signup volume.
For products that need a serious review layer without enterprise ceremony.
Get Started
Choose a plan, create a project, and use the token in your signup or login flow.