EmailRep and Bewary check different email risks

At a glance

EmailRep is an email address reputation API

EmailRep is Sublime Security's email address reputation API, queried with an email address. Its introduction describes crawlers, scanners and enrichment services gathering information about addresses, domains and online personas.

EmailRep's repository documents a reputation level of high, medium, low or none, alongside a suspicious flag. Its references count combines positive and negative reputation sources. Those references may concern the domain rather than the individual address.

These documented fields suit apps that need email reputation and address enrichment. EmailRep's homepage warns that high reputation does not establish that an email is safe because accounts can be taken over or spoofed.

Sublime positions EmailRep as a separate free service outside its paid email-security platform, according to its introduction. The EmailRep descriptions here reflect its documentation and repositories.

Bewary returns typed scam decisions across identifiers

Bewary is a scam detection API and MCP server for apps and AI agents. It looks up links, domains, IP addresses, phone numbers, SMS short codes, email addresses, crypto wallets, IBANs, mobile apps and payment handles.

Every check and lookup returns a typed JSON envelope with verdict, p_scam, reason_codes and classification. The response includes entities with typed facts and datasets checked. Its signals carry their source class, weight, dataset and coverage.

The verdict is scam, suspicious, safe or unknown. An unknown result means the evidence was insufficient or a source failed, and your app should never treat that result as safe.

The p_scam value ranges from 0 to 1 and is not yet calibrated against labelled data. Stable reason codes identify what decided the verdict, strongest first.

Bewary publishes TypeScript types and Python models at bewary.app/types. The OpenAPI specification at https://api.bewary.app/v1/openapi.json types every response, including the separate objects returned by related domains, assess, watches and events.

The remote MCP server at https://api.bewary.app/mcp runs the same code as REST. Its tools return typed results through outputSchema and structuredContent for Claude, ChatGPT, Cursor, VS Code and other MCP clients.

We measured email address lookups at a median of 211 ms from Europe on October 23, 2026. Each input was sent for the first time. In the same measurement, domain lookups had a median of 449 ms.

EmailRep documents richer email reputation evidence

EmailRep documents more email reputation context than Bewary's email lookup returns. Its introduction names social and professional profiles, credential leaks, data breaches, phishing kits and emails, spam lists, open relays, domain age and reputation, and deliverability as inputs to risk prediction.

The EmailRep repository describes results that flag credential exposure in the last 90 days and list online profiles found for an address. Those fields suit an app investigating an address's history or its association with a social or professional profile.

EmailRep also documents whether a domain can be spoofed because SPF is not strict or DMARC is not enforced. That email-authentication evidence extends beyond the disposable-provider and mail-server checks described for Bewary's email endpoint.

Its report endpoint documents a catch-all scam tag covering sextortion, payment, lottery, investment and fake-bank scams.

Sublime maintains an official Python library for EmailRep.

Bewary checks other inputs and exposes its evidence

EmailRep's documented reputation query takes an email address. Bewary has separate lookup endpoints for links, domains, IP addresses, phone numbers, SMS short codes, wallets, IBANs, apps and payment handles.

Your app can check a sender's address and a linked URL separately. A Bewary domain lookup also reads registration and expiry dates and the registrar from RDAP, checks brand imitation techniques, and checks Bewary's scam list.

Bewary's response gives your decision code a verdict, stable reason codes and typed evidence across these lookup types. Within the API version, fields, enum values and reason codes are added without renaming or removing existing ones.

The MCP lookup tools expose the same answer to an agent. Lookups use no language model, and each answer carries Bewary's own verdict.

GET /v1/datasets is free and needs no API key. It publishes dataset geography, kind, covered entity types and active entry counts. For scam lists, it also publishes how many entries are aimed at each country.

A lookup keeps no record of who asked, though the value itself can enter Bewary's datasets. A looked-up domain is queued for its web-archive history. A looked-up app is recorded as seen on its store.

Free access depends on whether you already have an EmailRep key

Sublime's introduction, read November 12, 2026, says EmailRep issues no new keys and has disabled unauthenticated queries. Existing key holders can query within their keys' limits.

The EmailRep key page still advertises a free Community key with 250 queries a month and up to 10 a day. That advertisement conflicts with Sublime's documentation, which says no new EmailRep keys are being issued.

EmailRep's docs describe low, per-key limits for existing keys, counted over a rolling 24 hours.

Bewary offers a free API key with 1,000 credits a month and no card. Email lookups cost 1 credit, and keyed API access has a limit of 600 requests a minute. The browser checkers allow 10 checks a day per visitor without a key.

Sublime's docs say EmailRep is outside Sublime subscriptions, unsupported and not under active development. Bewary publishes prepaid credit packs for usage beyond its free allocation.

Prices at volume

EmailRep offers enterprise API access only through its contact form, as its pages showed on November 12, 2026.

Bewary's packs cost $20 for 10,000 credits, $100 for 60,000 credits, $500 for 375,000 credits and $2,000 for 2,000,000 credits. The published range runs from $2.00 down to $1.00 per 1,000 credits.

Prepaid credits never expire.

Other checks can change the credit budget. Deep link and domain lookups cost 30 credits, a phone lookup with live line type costs 10 credits, and a related-domains page costs 5 credits.

Moving an email lookup changes the evidence your app receives

EmailRep uses GET https://emailrep.io/{address} with Key and User-Agent headers. Bewary uses GET https://api.bewary.app/v1/email/{address} with an API key. Your decision code reads Bewary's verdict and reason_codes in place of EmailRep's reputation and suspicious. An unknown verdict is never safe.

EmailRep's docs specify HTTP 429 without an API key and HTTP 403 without a User-Agent header.

Bewary's email lookup returns disposable status, free-provider status, role-mailbox status and whether the domain has a mail server.

For migration jobs, POST /v1/batch accepts up to 1,000 values in a request at 1 credit per item. Each item receives the same response envelope as an individual lookup.

If your app still needs EmailRep's documented profile or credential-exposure fields, keep the EmailRep call while your existing key permits queries.

Both APIs can check different parts of an account

An app can use EmailRep's documented address-reputation fields alongside Bewary checks on other identifiers. A profile reference or credential-exposure flag answers a different question from a URL or phone verdict.

For a new seller, POST /v1/assess takes a website, email, phone, up to 10 other links and a payout wallet. It checks each contact point through its corresponding lookup. It returns deny for a scam field, review for a suspicious field, or pass otherwise.

A pass means nothing Bewary holds names those contact points. It does not establish that the account is safe. Reasons of medium severity or above include the JSON pointer of their field.

Your agent can call lookup_email, lookup_url and the other MCP lookup tools for the same typed results as REST. Keep each decision tied to the field and evidence that produced it.

After signup, Bewary can watch a domain, phone number, wallet or brand for 1 credit a day per watch, charged a day ahead. A brand watch also costs 1 credit per lookalike event. Listing watches and reading their events are free through REST or the MCP tools list_watches and list_events.

Questions

Sources

1. docs.sublime.security: Emailrep introductiondocs.sublime.security/reference/emailrep-introduction
2. emailrep.io: Test@example.comemailrep.io/test@example.com
3. emailrep.io: Keyemailrep.io/key
4. emailrep.io: Contactemailrep.io/contact
5. github.com: Emailrep.iogithub.com/sublime-security/emailrep.io
6. docs.sublime.security: Post reportdocs.sublime.security/reference/post_report.md
7. emailrep.ioemailrep.io/
8. github.com: Emailrep.io pythongithub.com/sublime-security/emailrep.io-python