Business Developer API

Add scam and phishing detection to your product

Screen email, SMS, URLs, and user-submitted content with the same IsThisSpam platform your team can use directly. Production API access is included with Business Plus.

Start Business Plus for $249/month Talk to API sales

250,000 production calls/month300 requests/minuteREST + JSON

Evaluating first? Business Starter and Business include 10,000 lifetime API calls for integration testing. Personal and free accounts are evaluation-only and are not production API plans.

Production API plan

Business Plus

$249

per month

250,000 production API calls per month
Up to 300 API requests per minute
Full developer API access
100 included workspace seats
10,000 monthly basic checks
500 monthly SuperScan investigations
25,000 monthly bulk-screening rows
2,000 watched entities

Get production API access

Need custom capacity? Enterprise plans include contract-based API limits.

Built for product teams

Put a scam check inside the workflow, not after the damage

Use IsThisSpam as a risk signal in the places where suspicious content enters your product.

Email and support workflows

Screen submitted email content before it reaches users, agents, or automated workflows.

SMS and messaging

Classify suspicious messages and return an actionable verdict before users interact.

URLs and form submissions

Add scam and phishing signals to forms, marketplaces, community tools, and moderation flows.

Trust and safety products

Use classification, confidence, reasons, and recommendations to warn, hold, route, or review content.

Three steps to integration

From business signup to a working API call

Choose a Business plan

Business Starter and Business include expanded evaluation access. Business Plus unlocks production API usage.

Generate your API key

Create and manage your key from the developer portal, then keep it in your server-side secret manager.

Integrate one REST endpoint

Submit content and metadata, receive JSON classifications, and connect the verdict to your own product logic.

A straightforward API contract

Send content. Get a verdict. Decide what happens next.

The classification endpoint accepts content plus optional metadata such as sender and subject. Responses can include classification, spam state, confidence, reasons, recommendations, and usage information.

REST integration

Use standard server-side HTTP requests and JSON payloads.

Usage visibility

Track API allowance and build sensible handling for quota or rate-limit responses.

Keep keys server-side

API keys should live in your secret manager or backend, not inside browser code or mobile binaries.

Node.js examplePOST /api/v1/classify

const response = await fetch(
  "https://email-spam-classifier.ultrondevelopments.workers.dev/api/v1/classify",
  {
    method: "POST",
    headers: {
      "Content-Type": "application/json",
      "X-API-Key": process.env.ISTHISSPAM_API_KEY,
    },
    body: JSON.stringify({
      content: message,
      type: "email",
      metadata: { sender, subject },
    }),
  }
);

const result = await response.json();

Read the API documentation

From evaluation to production