Security check endpoints (POST /email/check and POST /ip/check) use API key authentication via the X-API-Key header. See the endpoint pages for full request/response details.

Base URL

https://api.bunny.build/api/v1

Authentication

HeaderRequiredDescription
X-API-KeyYesYour API key (starts with sec4_)
Content-TypeYesapplication/json
AcceptRecommendedapplication/json

Example headers

X-API-Key: sec4_aBcDeFgHiJkLmNoPqRsTuVwXyZ123456
Content-Type: application/json
Accept: application/json

Rate limiting

Responses include rate limit headers:
HeaderDescription
X-RateLimit-LimitRequests per minute
X-RateLimit-RemainingRemaining requests
X-RateLimit-ResetSeconds until reset
On 429, the server may send Retry-After (seconds).

Error format

Errors return a JSON body:
{
  "detail": "Error message"
}
Validation errors (422) may return an array of detail objects with loc, msg, type.

HTTP status codes

CodeMeaning
200Success
400Bad Request — Invalid input
401Unauthorized — Missing or invalid API key
402Payment Required — Quota exceeded
403Forbidden — Account deactivated
404Not Found
422Unprocessable Entity — Validation error
429Too Many Requests — Rate limit exceeded
500Internal Server Error

Endpoints