Introduction
Tomba finds, verifies, and enriches professional email addresses, phone numbers, and company data. This page covers the conventions every endpoint shares and indexes the endpoints by task. To make your first request, follow the Quickstart.
Base URL
All endpoints are served over HTTPS from:
Code
The major version is part of the path. Backward-compatible changes, such as new response fields or new optional parameters, ship without a new version, so ignore response fields your client doesn't recognize. See API versioning and the API changelog.
Authentication
Send your API key and secret on every request in the X-Tomba-Key and X-Tomba-Secret headers:
Code
Authentication covers key expiry, rotation, and the other supported methods.
Response format
Responses are JSON. A successful response carries the result in data; list endpoints add paging information in meta. A failed request returns an errors object instead:
Code
Branch on errors.type rather than the HTTP status alone. Errors lists every type.
Set your client timeout to at least 180 seconds. Searches and verifications run in real time against remote mail servers and websites, so response times vary.
Endpoints
Paths are relative to the base URL. Each link opens the full reference, with parameters, response schema, and a playground.
Find email addresses
| Task | Endpoint |
|---|---|
| List the email addresses found for a company domain | GET /domain-search |
| Find one person's email address from their name and company | GET /email-finder |
| Find the email address of an article's author | GET /author-finder |
| Find the email address for a LinkedIn profile URL | GET /linkedin |
| Count the email addresses found for a domain, by department and seniority | GET /email-count |
| Get the email formats a domain uses | GET /email-format |
| List the web pages where an email address was found | GET /email-sources |
Verify email addresses
| Task | Endpoint |
|---|---|
| Check whether an email address can receive mail | GET /email-verifier |
| Check whether a domain is webmail or disposable | GET /domain-status |
Enrich people and companies
| Task | Endpoint |
|---|---|
| Get the person and company behind an email address | GET /enrich |
| Get a person profile in the Clearbit-compatible format | GET /people/find |
| Get a company profile in the Clearbit-compatible format | GET /companies/find |
| Get the person and company profiles together | GET /combined/find |
Phone numbers
| Task | Endpoint |
|---|---|
| Find phone numbers for an email address, domain, or LinkedIn URL | GET /phone-finder |
| Validate a phone number and get its line type and carrier | GET /phone-validator |
Companies and domains
| Task | Endpoint |
|---|---|
| Search companies by industry, size, location, and other filters | POST /reveal/search |
| Find websites similar to a domain | GET /similar |
| List the technologies a website uses | GET /technology |
| Get the domain for a company name | GET /domain-suggestions |
| Count a domain's email addresses by country or city | GET /location |
| Get a company logo (no authentication) | Logo API |
Lists and jobs
| Task | Endpoint |
|---|---|
| Run any finder, verifier, or enrichment over a list | POST /bulk/{type} |
| Store and organize leads | /leads, /leads_lists, /attributes |
| Receive results at your own URL | webhook_url |
Account
| Task | Endpoint |
|---|---|
| Get account details and remaining credits | GET /me |
| Get usage over time | GET /usage |
| List recent API requests | GET /logs |
| Manage API keys | /keys |
| Report an incorrect email or a bounce | POST /flag |
Limits and credits
Requests are throttled per plan and per endpoint; see Rate limits. Most endpoints consume credits from your monthly allowance; Credits and usage lists the cost of each. All limits lists every limit and where it's defined.
SDKs and tools
The API is also available through SDKs for 13 languages, the Tomba CLI, MCP servers for AI assistants, and integrations with automation platforms.