What is a catch-all domain?

A catch-all (or accept-all) domain accepts emails sent to any address: whether the mailbox exists or not. This makes standard email verification impossible because the server always responds yes. Tomba's AI solves this by identifying which addresses are actually monitored by real people.

How does Tomba find verified emails on catch-all domains?

Tomba combines AI pattern detection, cross-referencing against 450M+ verified contacts, web data analysis, and behavioral signals to pinpoint which addresses are actively monitored: even when the server accepts everything. Trusted by 150,000+ professionals worldwide.

What confidence score should I trust for outreach?

For cold outreach, use emails with confidence scores above 70. Scores above 90 are highly reliable and proven to deliver. You can set your own threshold in bulk exports to match your risk tolerance.

Do I pay for catch-all results that aren't verified?

Never. You only pay for results that meet the confidence threshold. Low-confidence or unverifiable results never consume credits: guaranteed.

Can I process catch-all domains in bulk?

Absolutely. Upload a CSV with names and catch-all domains, and Tomba processes each row in seconds. Filter results by confidence score before exporting, so you only get verified, deliverable addresses.

What is the rate limit for catch-all email finding?

Limits are per plan and per endpoint, in requests a second / a minute / a day: Free 1 / 2 / 5, Basic 3 / 50 / 500, Growth 5 / 80 / 1,000, Pro 8 / 150 / 4,000. Pro Plus and Scale have no limit, and Enterprise allows 100,000 requests a day with no per-second limit. Every response carries rate-limit headers; see Rate limits .

Can I get webhook notifications when bulk processing finishes?

Yes. Configure a webhook URL when creating a bulk operation. Tomba sends a POST request with the operation ID and status once processing completes so you can automate your workflow.

How are credits calculated for catch-all email finding?

1 credit per successful email found. If no email can be identified for a name/domain pair, zero credits are consumed. Low-confidence results below your threshold are not charged either.

// catch-all finder

Find work emails on catch-all domains

A catch-all server accepts every address, so most finders stop there. Tomba returns the most likely address with a score and its sources, marked accept_all.

Get free API key API reference

// api console

ExampleExample response from the API reference

Mike Knoop

Co-founder · Zapier

mike@zapier.comvalid

Found on 1 public pageapp.tomba.io/verify/mike@zapier.com

Phone available: —
LinkedIn: —
Pattern: —
Catch-all domain: Yes

// teams at these companies use tomba

// 01 · in the app

Catch-all Finder in the Tomba app

Search a catch-all company in the web app: the most likely address, marked accept_all, with its score and its sources.

// also in

// 02 · the api

Catch-all Finder is one HTTPS request

Send the parameters with your key and secret. Every SDK, the CLI and the MCP server make this same call.

GET/email-finder

domainpiedpiper.com: Company domain (or send company)
first_nameRichard: First name (or send full_name)
last_nameHendricks: Last name
enrich_mobilefalse: Also return phone numbers
webhook_urlhttps://example.com/webhook: Also POST the result to this URL

// cost

Rate limits by plan

1search credit

Charged when: An address is returned with a status other than unknown; 6 search credits instead of 1 with phone data (enrich_mobile).

Errors, 429 and 451 responses, and the same request again within your usage window cost nothing.

13 official SDKs: C#, Dart, Deno, Elixir, Go, Lua, Node.js, Perl, PHP, Python, R, Ruby, Rust. Libraries in the docs

GET /email-finder

200 OK· 1 search credit

{
  "data": {
    "email": "richard@piedpiper.com",
    "first_name": "Richard",
    "last_name": "Hendricks",
    "full_name": "Richard Hendricks",
    "website_url": "piedpiper.com",
    "company": "Pied Piper",
    "pattern": "{first}",
    "department": "executive",
    "type": "personal",
    "position": "CEO",
    "country": "US",
    "gender": "male",
    "twitter": null,
    "linkedin": "https://www.linkedin.com/in/richard-hendricks",
    "score": 100,
    "accept_all": false,
    "phone_number": true,
    "verification": {
      "date": "2025-01-15T10:32:00+01:00",
      "status": "valid"
    },
    "sources": [
      {
        "uri": "https://piedpiper.com/blog/engineering",
        "website_url": "piedpiper.com",
        "extracted_on": "2024-06-01T09:14:07+01:00",
        "last_seen_on": "2025-01-10T17:02:44+01:00",
        "still_on_page": true
      }
    ],
    "phone_data": []
  }
}

GET/email-finder

data.emailstring | null: The address, or null when none is found
data.scoreinteger: Confidence from 0 to 100
data.verification.statusstring | null: valid, accept_all, invalid or unknown, with verification.date
data.full_name, data.position, data.departmentstring | null: Name, job title and team
data.typestring | null: personal or generic (a role address such as sales@)
data.linkedin, data.twitterstring | null: Public profiles
data.sources[]array | null: Up to 20 public pages where the address was found, with dates
data.accept_allboolean | null: The domain accepts mail for any address (catch-all)
data.phone_numberboolean: Tomba holds a phone number for the person
data.phone_data[]array: The numbers, when you send enrich_mobile (each as in Phone Finder)

// 03 · customers

What customers say

Tomba.io is very fast and has lots of features to help anyone prospect and find exactly who you need to find. I use my zoom.info and Apollo to find companies for lead gen and then run those leads into tomba to grab me prospect info in record time.
Julian M.Account Executive, Insightvia G2
I've tested over a dozen email finder tools, and Tomba.io stands out as the best. It consistently delivers accurate results and is incredibly easy to set up using the API key.
Andrei KholkinFounder, Superpage.io

// 04 · capabilities

How Tomba handles catch-all domains

The finder doesn't stop at accept-all: it scores the most likely address and shows what backs it.

Catch-all detected first
Tomba checks whether the domain accepts every address before it answers.
The company's pattern
The address follows the format the company uses most, such as {first}@.
A score to filter on
Each result carries a score from 0 to 100, so you choose how much risk to send to.
Sources when they exist
If the address appears on public pages, you see them, with the dates.
Unknown costs nothing
A search that returns nothing, or only an unknown address, uses no credit.
Whole lists at once
Upload a CSV to the bulk finder and sort the results by status and score.

// 05 · use cases

What teams build with Catch-all Finder

// 06 · questions

Catch-all Finder: quick answers

Still have questions? Visit the help center

// start free

Find the address behind every name

A search uses 1 search credit when it returns an address with a known status, and nothing otherwise.

Create a free account Compare plans

The free plan includes 25 search credits every 30 days.

Find work emails on catch-all domains

Catch-all Finder in the Tomba app

Catch-all Finder is one HTTPS request

What customers say

How Tomba handles catch-all domains

Catch-all detected first

The company's pattern

A score to filter on

Sources when they exist

Unknown costs nothing

Whole lists at once

What teams build with Catch-all Finder

Catch-all Finder: quick answers

Find the address behind every name