What is a catch-all domain?

A catch-all (or accept-all) domain accepts emails sent to any address whether the mailbox exists or not. This makes standard email verification impossible because the server always responds yes. Tomba's AI solves this by identifying which addresses are actually monitored by real people.

How does Tomba find verified emails on catch-all domains?

Tomba combines AI pattern detection, cross-referencing against 450M+ verified contacts, web data analysis, and behavioral signals to pinpoint which addresses are actively monitored even when the server accepts everything. Trusted by 150,000+ professionals worldwide.

What confidence score should I trust for outreach?

For cold outreach, use emails with confidence scores above 70. Scores above 90 are highly reliable and proven to deliver. You can set your own threshold in bulk exports to match your risk tolerance.

Do I pay for catch-all results that aren't verified?

Never. You only pay for results that meet the confidence threshold. Low-confidence or unverifiable results never consume credits guaranteed.

Can I process catch-all domains in bulk?

Absolutely. Upload a CSV with names and catch-all domains, and Tomba processes each row in seconds. Filter results by confidence score before exporting, so you only get verified, deliverable addresses.

What is the rate limit for catch-all email finding?

Limits are per plan and per endpoint, in requests a second / a minute / a day: Free 1 / 2 / 5, Basic 3 / 50 / 500, Growth 5 / 80 / 1,000, Pro 8 / 150 / 4,000. Pro Plus and Scale have no limit, and Enterprise allows 100,000 requests a day with no per-second limit. Every response carries rate-limit headers; see Rate limits .

Can I get webhook notifications when bulk processing finishes?

Yes. Configure a webhook URL when creating a bulk operation. Tomba sends a POST request with the operation ID and status once processing completes so you can automate your workflow.

How are credits calculated for catch-all email finding?

1 credit per successful email found. If no email can be identified for a name/domain pair, zero credits are consumed. Low-confidence results below your threshold are not charged either.

// catch-all email finder

Discover Verified Emails on Catch-All Domains

Most email finders give up on catch-all domains. Tomba delivers accurate, verified addresses by analyzing 450M+ contacts and 50+ patterns so you reach real people, not dead inboxes.

Get free API key API reference

// api console

Example response from the API reference

email: richard@piedpiper.com
full_name: Richard Hendricks
position: CEO
company: Pied Piper
score: 100
verification.status: valid
type: personal
accept_all: false
sources: 1 item

Based on verified reviews

// 01 · request

Catch-all Finder is one HTTPS request

Send the parameters with your key and secret. Every SDK, the CLI and the MCP server make this same call.

GET/email-finderParameter

domainpiedpiper.com: Company domain (or send company)
first_nameRichard: First name (or send full_name)
last_nameHendricks: Last name
enrich_mobilefalse: Also return phone numbers
webhook_urlhttps://example.com/webhook: Also POST the result to this URL

// official sdks

The same call from 13 official libraries, each one a thin wrapper over the REST API.

C#
Dart
Deno
Elixir
Go
Lua
Node.js
Perl
PHP
Python
R
Ruby
Rust

Libraries in the docs

// 02 · response

What comes back

JSON, the same in every language. Fields Tomba doesn't know are null, never guessed.

GET/email-finderField

data.emailstring | null: The address, or null when none is found
data.scoreinteger: Confidence from 0 to 100
data.verification.statusstring | null: valid, accept_all, invalid or unknown, with verification.date
data.full_name, data.position, data.departmentstring | null: Name, job title and team
data.typestring | null: personal or generic (a role address such as sales@)
data.linkedin, data.twitterstring | null: Public profiles
data.sources[]array | null: Up to 20 public pages where the address was found, with dates
data.accept_allboolean | null: The domain accepts mail for any address (catch-all)
data.phone_numberboolean: Tomba holds a phone number for the person
data.phone_data[]array: The numbers, when you send enrich_mobile (each as in Phone Finder)

GET /email-finder

200 OK· 1 search credit

{
  "data": {
    "email": "richard@piedpiper.com",
    "first_name": "Richard",
    "last_name": "Hendricks",
    "full_name": "Richard Hendricks",
    "website_url": "piedpiper.com",
    "company": "Pied Piper",
    "pattern": "{first}",
    "department": "executive",
    "type": "personal",
    "position": "CEO",
    "country": "US",
    "gender": "male",
    "twitter": null,
    "linkedin": "https://www.linkedin.com/in/richard-hendricks",
    "score": 100,
    "accept_all": false,
    "phone_number": true,
    "verification": {
      "date": "2025-01-15T10:32:00+01:00",
      "status": "valid"
    },
    "sources": [
      {
        "uri": "https://piedpiper.com/blog/engineering",
        "website_url": "piedpiper.com",
        "extracted_on": "2024-06-01T09:14:07+01:00",
        "last_seen_on": "2025-01-10T17:02:44+01:00",
        "still_on_page": true
      }
    ],
    "phone_data": []
  }
}

// 03 · cost and limits

What a call costs

A call is charged only under the condition below. Rate limits depend on your plan.

// cost

1search credit

Charged when: An address is returned with a status other than unknown. 6 with phone data.

Errors, 429 and 451 responses, and the same request again within your usage window cost nothing.

How credits work

// rate limits

Requests per second / minute / day

	Free	Basic	Growth	Pro
Search, finder, similar, technology	1 / 2 / 5	3 / 50 / 500	5 / 80 / 1,000	8 / 150 / 4,000
Email verifier	1 / 2 / 10	2 / 40 / 500	3 / 60 / 1,000	5 / 100 / 4,000

Pro Plus, Scale and credit packs of 50,000 or more: no limit on these endpoints. Enterprise: no per-second or per-minute limit, 100,000 requests a day. Daily limits reset at 00:00 UTC. Rate limits

// 04 · use it anywhere

Catch-all Finder beyond the API

The same endpoint, and the same credits, behind the app and every integration.

// 05 · capabilities

Why Professionals Trust Tomba's Catch-All Email Finder

Proven tools that deliver results where standard email finders fail.

AI Pattern Recognition
Analyzes 50+ email format patterns across the company and pinpoints the verified address even when the server accepts everything.
450M+ Contact Cross-Reference
Validates each email candidate against 450M+ contacts, web mentions, and social profiles to guarantee it belongs to a real person.
Instant Confidence Scoring
Every result includes a 0-100 confidence score. Higher scores mean proven deliverability so you reach the right inbox every time.
Deep SMTP Verification
Goes beyond basic MX lookups with advanced SMTP handshake techniques to detect active mailboxes hidden behind catch-all servers.
Pay Only for Verified Results
No credits wasted on low-confidence results. You only pay when Tomba is confident the email is accurate and deliverable.
Bulk Processing at Scale
Process thousands of catch-all domains at once via CSV upload or API. Filter results by confidence threshold and export instantly.

// use cases

What teams build with Catch-all Finder

// faq

Catch-All Email Finder Questions

Still have questions? Visit the help center

Discover Verified Emails on Catch-All Domains

Catch-all Finder is one HTTPS request

What comes back

What a call costs

Catch-all Finder beyond the API

Why Professionals Trust Tomba's Catch-All Email Finder

AI Pattern Recognition

450M+ Contact Cross-Reference

Instant Confidence Scoring

Deep SMTP Verification

Pay Only for Verified Results

Bulk Processing at Scale

What teams build with Catch-all Finder

Catch-All Email Finder Questions

Make your first call in a minute