01
Catch errors in context
Ask for a correction while the visitor is still on the form instead of discovering the failure after submission.
Product / Form protection
Stop bad email data at the form
Protect every signup with one script tag.
Add MailTooth to signup, newsletter, waitlist, lead, trial, and checkout forms without exposing a developer API key or building a custom verification client.
- One-line JavaScript
- Origin-scoped site keys
- Configurable blocking policy
One line to production
Paste the script. Keep your form.
MailTooth discovers the email field, checks it before submission, and shows an accessible correction without changing your existing action, framework, or backend.
- Framework independentWorks with native HTML, React, Vue, Webflow, and dynamically rendered forms.
- Safe public credentialYour site key is restricted to the origins and policy you configure.
- Your conversion flow stays yoursChoose fail-open or fail-closed behavior for unavailable checks.
<script
src="https://api.mailtooth.com/form-protection/embed.js"
data-mailtooth-key="mailtooth_form_your_site_key"
defer
></script>Prevention beats cleanup
Do not let an avoidable typo become a broken customer journey.
Invalid, disposable, automated, and unreachable addresses create fake accounts, missed product emails, polluted lead data, and support work after the form is already gone.
02
Keep server keys private
Use a dedicated public site key that cannot access developer, team, billing, or bulk APIs.
03
Control abuse per form
Give production, staging, and separate products their own origins, rate limits, policy, analytics, and revocation.
A small embed for high-value entry points
Protect the forms where a usable email unlocks the next step.
Choose Quick for low-latency screening or Deepcheck when mailbox evidence justifies the added time and credit cost.
SaaS signups
Block malformed and disposable addresses before creating low-quality accounts.
Lead capture
Keep obvious bad data and shared role addresses out of sales routing.
Newsletters
Reduce preventable bounces before double opt-in begins.
Trials and waitlists
Apply stricter risky or unknown policies to scarce or abuse-sensitive access.
Checkout forms
Catch mistyped receipt destinations while the buyer can still fix them.
Marketplace onboarding
Validate seller and customer contact points before notifications depend on them.
Create, copy, protect
A production boundary without a frontend SDK project.
The dashboard generates the complete embed for your selected origins, selectors, depth, and policy.
- 01
Create an integration
Name the form, add exact or wildcard origins, choose a rate limit, and select verification depth.
- 02
Copy one script tag
Paste the generated tag into the page. Matching current and dynamically added forms are discovered automatically.
- 03
Review and refine
Inspect request analytics, tune risky, unknown, or role-address blocking, and revoke retired embeds independently.
Small script, deliberate behavior
Built for real forms, accessibility, and modern frontend lifecycles.
The dependency-free embed works with native forms and client-rendered applications while keeping policy decisions on the server.
Dynamic form discovery
Protect forms rendered after page load by SPAs, modals, and client-side navigation.
Accessible feedback
Use native constraint validation plus optional ARIA live-region error output.
Honeypot defense
Add invisible bot friction without presenting a visual challenge to people.
Origin allowlists
Reject browser use outside exact sites or explicitly configured wildcard subdomains.
Availability control
Default to conversion-safe fail-open behavior or choose strict fail-closed handling.
Independent analytics
Track requests, outcomes, credits, latency, and logs for each protected form.
Your first 100 credits are free
Keep bad email data from entering the workflow.
Start without a card. Choose the workflow and verification depth that match the decision in front of you.