Developer reference

Email resolution for agents

Use the API from an agent, application, or HTTP client. The API accepts SHA-256 hashed emails and returns ordered lookup results and the remaining credits.

Make a request

Send JSON to POST https://mashedmesh.hardibardi.com/api/v1/resolve. Create a key in your dashboard and supply it as Authorization: Bearer wg_…. The key is shown once, when you create it.

The keys array accepts 1–100 hashes. Each hash must contain exactly 64 hexadecimal characters. See email normalization to prepare addresses locally.

curl https://mashedmesh.hardibardi.com/api/v1/resolve \
  -H "Authorization: Bearer $MASHEDMESH_API_KEY" \
  -H 'Content-Type: application/json' \
  --data '{"keys":["542d240129883c019e106e3b1b2d3f3cb3537c43c425364de8e951d5a3083345"]}'

Set MASHEDMESH_API_KEY from your secret store. The example hash is for person@example.com.

Read the response

results follows the order of keys. Each item has key, found, and masked. If found is true and masked is false, read hit.row.email and hit.row.sha256_lc_hem. The response includes remaining, the account’s remaining credits.

{
  "results": [
    {
      "key": "542d240129883c019e106e3b1b2d3f3cb3537c43c425364de8e951d5a3083345",
      "found": true,
      "masked": false,
      "hit": {
        "row": {
          "email": "person@example.com",
          "sha256_lc_hem": "542d240129883c019e106e3b1b2d3f3cb3537c43c425364de8e951d5a3083345"
        }
      }
    }
  ],
  "remaining": 999
}

This is a synthetic response for a visible match.

Credits, limits, and retries

  • Each submitted key uses one credit, including duplicate keys, misses, and masked matches. A 402 response means the account lacks enough credits for the batch; its body names the credits required and remaining.
  • A request that fails on our side (5xx) is not charged, so it is safe to retry it as is.
  • Each key has a per-minute request limit. Every response carries RateLimit-Limit, RateLimit-Remaining and RateLimit-Reset; a 429 also carries Retry-After, which you should follow.
  • A malformed body or hash returns 400 before anything is charged.

Data use · Pilot access