# Conure API > Deterministic security APIs over HTTPS and JSON: bot detection and email risk > scoring. Every verdict is a documented rule with a stated weight — no model and > no black box — so the same input always produces the same answer. ## How it works - Authentication is a bearer token: `Authorization: Bearer YOUR_API_KEY`. - Keys are created in the dashboard and shown exactly once; only a SHA-256 hash is stored. - Free plan: 1,000 checks per calendar month (UTC), no card required. - Pro plan: £49/month for 100,000 checks, signals: email, ip, phone, domain, device. - Max plan: £199/month for Unlimited checks, signals: email, ip, phone, domain, device. - A check is refunded on any non-2xx response, so failed requests cost nothing. - Metering, rate limiting and DNS all fail open: an outage on our side never fabricates a verdict. ## Endpoints - POST /v1/bot-check — Bot check. POST the visitor IP, and optionally their User-Agent and headers, to /v1/bot-check with your API key as a bearer token. The response comes back with is_bot, a 0-100 risk_score and the named reasons behind it, so you can log the decision and defend it later. Counts one check against your monthly quota. - POST /v1/email-check — Email risk. POST the address to /v1/email-check with your API key as a bearer token. You get is_risky, a 0-100 risk_score, the named reasons, and mx_status from a live DNS lookup. Use it on signup to reject throwaway mailboxes before they reach your database. Counts one check against your monthly quota. - GET /v1/usage — Usage. GET /v1/usage with your API key as a bearer token. It returns the current period, your plan, how many checks you have made this month and how many the plan still allows. This call is never metered, so monitoring it costs nothing. Never metered. ## Machine-readable - [OpenAPI 3.0 specification](https://conureapi.com/openapi.json): every operation, parameter and error shape. - [Sitemap](https://conureapi.com/sitemap.xml): every indexable page. - [This file](https://conureapi.com/llms.txt). ## Documentation - [Quickstart - your first Conure API call in 60 seconds](https://conureapi.com/quickstart): Sign in with an emailed link, create an API key in one click, then paste the ready-made cURL command. No card, no SDK, 1,000 free checks every month. - [Conure API reference - endpoints, scores and errors](https://conureapi.com/docs): Reference for every Conure API endpoint: request fields, scoring weights, reason codes, error shapes and rate limits, with samples in six languages. - [Authentication - API keys and bearer tokens explained](https://conureapi.com/docs/authentication): How to authenticate against Conure API: bearer tokens, key rotation, revocation propagation, and what each 401 actually means when a call is rejected. - [Errors and rate limits - every status code explained](https://conureapi.com/docs/errors): Every status code Conure API returns, what causes it, whether it counts against your quota, and what to do next. Includes rate limits and the fail-open guarantees. - [Bot detection API - POST /v1/bot-check - Conure API](https://conureapi.com/docs/bot-check): Score any IPv4 address and User-Agent for datacenter ranges and bot signatures. Documented weights, named reasons, samples in six languages. - [Email risk API - POST /v1/email-check - Conure API](https://conureapi.com/docs/email-check): Check any address for disposable domains, role accounts and missing MX records. Documented weights, a live DNS lookup, no verdict invented on failure. - [Usage API - GET /v1/usage quota check - Conure API](https://conureapi.com/docs/usage): Read the plan and monthly usage behind an API key: checks used, quota, and how many remain. Authenticated, never metered, safe to poll from monitoring. ## Framework guides - [Integrations - drop-in setup for seven web frameworks](https://conureapi.com/integrations): Framework-specific setup for Laravel, Django, React, Next.js, Express, Flask and WordPress. Copy one file, set one secret, ship it the same afternoon. - [Laravel bot detection and email validation - Conure API](https://conureapi.com/integrations/laravel): Add datacenter-IP blocking and disposable-email rejection to a Laravel app. Copy-paste Laravel code, fail-open by default, first call in five minutes. - [Django bot detection and email validation - Conure API](https://conureapi.com/integrations/django): Add datacenter-IP blocking and disposable-email rejection to a Django app. Copy-paste Django code, fail-open by default, first call in five minutes. - [React bot detection and email validation - Conure API](https://conureapi.com/integrations/react): Add datacenter-IP blocking and disposable-email rejection to a React app. Copy-paste React code, fail-open by default, first call in five minutes. - [Next.js bot detection and email validation - Conure API](https://conureapi.com/integrations/nextjs): Add datacenter-IP blocking and disposable-email rejection to a Next.js app. Copy-paste Next.js code, fail-open by default, first call in five minutes. - [Express bot detection and email validation - Conure API](https://conureapi.com/integrations/express): Add datacenter-IP blocking and disposable-email rejection to a Express app. Copy-paste Express code, fail-open by default, first call in five minutes. - [Flask bot detection and email validation - Conure API](https://conureapi.com/integrations/flask): Add datacenter-IP blocking and disposable-email rejection to a Flask app. Copy-paste Flask code, fail-open by default, first call in five minutes. - [WordPress bot detection and email validation - Conure API](https://conureapi.com/integrations/wordpress): Add datacenter-IP blocking and disposable-email rejection to a WordPress app. Copy-paste WordPress code, fail-open by default, first call in five minutes. ## Other pages - [Conure API - deterministic bot and email risk APIs](https://conureapi.com/): Security APIs that answer in one HTTP call: is this traffic a bot, is this address disposable. Documented rules, 1,000 free checks a month, no card needed. - [Pricing - Conure API plans from free to unlimited](https://conureapi.com/pricing): Three plans, one monthly price each, no metered surprises. 1,000 free trust checks a month with no card, and every signal from £49.