Quick Start
Get your API Key
Log in to your LeadMagic account and
navigate to your Account Profile to find your API key.
Choose your endpoint
Select the endpoint for your use case: - Email Validation - Verify email
addresses - Email Finder - Find emails from name + company - Mobile
Finder - Get phone numbers - Profile Search - Enrich contact data
Your First API Call
Example Response
A successful request returns a JSON response:Request Format
All API requests should:Use POST Method
All enrichment endpoints use HTTP POST requests with JSON body.
Include Headers
Set
Content-Type: application/json and X-API-Key headers.Send JSON Body
Request parameters go in the JSON body, not query string.
Handle Responses
Parse JSON responses and check the
status field.Base URL
All API requests should be made to:
https://api.leadmagic.ioRate Limits
LeadMagic uses soft mode rate limiting by default - we log limit violations but allow requests through to prevent unexpected failures.
| Endpoint | Rate Limit |
|---|---|
| Email Validation | 3,000/min |
| Email Finder | 3,000/min |
| Mobile Finder | 3,000/min |
| Profile Search | 500/min |
| Company Search | 500/min |
| Jobs Finder | 100/min |
Error Handling
LeadMagic uses RFC 9457 Problem Details for standardized error responses:| Code | Description | Common Causes |
|---|---|---|
200 | Success | Request completed successfully |
400 | Bad Request | Invalid parameters, malformed JSON |
401 | Unauthorized | Missing or invalid API key |
402 | Payment Required | Insufficient credits |
404 | Not Found | Profile or resource not found |
429 | Too Many Requests | Rate limit exceeded (check Retry-After header) |
500 | Server Error | Temporary issue - retry with backoff |
502 | Bad Gateway | External service error |
503 | Service Unavailable | Service temporarily down |
Example Error Response
Example Error Response
Every error includes a
request_id for debugging, suggested action to resolve, and link to relevant docs.Security Best Practices
Keep your key secret
Keep your key secret
Store your API key in environment variables or a secure secrets manager.
Never commit it to version control.
Use server-side requests
Use server-side requests
Always make API calls from your backend server, not from client-side
JavaScript.
Rotate keys if compromised
Rotate keys if compromised
If you suspect your API key has been exposed, regenerate it immediately from
your dashboard.
Next Steps
Developer Experience
Comprehensive guide to headers, analytics, error handling, and best practices.
Authentication Details
Learn more about API authentication and security.
Analytics API
Monitor your usage with real-time dashboards and detailed metrics.
Email Validation
Start validating emails with our most popular endpoint.

