UserCheck for Laravel

A Laravel package for validating email addresses using the UserCheck.com API.

✨ Features

• Block disposable email addresses with an always up-to-date API
• Block public email domains (Gmail, Yahoo, etc.) to require business addresses
• Block email forwarding/relay services
• Block domains marked as spam
• Block custom domains from your own blocklist (paid plans only)
• Check for missing MX records
• Validate by domain only for privacy — never sends the local part of the email to the API
• Use as a string rule ('usercheck:block_disposable'), an object rule, or via the UserCheck facade directly
• Localization support for all error messages

Requirements

• PHP 8.2+
• Laravel 11, 12, or 13

Installation

Install the package via Composer:

composer require usercheck/usercheck-laravel

Configuration

Add your UserCheck API key to your .env file:

USERCHECK_API_KEY=your_api_key_here

You can obtain a free API key by signing up at https://app.usercheck.com/register.

Usage

Use the usercheck rule in your Laravel validation:

$request->validate([
    'email' => 'required|email|usercheck'
]);

Options

By default, the usercheck rule will only validate the email address's syntax using the UserCheck API. If the email is invalid, the validation will fail.

The usercheck rule accepts several parameters:

• block_disposable: Fails validation if the email is from a disposable email provider
• block_no_mx: Fails validation if the domain has no MX records
• block_public_domain: Fails validation for public email domains (e.g., Gmail, Yahoo). Great to prevent users from signing up with their personal email addresses.
• block_relay_domain: Blocks email addresses from email forwarding services
• block_spam: Blocks email addresses from domains that have been marked as spam
• domain_only: Validates only the domain part of the email. Great for privacy; only the domain will be sent to the API.
• block_blocklisted: (Paid plans only) Blocks domains from your custom blocklist.

You can combine these options to create a custom validation rule:

$request->validate([
    'email' => 'required|email|usercheck:domain_only,block_disposable,block_no_mx,block_spam',
]);

Using the Facade

You can also use the UserCheck facade directly:

use UserCheck\Laravel\Facades\UserCheck;
$result = UserCheck::validateEmail('test@example.com');
$result = UserCheck::validateDomain('example.com');

Both methods return an array with is_valid and error_code keys.

Localization

The package includes English translations by default. To customize the error messages, publish the language files:

php artisan vendor:publish --provider="UserCheck\Laravel\UserCheckProvider" --tag="lang"

Then, edit the files in resources/lang/vendor/usercheck.

Testing

Run the tests with:

composer test

Mutation testing

Mutation testing is configured via Pest 4 and can be run with:

composer mutate

This requires a code coverage driver (Xdebug or PCOV) to be loaded.

Contributing

Contributions are welcome! Open an issue or pull request on GitHub.

Security

If you discover any security-related issues, please email security@usercheck.com instead of using the issue tracker.

License

The MIT License (MIT). Please see License File for more information.

Support

For support, please email support@usercheck.com or open an issue on GitHub.