[r1ch]

Why does your API want the full email address? That becomes a privacy liability as surely the domain alone is enough.

[8organicbits]

Could be for aliases. [e-mail] routes to [e-mail], but you may prefer to only allow a single account for foo@.