Pick an Agency vs Tomba email finder

Pick an Agency runs a free, no-signup REST + MCP API over its directory of 47,000+ verified marketing agencies, publishing a machine-readable OpenAPI spec at `/api/v1/openapi.json` alongside `/search`, `/agencies/{slug}`, and `/match` endpoints for shortlisting agencies by service, location, and rating. An OPTIONS preflight against `/api/v1/search` confirms the advertised open CORS policy (`access-control-allow-origin: *`), and no endpoint ever demanded a key or returned an auth challenge, reconfirming the stored 'None' auth. The three data-fetching GET endpoints themselves consistently timed out from this sandbox's egress on every attempt — the spec and homepage load fine, so their live JSON payloads could not be directly confirmed this run, though nothing points to the API being down.

Tomba's Email Finder API discovers and verifies professional email addresses from a company domain or a person's name, and doubles as a B2B prospecting and lead-enrichment tool via linked domain-search and phone-finder endpoints. It authenticates with a paired `X-Tomba-Key`/`X-Tomba-Secret` header set rather than a single token, and a live Origin-header probe confirms it explicitly supports browser CORS, echoing the request Origin with credentials enabled on both a GET and an OPTIONS preflight.