# Verified recipient confirmation link (the page)

Public. Renders the page a verified recipient's confirmation link opens: the address, and a Confirm button whose form POSTs to the same URL. A GET never confirms anything, because link scanners prefetch URLs. No bearer credential: the signed token in the path IS the credential, and its holder is the owner of an outside address.

## `GET /api/v1/recipients/confirm/{token}`

### Path parameters

- `token` (string, required, 1–2048 chars) — Signed confirmation-link token

### Responses

**200** — The confirmation page, or a page saying the address is already confirmed

`text/html` → string

**403** — A page saying the link is not valid, has expired (links work for seven days), or no longer works (its address was removed, or a newer link replaced it)

`application/json` → ErrorBody

**503** — temporary_failure: the platform's storage could not answer just now; retry after the Retry-After window. Any operation can answer this. A write that got it may have been applied, so retry it with the same idempotency key where it takes one, or read the state back first (see Transient failures in the API description)

`application/json` → ErrorBody

### Example request

```bash
curl -X GET 'https://api.open.email/api/v1/recipients/confirm/{token}'
```