# Verified recipient confirmation link (confirm)

Public. The confirmation page's Confirm button: makes the address a verified recipient of the account that asked, and retires every link mailed for it. Idempotent: a second POST finds it already confirmed. No bearer credential: the signed token in the path IS the credential.

## `POST /api/v1/recipients/confirm/{token}`

### Path parameters

- `token` (string, required, 1–2048 chars) — Signed confirmation-link token

### Responses

**200** — The address is confirmed (or already was)

`text/html` → string

**403** — A page saying the link is not valid, has expired (links work for seven days), or no longer works (its address was removed, or a newer link replaced it); nothing was changed

`application/json` → ErrorBody

**503** — temporary_failure: the platform's storage could not answer just now; retry after the Retry-After window. Any operation can answer this. A write that got it may have been applied, so retry it with the same idempotency key where it takes one, or read the state back first (see Transient failures in the API description)

`application/json` → ErrorBody

### Example request

```bash
curl -X POST 'https://api.open.email/api/v1/recipients/confirm/{token}'
```