verified-email

Retrieve cryptographically verified user email via Android Credential Manager with OpenID4VP.

1|Updated Mar 17, 2026
One-click install
npx skills add https://github.com/premex-ab/claude-marketplace --skill verified-email
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: verified-email
Source: https://github.com/premex-ab/claude-marketplace/tree/main/plugins/android-verified-email/skills/verified-email
Command: npx skills add https://github.com/premex-ab/claude-marketplace --skill verified-email

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill removes the friction of high-drop-off sign-up and recovery flows by enabling your Android app to retrieve a cryptographically verified email directly from the device’s Google Credential Manager.

Core Features & Use Cases

  • Verified email retrieval via Credential Manager: Requests a digital credential using an OpenID4VP query and obtains a credential response through the built-in UI.
  • Client parsing for UX, not trust: Extracts SD-JWT claims on-device to immediately personalize UI (e.g., showing the user’s name) while ensuring security-sensitive trust is handled on the server.
  • Server-side cryptographic validation guidance: Enforces replay protection (nonce handling) and issuer/presenter integrity checks before account creation or login.

Use Cases: account creation/sign-up (skip OTP), account recovery (secure email-based recovery), and re-authentication for sensitive actions.

Quick Start

Use the verified-email skill to request a verified email with Credential Manager, then send the raw credential response plus the original nonce to your server for cryptographic validation before creating the account.

Frequently Asked Questions about verified-email

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I get a verified email on Android without OTP?

To get a verified email without OTP on Android, request a digital credential using OpenID4VP through Credential Manager. This retrieves a cryptographically verified email directly from the device UI for frictionless sign-up and recovery flows.

Does Android Credential Manager support OpenID4VP for digital credentials?

Yes, Android Credential Manager supports OpenID4VP for digital credentials on devices running API level 28+ with Google Play services. It builds a GetCredentialRequest with GetDigitalCredentialOption to securely retrieve user information.

How do I validate an SD-JWT credential response on the server?

To validate an SD-JWT credential response on the server, send the raw responseJsonString and original nonce from your Android client to the backend. The server must verify the issuer signature, presenter key binding, and nonce to prevent replay attacks.

Can I parse SD-JWT claims on the client for UI personalization?

Yes, you can parse SD-JWT claims on the client to immediately personalize the UI, such as displaying the user's name. However, security-sensitive trust validation must still be handled exclusively on the server.

What is the best way to implement OTP-less account recovery on Android?

The best way to implement OTP-less account recovery on Android is using Credential Manager with an OpenID4VP query. It retrieves a cryptographically verified email, removing the friction and high drop-off rates of traditional OTP recovery flows.