What problem does it solve?
This Skill removes the friction of high-drop-off sign-up and recovery flows by enabling your Android app to retrieve a cryptographically verified email directly from the device’s Google Credential Manager.
Core Features & Use Cases
- Verified email retrieval via Credential Manager: Requests a digital credential using an OpenID4VP query and obtains a credential response through the built-in UI.
- Client parsing for UX, not trust: Extracts SD-JWT claims on-device to immediately personalize UI (e.g., showing the user’s name) while ensuring security-sensitive trust is handled on the server.
- Server-side cryptographic validation guidance: Enforces replay protection (nonce handling) and issuer/presenter integrity checks before account creation or login.
Use Cases: account creation/sign-up (skip OTP), account recovery (secure email-based recovery), and re-authentication for sensitive actions.
Quick Start
Use the verified-email skill to request a verified email with Credential Manager, then send the raw credential response plus the original nonce to your server for cryptographic validation before creating the account.