---
title: "Confirm an email ownership proof"
method: POST
path: "/api/v1/mcp-directory/ownership/confirm"
tags: ["mcp-directory"]
---

# Confirm an email ownership proof

`POST /api/v1/mcp-directory/ownership/confirm`

## Request

- Base URL: `https://koskamo.com`
- URL: `https://koskamo.com/api/v1/mcp-directory/ownership/confirm`
- Auth: none declared

Consumes the single-use token from the ownership email (it expires after 48 hours) and marks the proof confirmed. The emailed link opens a page whose Confirm button sends this POST, so link scanners cannot confirm. The requester then calls verify. Rate limit: 20 requests per hour per IP.

## Request body

- object
  - `token` string, required

## Response `200`

Confirmed

- object
  - `status` 'confirmed'

## Other responses

- `400`: token is required
- `403`: Access denied (trusted ingress required)
- `404`: This link is not valid
- `410`: This link was already used or expired
- `429`: Rate limited (20 requests per hour per IP)

---

[API](https://skmtc.dev/koskamo/apis/koskamo-agent-api.md) · [All operations](https://skmtc.dev/koskamo/apis/koskamo-agent-api/llms.txt) · [OpenAPI document](https://skmtc.dev/koskamo/apis/koskamo-agent-api/revisions/c7761a377e7b?raw)