Private and expiring tokenThe claim token is stored as a one-way hash, expires automatically, and becomes unusable after a successful claim.
Verified ownershipOnly the signed-in account that enters the matching private token can claim the request. Every attempt is rate-limited and audited.