diff --git a/go.mod b/go.mod
index 31b8bb3a..0c2e8c87 100644
--- a/go.mod
+++ b/go.mod
@@ -43,7 +43,7 @@ require (
 	go.lumeweb.com/mcpplane v0.0.0-20260912095121-3753dd085aa8
 	go.lumeweb.com/oauth v0.1.6
 	go.lumeweb.com/opmesh v0.0.0-20260907112428-ade506e64ae9
-	go.lumeweb.com/pinner v0.0.0-20260913155112-17000af806af
+	go.lumeweb.com/pinner v0.0.0-20260913174043-31c1b6e65acb
 	go.lumeweb.com/portal-sdk v0.1.73
 	go.lumeweb.com/queryutil v0.3.19
 	go.lumeweb.com/tunneler v0.0.0-20260907123602-56944ca7aeae
diff --git a/go.sum b/go.sum
index 9558deaf..af86f298 100644
--- a/go.sum
+++ b/go.sum
@@ -755,6 +755,14 @@ go.lumeweb.com/opmesh v0.0.0-20260907112428-ade506e64ae9 h1:kb2adBZ8Ed11yuXoQw2I
 go.lumeweb.com/opmesh v0.0.0-20260907112428-ade506e64ae9/go.mod h1:DbO27Lr6pBSzC+HogQMNNVEZMvkAHYwckL7i79aTETM=
 go.lumeweb.com/pinner v0.0.0-20260913155112-17000af806af h1:oi/hQ2cYZaKpl3SHGbPbVSj7waf0CcNKNIzPboaAvzY=
 go.lumeweb.com/pinner v0.0.0-20260913155112-17000af806af/go.mod h1:doOkNprjTTIZdim9LiOpEnjmxxWsTAb9pTRYkyswXpw=
+go.lumeweb.com/pinner v0.0.0-20260913165141-91bcd5ac166f h1:oM/B5k2iWw+rPwYO6d1Cw6PbCJ5eBLWnXib4zOLDTYg=
+go.lumeweb.com/pinner v0.0.0-20260913165141-91bcd5ac166f/go.mod h1:doOkNprjTTIZdim9LiOpEnjmxxWsTAb9pTRYkyswXpw=
+go.lumeweb.com/pinner v0.0.0-20260913165231-607910a86128 h1:FHM7hyCcAfkLsAEMtNWFL+adNrTxS+4rRIV4EonNdiw=
+go.lumeweb.com/pinner v0.0.0-20260913165231-607910a86128/go.mod h1:doOkNprjTTIZdim9LiOpEnjmxxWsTAb9pTRYkyswXpw=
+go.lumeweb.com/pinner v0.0.0-20260913165519-0cd854ac5743 h1:R3GNQ7ENa2IGbaHJWvB5iWS0QkI/f4s6+zLzsD+aXts=
+go.lumeweb.com/pinner v0.0.0-20260913165519-0cd854ac5743/go.mod h1:doOkNprjTTIZdim9LiOpEnjmxxWsTAb9pTRYkyswXpw=
+go.lumeweb.com/pinner v0.0.0-20260913174043-31c1b6e65acb h1:Cw0gjgj5auBFpEhnLj0YWRhNOoHCLiTQFMrqur74Wlw=
+go.lumeweb.com/pinner v0.0.0-20260913174043-31c1b6e65acb/go.mod h1:doOkNprjTTIZdim9LiOpEnjmxxWsTAb9pTRYkyswXpw=
 go.lumeweb.com/portal v0.5.1 h1:l28uCNFmT+VewwRGhFwlmonYEwLxQfRh06hm7n0SQr8=
 go.lumeweb.com/portal v0.5.1/go.mod h1:JXy/eHHlUdXMsPbXSbRyX2ZM7s/OGNfSNsXH7XRYWCk=
 go.lumeweb.com/portal-middleware v0.3.7 h1:kq4SZq4T/uhauqHehw2JaTbNJpPpE8/EQAC3R737H7c=
diff --git a/internal/clicatalog/compile_tree_test.go b/internal/clicatalog/compile_tree_test.go
index 81c1f41d..85f75d05 100644
--- a/internal/clicatalog/compile_tree_test.go
+++ b/internal/clicatalog/compile_tree_test.go
@@ -795,7 +795,7 @@ var adminOpsOrder = []string{
 	"admin_platform_domains_list", "admin_platform_domains_register", "admin_platform_domains_update", "admin_platform_domains_delete", "admin_platform_domains_bind",
 	"admin_websites_block", "admin_websites_unblock",
 	"admin_social_providers_list", "admin_social_providers_get", "admin_social_providers_create", "admin_social_providers_update", "admin_social_providers_delete", "admin_social_providers_enable", "admin_social_providers_disable",
-	"admin_users_list", "admin_users_get", "admin_users_create", "admin_users_update", "admin_users_delete",
+	"admin_users_list", "admin_users_get", "admin_users_create", "admin_users_update", "admin_users_verify", "admin_users_delete",
 	"admin_quota_plans_list", "admin_quota_plans_get", "admin_quota_plans_create", "admin_quota_plans_update", "admin_quota_plans_delete", "admin_quota_plans_set_default",
 	"admin_quota_allowances_list", "admin_quota_allowances_create", "admin_quota_allowances_update", "admin_quota_allowances_delete",
 	"admin_quota_user_configs_list", "admin_quota_user_configs_update", "admin_quota_user_configs_reset",
@@ -951,7 +951,7 @@ func TestCompileTree_AdminShapeRendersSections(t *testing.T) {
 	if !reflect.DeepEqual(childNamesOf(findTestNode(nodes, "social-providers")), []string{"list", "get", "create", "update", "delete", "enable", "disable"}) {
 		t.Fatalf("social-providers children wrong")
 	}
-	if !reflect.DeepEqual(childNamesOf(findTestNode(nodes, "users")), []string{"list", "get", "create", "update", "delete"}) {
+	if !reflect.DeepEqual(childNamesOf(findTestNode(nodes, "users")), []string{"list", "get", "create", "update", "verify", "delete"}) {
 		t.Fatalf("users children wrong")
 	}
 
diff --git a/internal/clicatalog/shapes_admin.go b/internal/clicatalog/shapes_admin.go
index 3af37f0c..9570731c 100644
--- a/internal/clicatalog/shapes_admin.go
+++ b/internal/clicatalog/shapes_admin.go
@@ -62,6 +62,7 @@ var AdminShapes = ShapeRegistry{
 	// --- admin users (flat section leaves) ---
 	"admin_users_list":   {Path: []string{"admin", "users", "list"}},
 	"admin_users_get":    {Path: []string{"admin", "users", "get"}},
+	"admin_users_verify": {Path: []string{"admin", "users", "verify"}},
 	"admin_users_create": {Path: []string{"admin", "users", "create"}},
 	"admin_users_update": {Path: []string{"admin", "users", "update"}},
 	"admin_users_delete": {Path: []string{"admin", "users", "delete"}},
diff --git a/internal/mcp/platform_domains_surface_test.go b/internal/mcp/platform_domains_surface_test.go
index 00e4ec5b..01a909ee 100644
--- a/internal/mcp/platform_domains_surface_test.go
+++ b/internal/mcp/platform_domains_surface_test.go
@@ -62,6 +62,7 @@ func TestAdminUsersOpsRegisteredInMCPSurface(t *testing.T) {
 		"admin_users_create",
 		"admin_users_update",
 		"admin_users_delete",
+		"admin_users_verify",
 	} {
 		require.True(t, names[want], "MCP surface should expose %s", want)
 	}