Is there a way not to have email verification?

[sosoxuc]

Credential Bundle is handed over email, is there any other way?

[r-n-o]

@sosoxuc in the case of email auth, email verification is a critical part of the security of this flow (this ensures the end-user receives the bundle and nobody else, to prevent MITM-type attacks)

What kind of flow are you trying to implement? There are other options to add credentials to a user: you can add a programmatic user to a sub-org with a policy which lets it add credentials directly, you can also have users add browser-created creds to their sub-orgs directly, we also recently implemented OAuth which also works with bundles. Turnkey is pretty flexible; the options available really depend on your use case and security profile.