{"uid":"cap_0IpKVhDHBDBLypHQdqkng","slug":"agent402-captcha-server-side-verification-b09f699b","name":"Agent402 CAPTCHA Server-Side Verification","description":"Validate a Cloudflare Turnstile, Google reCAPTCHA, or hCaptcha token server-side. You pass your OWN provider secret plus the token from the client; we relay to the provider's siteverify endpoint (never logged) and return the normalized verdict (success, hostname, action, score, error codes). The legitimate backend half of bot protection - no solving, no bypass.","url":"https://agent402.tools/api/captcha-verify","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"token":{"type":"string","description":"the captcha response token from the client"},"secret":{"type":"string","description":"your provider secret key (relayed to the provider, never stored/logged)"},"provider":{"type":"string","description":"turnstile | recaptcha | hcaptcha"},"remoteip":{"type":"string","description":"optional client IP to pass through"}}},"responseSchema":{"type":"json","example":{"success":true,"hostname":"example.com","provider":"turnstile","errorCodes":[]}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_N2EpLfQXlJxQf275QsRI_","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Validates a Cloudflare Turnstile, Google reCAPTCHA, or hCaptcha client token server-side by relaying to the provider's siteverify endpoint and returning a normalized pass/fail verdict","exampleAgentPrompt":"Verify this reCAPTCHA token server-side for me — the token from the client is '03AGdBq25...', my reCAPTCHA secret key is '6LeIxAcTAAAAAGG-vFI1TnRWxMZNFuojJ4WifJWe', provider is recaptcha, and the client IP is 203.0.113.42.","exampleUseCases":null,"resultDescription":"A normalized verdict object indicating whether the captcha token is valid (success true/false), along with any provider-specific metadata returned from the siteverify endpoint such as score, action, hostname, or error codes.","failureModes":["Invalid or expired token returns success:false with error codes from the provider","Wrong secret key causes provider authentication failure","Unknown provider value returns a 400-level validation error","Network timeout reaching the upstream provider siteverify endpoint","Token already consumed (replay) returns success:false"],"whenToPreferThis":"Use this endpoint when your agent needs to validate a CAPTCHA token server-side without managing direct HTTP calls to each provider's siteverify API. Ideal when you need provider-agnostic normalized results across Turnstile, reCAPTCHA, and hCaptcha, or when operating in an environment where making outbound HTTP calls to Google/Cloudflare/hCaptcha is inconvenient. The secret key is never logged or stored.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T19:14:04.892Z","isFirstParty":false}