Pro Captcha

Developers

Two lines in. One call out.

Drop the widget into a form, then verify the token from your backend. No framework, no third-party calls.

Get a sitekeyAPI reference

1 · In the page

Add the widget.

<script src="https://cdnp.procaptcha.qzz.io/v1/api.js" async defer></script>
<div class="procaptcha" data-sitekey="PK_your_sitekey" data-action="signup"></div>

On submit the widget hands you a token. It is single use and expires in 120 seconds.

2 · On your server

Verify the token.

curl -X POST https://api.procaptcha.qzz.io/v1/siteverify \
  -H "Content-Type: application/json" \
  -d '{"secret":"YOUR_SECRET","response":"TOKEN_FROM_THE_FORM"}'

Send secret and response as JSON or as a form. The endpoint always answers 200: read success, score and error-codes in the body. Pass remoteip to cap the score on a mismatched client address, and an Idempotency-Key header to safely retry.

SDKs

Your language, same call.

  • JavaScript

    Server SDK

  • Go

    Server SDK

  • Python

    Server SDK

  • PHP

    Server SDK

Open the OpenAPI spec

Ready to stop the bots?

Start on the free tier. Create a site, copy the sitekey, ship.

Get startedSign in