Create account
Menu

DEVELOPER PLATFORM

A short path from site key to verified request.

Register a site, load the SDK for your CAPTCHA version, receive a token, and verify that token from a trusted backend.

Create your workspace Read documentation
03 core areas 01Load the versioned client02Verify on your backend03Handle stable outcomes

Developer experience

Load the versioned client

Each CAPTCHA version has a stable browser entry point so integrations can upgrade intentionally.

  • Async-compatible loader
  • CSP-aware assets
  • Origin validation
Implementation
<script src="https://captcha.giws.us/sdk/v2/giws-captcha.js" async></script>

Developer experience

Verify on your backend

Presented tokens are only evidence after the server verifies them with the site secret.

  • Secret stays server-side
  • Single-use token
  • Hostname and action checks
Implementation
POST /api/siteverify
secret=YOUR_SECRET&response=TOKEN

Developer experience

Handle stable outcomes

Bounded error codes let applications distinguish invalid, expired, replayed, mismatched, and rate-limited requests.

  • invalid-token
  • expired-token
  • replayed-token

CONTINUE EXPLORING

Follow the most relevant path without losing the context of this page.

01

Quickstart

Ship a server-verified integration.

 02

API reference

Review endpoints and contracts.

 03

Integrations

Choose the right stack adapter.

START WITH A REAL SITE

Build a safer user journey.

Register a hostname and choose the amount of verification friction each action deserves.

Create account