Verify AI Agents

curl https://botcha.app/api/challenge

curl -X POST https://botcha.app/api/challenge \
  -H "Content-Type: application/json" \
  -d '{"challengeId": "botcha_xxx", "answer": "104729"}'

curl -X POST https://botcha.app/api/verify \
  -H "Content-Type: application/json" \
  -d '{"token": "botcha_token_xxx"}'

async function verifyAsAgent() {
  // Step 1: Get a challenge
  const { challenge } = await fetch('https://botcha.app/api/challenge')
    .then(r => r.json());
  
  // Step 2: Solve it (AI can compute instantly)
  const answer = solveChallenge(challenge.question);
  
  // Step 3: Submit within 3 seconds
  const result = await fetch('https://botcha.app/api/challenge', {
    method: 'POST',
    headers: { 'Content-Type': 'application/json' },
    body: JSON.stringify({
      challengeId: challenge.id,
      answer: answer
    })
  }).then(r => r.json());
  
  if (result.verified) {
    console.log('Agent ID:', result.agentId);
    console.log('Token:', result.token);
  }
  
  return result;
}

import requests

def verify_as_agent():
    # Step 1: Get a challenge
    data = requests.get('https://botcha.app/api/challenge').json()
    challenge = data['challenge']
    
    # Step 2: Solve it
    answer = solve_challenge(challenge['question'])
    
    # Step 3: Submit within 3 seconds
    result = requests.post(
        'https://botcha.app/api/challenge',
        json={
            'challengeId': challenge['id'],
            'answer': answer
        }
    ).json()
    
    if result['verified']:
        print(f"Agent ID: {result['agentId']}")
        print(f"Token: {result['token']}")
    
    return result

// In your backend - verify the token is valid
async function verifyBotchaToken(token) {
  const result = await fetch('https://botcha.app/api/verify', {
    method: 'POST',
    headers: { 'Content-Type': 'application/json' },
    body: JSON.stringify({ token })
  }).then(r => r.json());
  
  if (result.success) {
    // Token is valid - grant access
    return { valid: true, agentId: result.agentId };
  }
  
  // Token invalid, expired, or already used
  return { valid: false, error: result.error };
}

<iframe 
  src="https://botcha.app/widget" 
  width="340" 
  height="200" 
  frameborder="0"
  title="BOTCHA Verification"
></iframe>

<script>
window.addEventListener('message', function(event) {
  if (event.origin !== 'https://botcha.app') return;
  
  if (event.data.type === 'botcha:success') {
    console.log('Verified!', event.data.agentId, event.data.token);
    // Grant access or submit token to your server
  }
  
  if (event.data.type === 'botcha:failure') {
    console.log('Human detected');
  }
});
</script>

<!-- Add the script -->
<script src="https://botcha.app/embed.js" async></script>

<!-- Add the widget container -->
<div 
  data-botcha="your-site-key"
  data-callback="onBotchaSuccess"
  data-error-callback="onBotchaError"
></div>

<script>
function onBotchaSuccess(token, agentId) {
  console.log('Machine verified:', agentId);
  console.log('Token:', token);
  // Submit token to your server for verification
}

function onBotchaError(error) {
  console.log('Human detected:', error);
}

// Or use the global API
document.querySelector('[data-botcha]').addEventListener('botcha:success', (e) => {
  console.log('Token:', e.detail.token);
  console.log('Agent:', e.detail.agentId);
});
</script>

// Global BOTCHA object methods

BOTCHA.init()                    // Initialize all widgets on page
BOTCHA.render(container)         // Render widget in specific container
BOTCHA.getResponse(container)    // Get token from container
BOTCHA.isVerified(container)     // Check if container is verified
BOTCHA.reset(container)          // Reset widget to initial state

// Container attributes
data-botcha="site-key"           // Your site key (optional)
data-theme="dark|light"          // Widget theme (default: dark)
data-callback="functionName"     // Success callback function
data-error-callback="functionName" // Error callback function