Documentation

Integrate CaptchaCore into your project in 5 minutes.

1 Create site & keys

1. Log in at /admin
2. Create a new site under Sites (name + domain)
3. Generate a key pair under API Keys
4. Store the cc_pub_... (public) and cc_sec_... (secret) key securely

2 Embed the widget (frontend)

The public key (cc_pub_) is used in the browser.

<!-- In deinem HTML, vor </body> -->
<script src="https://src-eu.captchacore.eu/widget/captchacore-v2.min.js"
        data-service-url="https://api.captchacore.eu"
        data-site-key="cc_pub_DEIN_KEY"
        async defer></script>

<!-- Formular mit CaptchaCore -->
<form data-captchacore="interactive" method="post">
    <!-- Deine Formularfelder -->
    <div data-captchacore-widget></div>
    <button type="submit">Absenden</button>
</form>

3 Verify token (backend)

The secret key (cc_sec_) is used server-side.

POST https://api.captchacore.eu/api/v2/verify
Header: X-CaptchaCore-Key: cc_sec_DEIN_SECRET

Body:
{
    "token":     "<captchacore_token aus dem Formular>",
    "form_type": "register"
}

Response:
{
    "valid":      true,
    "decision":   "allow",        // allow | challenge | step_up | block
    "risk_score": 8,
    "confidence": 0.94,           // 0.0–1.0 Signalabdeckung
    "reasons":    ["pow_valid", "behavior_human_like", "ip_clean"],
    "step_up":    null             // Step-Up-Challenge falls noetig
}

HTML integration

For static sites, PHP projects, Node.js or any other backend.

Frontend

The widget automatically attaches to every form with a data-captchacore attribute. It injects a hidden captchacore_token input field.

Backend (any language)

# curl Beispiel
curl -X POST https://api.captchacore.eu/api/v2/verify \
  -H "X-CaptchaCore-Key: cc_sec_DEIN_SECRET" \
  -H "Content-Type: application/json" \
  -d '{"token":"TOKEN_AUS_FORMULAR","form_type":"contact"}'

# Antwort prüfen: valid=true UND action != "block"