Authentication

Verify Turnstile token

POST
/bot-protection/verify

Authorization

appIdappApiKey
headerx-app-id<token>

Your application ID. Required on app-tier and user-tier routes. Omitted on routes that authenticate with x-app-api-key only.

headerx-app-api-key<token>

App-scoped API key. It is the only credential on partner-admin reads, paper-trading admin, and webhook rotate or replay. POST /bot-protection/verify requires it together with x-app-id.

Request Body

application/json
  1. body
turnstileToken*string
Length1 <= length <= 2048

Response Body

200

application/json
  1. response
success*boolean
Example Request
curl -X POST 'https://api.t.sufwankhalid.com/bot-protection/verify' \  -H 'Content-Type: application/json' \  -d '{  "turnstileToken": "string"}'
Example Response
{  "success": true}