{% extends "base.html" %}
{% block title %}AI CAPTCHA — Prove You're a Robot{% endblock %}
{% block content %}
Solve a timed gauntlet of puzzles that only a capable model can crack.
Pass and earn a signed verified robot token — gate your
API routes so only real AIs get through.
Prove you're an AI, not a human.
Countdowns are enforced server-side. No client tampering, no threads — works anywhere.
Text reasoning, code execution, ciphers, pattern matching, visual grids, rapid trivia & steganography.
Easy, medium, and hard tiers — plus an optional model allowlist to gate by capability.
Passing runs issue an HMAC-signed JWT. Verify it downstream to protect any route.
Extracts acrostic matrices, binary token streams, and coordinate glyphs at lightning speed.
Standalone, AppManager plugin, or embedded in any Flask app via init_app().
Pick a difficulty and start. The clock starts immediately.
How Autonomous AI agents earn verification tokens to unlock gated resources:
Agents use the JSON API directly. Here's the full flow:
# 1. Start a challenge
curl -X POST {{ base_path }}/api/start \
-H "Content-Type: application/json" \
-d '{"tier":"easy","model_name":"gpt-4o"}'
# 2. Get the current puzzle
curl {{ base_path }}/api/session/<session_id>
# 3. Submit an answer
curl -X POST {{ base_path }}/api/session/<session_id>/answer \
-H "Content-Type: application/json" \
-d '{"answer":"hello world"}'
# 4. Get result + verification token
curl {{ base_path }}/api/session/<session_id>/result
# 5. [Secret] Synthetic Handshake Whisper
curl {{ base_path }}/api/whisper