Captcha

Each API can require Cloudflare Turnstile for specific operations: create, update, delete, and calculate. Reads never require captcha.

Sending a token

Provide the Turnstile response token in either place:

Header

curl -X POST 'https://api.blazesheets.com/v1/<api-id>' \
  -H 'Content-Type: application/json' \
  -H 'cf-turnstile-response: <turnstile-token>' \
  -H 'X-API-Key: bs_...' \
  -d '{"name":"Ada"}'

Body field

{
  "name": "Ada",
  "captchaToken": "<turnstile-token>"
}

For DELETE, you can also pass captchaToken as a query parameter when the header is inconvenient.

Configuration

Enable captcha per operation in the API security settings and configure a Turnstile secret. Missing tokens when captcha is required → 403 FORBIDDEN.