API Reference
Overview
Complete reference for the yCAPTCHA REST API.
Base URL:
https://ycaptcha.xyspg.moePublic Endpoint
The only endpoint your backend needs to call:
Widget Internal Endpoints
These are called automatically by the widget. You do not need to interact with them directly.
POST /challenge
Create a new challenge session with a randomized image grid.
POST /verify
Submit the user's image selections for verification.
GET /image
Proxy a challenge image without exposing the real storage URL.
Rate Limiting
Per-IP sliding window rate limits are enforced on all API routes:
| Route | Limit |
|---|---|
/siteverify | 100 requests/min |
/challenge | 20 requests/min |
/verify | 10 requests/min |
/image | 60 requests/min |