INTEGRATIONS
Works where you build.
CaptchaKit is one widget and one server-side check. We've built first-class integrations for the big platforms — and a plain embed + REST API for everything else.
1
Add the widget
Install the plugin or paste two lines of embed code. The widget renders one of your games in the form.
2
Visitor plays, bots fail
A few seconds of Connect 4 (or any of your 18 games) issues a signed one-time token.
3
Token is verified server-side
Plugins verify automatically. Custom sites make one REST call. No tracking, no cookies, no image grids.
WordPress
Plugin — protects comments, login & contact forms
- ✓Install the CaptchaKit plugin and paste your site key + API key in Settings.
- ✓Comments, login, and registration forms are protected automatically.
- ✓Works with Contact Form 7 and WPForms out of the box.
- ✓Server-side verification is handled by the plugin — no code needed.
Shopify
Theme app block — guards storefront forms
- ✓Add the CaptchaKit block to any section in your Online Store 2.0 theme.
- ✓Protects contact, newsletter, and account login forms.
- ✓Form submission is held until the visitor clears the game.
- ✓Tokens are verified server-side before the form goes through.
Wix
Dashboard app + one-line backend verify
- ✓Drop the widget into any page with an HTML embed.
- ✓Your API key lives in the Wix Secrets Manager — never in page code.
- ✓Verify tokens with a single backend web-module call.
- ✓Setup screens in your Wix dashboard walk through the keys.
Webflow
Designer extension — one-click script injection
- ✓The extension injects the CaptchaKit script site-wide in one click.
- ✓Paste the widget div into an Embed block on any form page.
- ✓Pick which of your games shows, right from the Designer panel.
- ✓Verify tokens wherever your form submissions land.
BigCommerce
Store app — login, registration & checkout forms
- ✓Install the app and land on a simple settings page.
- ✓Paste your site key + API key — the snippet is injected for you.
- ✓Protects storefront login, registration, and checkout-adjacent forms.
- ✓Verification runs server-side through the app.
Any site or framework
embed.js + one REST call
- ✓Add one script tag and a widget div — that's the whole frontend.
- ✓Your server makes one POST to /api/verify with the token.
- ✓Guides for React, Next.js, Vue, Node, Python, and PHP in the docs.
- ✓Tokens are signed, one-time-use, and expire in 10 minutes.
WHY IT WORKS EVERYWHERE
Every integration uses the same flow: the widget runs in an iframe on your page, the visitor clears a quick arcade game, and your platform receives a signed, one-time token. Verification happens server-side — a bot can't fake a token, and a token can't be replayed.
Because the model is that simple, the platform integrations are thin and reliable: they place the widget and make the verify call for you. Nothing about your theme, checkout, or form handling changes.
- ✓No cross-site tracking, fingerprinting, or cookies
- ✓18 games — rotate them with the in-widget arcade
- ✓Accessible fallback + full keyboard play built in
- ✓One-time tokens, verified on the server, 10-minute expiry
- ✓Pay what you want — one purchase covers any platform
Don't see your platform? If it can run a script tag, it can run CaptchaKit.