Cloudflare Turnstile

cloudflare Bot managementcloudflare-turnstile

CAPTCHA alternative that verifies visitors with invisible JavaScript challenges and a short-lived token.

Provider: cloudflare
Kind: Bot management
Category: Security
Official docs: https://developers.cloudflare.com/turnstile/get-started/server-side-validation/

Properties · 4 set by this component

property	type	values	required	kind default	this component
challengeAction	enum	block \| managed-challenge \| js-challenge \| captcha \| log	no	—	▸ managed-challenge
jsDetections	boolean	—	no	—	▸ true
machineLearning	boolean	—	no	—	inherited
managed	boolean	—	no	false	▸ true
preClearance · component property	boolean	—	no	false	inherited
scoreHeader	boolean	—	no	—	inherited
scoreThreshold	integer	—	no	—	inherited
sessionTokenLifetimeMinutes	integer	—	no	—	▸ 5
singleUseToken · component property	boolean	—	no	true	inherited
verifiedBotsAllowed	boolean	—	no	true	inherited
widgetMode · component property	enum	managed \| non-interactive \| invisible	no	managed	inherited

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "turnstile", component: "cloudflare-turnstile" }

Other Bot management products · 3

AI Crawl Controlcloudflare-ai-crawl-controlcloudflarebot-management Cloudflare Bot Managementcloudflare-bot-managementcloudflarebot-management Generic bot managementbot-managementbot-management

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# Cloudflare Turnstile: a CAPTCHA alternative that runs non-interactive JavaScript challenges and
3# only shows a checkbox when the managed widget decides the visitor is risky ("Turnstile overview");
4# a widget token is valid for 300 seconds and may be redeemed once ("Server-side validation").
5schemaVersion: "1"
6type: "component"
7id: "cloudflare-turnstile"
8kind: "bot-management"
9provider: "cloudflare"
10docs: "https://developers.cloudflare.com/turnstile/get-started/server-side-validation/"
11defaults:
12  managed: true
13  challengeAction: "managed-challenge"
14  jsDetections: true
15  sessionTokenLifetimeMinutes: 5
16properties:
17  widgetMode:
18    type: "enum"
19    values: ["managed", "non-interactive", "invisible"]
20    default: "managed"
21  singleUseToken:
22    type: "boolean"
23    default: true
24  preClearance:
25    type: "boolean"
26    default: false

The same page as markdown, for an agent: /catalogue/components/cloudflare-turnstile.md