Lap — serverless CAPTCHA

A proof-of-work CAPTCHA backend, deployable on Cloudflare Workers / Pages. This instance is live.

Endpoints

• POST https://lap-serverless.pages.dev/:siteKey/challenge — issue a challenge
• POST https://lap-serverless.pages.dev/:siteKey/redeem — redeem a solved challenge
• POST https://lap-serverless.pages.dev/:siteKey/siteverify — verify a token (server-side)
• POST https://lap-serverless.pages.dev/admin/keys — create a site key (needs x-admin-key)

Widget (self-hosted)

• GET https://lap-serverless.pages.dev/widget.js — main widget bundle
• GET https://lap-serverless.pages.dev/widget.compat.js — legacy-browser build
• GET https://lap-serverless.pages.dev/floating.js — floating-mode helper

Quick start

# 1. Create a site key (save the returned 'secret'!)
curl -X POST https://lap-serverless.pages.dev/admin/keys \
  -H "x-admin-key: $ADMIN_KEY" \
  -H "content-type: application/json" \
  -d '{}'

# 2. Drop the widget into your page (served by this Worker)
<script src="https://lap-serverless.pages.dev/widget.js"></script>
<lap-widget data-lap-api-endpoint="https://lap-serverless.pages.dev/YOUR_SITE_KEY/"></lap-widget>

# 3. On your server, verify the token the widget produced
curl -X POST https://lap-serverless.pages.dev/siteverify \
  -H "content-type: application/json" \
  -d '{"secret":"YOUR_SECRET","response":"SITEKEY:ID:TOKEN"}'

Lap is a rebranded fork of Cap, Apache-2.0.