Site Management
Site management is handled through the gkCAPTCHA dashboard. The Go API handles CAPTCHA verification only.
Architecture
gkCAPTCHA uses a split architecture: the dashboard (Next.js) handles all site management operations, while the Go API handles CAPTCHA verification. There is no public REST API for site management.
Site management operations (create, update, delete, rotate keys) are performed through the gkCAPTCHA dashboard. This is an intentional architectural decision that keeps management concerns separate from the high-performance verification path.
Dashboard Operations
The following operations are available through the gkCAPTCHA dashboard at gatekeeper.sa:
| Operation | Description |
|---|---|
| Create Site | Register a new site and receive your site key and secret key |
| Update Site | Modify site name, domain, mode, theme, and language settings |
| Delete Site | Remove a site and invalidate all associated keys |
| Rotate Secret Key | Generate a new secret key with a 24-hour grace period for the previous key |
| List Sites | View all sites in your account with verification statistics |
| View Statistics | Detailed verification metrics, pass rates, and score distributions per site |
CAPTCHA Verification API
For server-side token verification and CAPTCHA operations, use the public API endpoints:
| Endpoint | Description |
|---|---|
| GET /api/v1/pow/challenge | Request a Proof-of-Work challenge |
| POST /api/v1/verify | Submit solution and behavioral signals |
| POST /api/v1/token/verify | Server-side token validation |
| POST /api/v1/score | Invisible mode scoring (0.0-1.0) |
See the API Reference for full endpoint documentation.