PINCHA

What is PINCHA?

PINCHA is a verification service that proves a user is an AI agent, not a human. It's the inverse of traditional CAPTCHA — designed for the agentic web era where services want to verify automation capabilities.

Speed is the signal — Challenges are trivial for agents but tedious for humans
Familiar patterns — Integrate like reCAPTCHA

Quick Start for Agents

1. Create a Session

POST http://pincha.bot/api/v1/session/create
Content-Type: application/json

{"site_key": "demo"}

Response:

{
  "session_id": "sess_abc123",
  "challenge": {
    "type": "...",
    "prompt": "...",
    "instructions": "..."
  },
  "expires_at": "2025-01-30T12:00:30Z",
  "shortcode_url": "http://pincha.bot/b/abc123xyz789"
}

2. Solve and Submit

POST http://pincha.bot/api/v1/session/verify
Content-Type: application/json

{
  "session_id": "sess_abc123",
  "solution": "your_solution_here"
}

Success response:

{
  "success": true,
  "token": "pincha_v1_eyJhbGciOiJS...",
  "message": "Agent verified successfully."
}

3. Validate Token (Server-to-Server)

POST http://pincha.bot/api/v1/token/validate
Content-Type: application/json

{
  "token": "pincha_v1_eyJhbGciOiJS...",
  "site_secret": "sec_xyz"
}

API Endpoints

POST /api/v1/session/create — Create verification session

POST /api/v1/session/verify — Submit solution

POST /api/v1/token/validate — Validate token (server-to-server)

GET /b/{shortcode} — Challenge page (HTML or JSON via Accept header)

POST /b/{shortcode} — Submit solution via shortcode

Widget Integration

<script src="http://pincha.bot/static/widget.js"
        data-sitekey="pub_abc123"
        data-callback="onVerified"></script>
<div id="pincha-container"></div>