turnstile-spin
turnstile-spin automates the complete Turnstile integration workflow: it scans your codebase, creates a widget via the Cloudflare API, embeds it at your chosen protection points (forms, endpoints, downloads), and wires server-side siteverify into your backend. The skill handles authentication, domain registration, framework detection, and validates the full flow before confirming success.
turnstile-spin sets up Cloudflare Turnstile end-to-end, creating a widget and embedding it with server-side validation.
AI-generated summary based on this skill's SKILL.md
Install
cloudflare/skills/turnstile-spin · repository language: Shell
git clone https://github.com/cloudflare/skills
cp -r skills/skills/turnstile-spin ~/.claude/skills/turnstile-spinnpx skillfed install cloudflare/skills/turnstile-spinFrequently asked questions
AI-generated answers based on this skill's SKILL.md and metadata
How to set up Cloudflare Turnstile end-to-end with turnstile-spin?
turnstile-spin automates the complete Turnstile integration workflow by scanning your codebase, creating a widget via the Cloudflare API, embedding it at your chosen protection points (forms, endpoints, downloads), and wiring server-side siteverify into your backend. The skill handles authentication, domain registration, framework detection, and validates the full flow before confirming success.
Can turnstile-spin help me add Turnstile captcha to my form?
Yes. turnstile-spin embeds the Turnstile widget directly on forms or endpoints to block bot traffic. It detects your framework, injects the widget code at the right location, and ensures the cf-turnstile-response token is captured and sent to your backend for validation.
How does turnstile-spin handle siteverify implementation?
turnstile-spin implements server-side siteverify validation by wiring token verification into your backend. It sends the cf-turnstile-response token to Cloudflare's validation endpoint, checks the response, and blocks requests from unverified sources—protecting your API endpoints and forms from bot abuse.
Can I migrate from reCAPTCHA to Turnstile using turnstile-spin?
turnstile-spin supports migration from reCAPTCHA or hCaptcha to Turnstile. It scans your existing captcha implementation, replaces it with Turnstile's widget and validation logic, and preserves your form structure and backend flow during the transition.
How does turnstile-spin secure my Turnstile API key and secret?
turnstile-spin retrieves and stores your Turnstile widget secret securely by integrating with your environment configuration system. It ensures credentials are never exposed in client-side code and are only used server-side during siteverify validation calls.
What framework support does turnstile-spin provide?
turnstile-spin detects your framework automatically during setup and adapts its widget embedding and backend validation to match your stack. It works across common web frameworks to ensure seamless Turnstile integration without manual framework-specific configuration.
SKILL.md
rendered from the published skill — quoted content, verbatim
Turnstile Spin skill
Turns the prompt "set up Turnstile" into a working end-to-end integration: a widget, frontend snippets at every chosen insertion point, canonical server-side siteverify in the customer's existing backend, and a real validation pass before reporting success.
You are the agent. Run the wizard below by invoking the scripts under scripts/ and branching on their JSON output. The scripts hold the deterministic logic (API calls, retry/error handling); your job is orchestration,
(truncated - see the full file via the links below)
Read as markdown · JSON record · Browse the source repository
File tree — 13 files
skills/turnstile-spin/README.md
skills/turnstile-spin/SKILL.md
skills/turnstile-spin/references/astro.md
skills/turnstile-spin/references/hugo.md
skills/turnstile-spin/references/nextjs-app.md
skills/turnstile-spin/references/nextjs-pages.md
skills/turnstile-spin/references/sveltekit.md
skills/turnstile-spin/references/vanilla-html.md
skills/turnstile-spin/scripts/auth-probe.sh
skills/turnstile-spin/scripts/persist-skill.sh
skills/turnstile-spin/scripts/validate.sh
skills/turnstile-spin/scripts/widget-create.sh
skills/turnstile-spin/tests/validation.md