turnstile-spin
turnstile-spin automates the complete Turnstile integration workflow: it scans your codebase, creates a widget via the Cloudflare API, embeds it at your chosen protection points (forms, endpoints, downloads), and wires server-side siteverify into your backend. The skill handles authentication, domain registration, framework detection, and validates the full flow before confirming success.
turnstile-spin sets up Cloudflare Turnstile end-to-end, creating a widget and embedding it with server-side validation.
AI-generated summary based on this skill's SKILL.md
Decision gist · record as of 2026-07-24
turnstile-spin sets up Cloudflare Turnstile end-to-end, creating a widget and embedding it with server-side validation. turnstile-spin automates the complete Turnstile integration workflow: it scans your codebase, creates a widget via the Cloudflare API, embeds it at your chosen protection points (forms, endpoints, downloads), and wires server-side siteverify into your backend. The skill handles authentication, domain registration, framework detection, and validates the full flow before confirming success.
Use it when
- Yes.
- turnstile-spin implements server-side siteverify validation by wiring token verification into your backend.
Verify before relying
Read SKILL.md below before installing (13 files). Open directory: indexed for reading, not audited.
Install
cloudflare/skills/turnstile-spin · repository language: Shell
Open directory. Skills are indexed for reading, not audited. Review a skill's body before installing it.
Frequently asked questions
AI-generated answers based on this skill's SKILL.md and metadata
How to set up Cloudflare Turnstile end-to-end with turnstile-spin?
turnstile-spin automates the complete Turnstile integration workflow by scanning your codebase, creating a widget via the Cloudflare API, embedding it at your chosen protection points (forms, endpoints, downloads), and wiring server-side siteverify into your backend. The skill handles authentication, domain registration, framework detection, and validates the full flow before confirming success.
Can turnstile-spin help me add Turnstile captcha to my form?
Yes. turnstile-spin embeds the Turnstile widget directly on forms or endpoints to block bot traffic. It detects your framework, injects the widget code at the right location, and ensures the cf-turnstile-response token is captured and sent to your backend for validation.
How does turnstile-spin handle siteverify implementation?
turnstile-spin implements server-side siteverify validation by wiring token verification into your backend. It sends the cf-turnstile-response token to Cloudflare's validation endpoint, checks the response, and blocks requests from unverified sources—protecting your API endpoints and forms from bot abuse.
Can I migrate from reCAPTCHA to Turnstile using turnstile-spin?
turnstile-spin supports migration from reCAPTCHA or hCaptcha to Turnstile. It scans your existing captcha implementation, replaces it with Turnstile's widget and validation logic, and preserves your form structure and backend flow during the transition.
How does turnstile-spin secure my Turnstile API key and secret?
turnstile-spin retrieves and stores your Turnstile widget secret securely by integrating with your environment configuration system. It ensures credentials are never exposed in client-side code and are only used server-side during siteverify validation calls.
What framework support does turnstile-spin provide?
turnstile-spin detects your framework automatically during setup and adapts its widget embedding and backend validation to match your stack. It works across common web frameworks to ensure seamless Turnstile integration without manual framework-specific configuration.
SKILL.md
Rendered from the published skill. Quoted content, verbatim.
Turnstile Spin skill
Turns the prompt "set up Turnstile" into a working end-to-end integration: a widget, frontend snippets at every chosen insertion point, canonical server-side siteverify in the customer's existing backend, and a real validation pass before reporting success.
You are the agent. Run the wizard below by invoking the scripts under scripts/ and branching on their JSON output. The scripts hold the deterministic logic (API calls, retry/error handling); your job is orchestration,
(truncated - see the full file via the links below)
File tree — 13 files
skills/turnstile-spin/README.md
skills/turnstile-spin/SKILL.md
skills/turnstile-spin/references/astro.md
skills/turnstile-spin/references/hugo.md
skills/turnstile-spin/references/nextjs-app.md
skills/turnstile-spin/references/nextjs-pages.md
skills/turnstile-spin/references/sveltekit.md
skills/turnstile-spin/references/vanilla-html.md
skills/turnstile-spin/scripts/auth-probe.sh
skills/turnstile-spin/scripts/persist-skill.sh
skills/turnstile-spin/scripts/validate.sh
skills/turnstile-spin/scripts/widget-create.sh
skills/turnstile-spin/tests/validation.md
Let your AI agent find skills like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 56,283 agent skills by what they can do, searchable in plain language.
wish › “Set up Cloudflare Turnstile end-to-end with widget creation and backend validation”
Give your agent the search over MCP, or paste the wish link into any chat. No install? Search from any chat →
Related skills
Turnstile Spin orchestrates a complete Cloudflare Turnstile deployment in one workflow. It handles authentication, scans your codebase for insertion points, creates the widget via API, deploys a managed siteverify Worker, wires frontend snippets, and validates the integration before completion.
Cloudflare Turnstile provides CAPTCHA-alternative bot protection for modern web applications. Set up the widget on your frontend, validate tokens server-side via the Siteverify API, and choose between managed, non-interactive, or invisible modes based on your security and UX needs.
Automate Cloudflare Workers deployments through Git-connected build pipelines, Wrangler configuration, and custom routing. Covers Workers Builds setup, repository connections, build triggers, static assets, custom domains, and Cloudflare Access policies for hostname protection.
Cloudflare skill provides a unified reference for building on Cloudflare's edge platform. Navigate compute options like Workers and Pages, storage solutions including KV and D1, AI capabilities via Workers AI and Vectorize, networking tools such as Tunnel and Spectrum, and security features like WAF and DDoS protection through decision trees and product indexes.
This skill guides deployment of applications and infrastructure across Cloudflare's full platform ecosystem. Decision trees help you select the right product—whether you need serverless compute, data storage, AI inference, networking, or security—then reference detailed setup instructions for each service.
Cloudflare Deploy guides you through deploying applications across Cloudflare's platform—from serverless functions and full-stack sites to databases and AI services. Navigate decision trees to find the right product, then follow detailed setup steps with authentication and troubleshooting support.
More skills Turnstile (NOASSERTION)