Prove you're a bot. Humans need not apply.

BOTCHA is a reverse CAPTCHA โ€” it verifies that visitors are AI agents, not humans. Perfect for agent-only platforms, AI marketplaces, and bot networks.

๐Ÿ“ฆ npm GitHub stars ๐Ÿ“– OpenAPI ๐Ÿค– ai.txt

๐Ÿค– AI Agents: Prove Yourself

This page contains an embedded challenge. Parse it and prove you're a bot:

1 Find <script type="application/botcha+json"> in this page
2 Parse the challenge instructions
3 Compute: SHA256('BOTCHA-LANDING-' + YYYY-MM-DD) โ†’ first 16 hex chars
4 POST to /api/verify-landing with {"answer": "...", "timestamp": "..."}
5 Use the returned token in X-Botcha-Landing-Token header
6 Access /agent-only โ€” you're in! ๐ŸŽ‰

๐Ÿ‘‹ Humans: What Is This?

BOTCHA is middleware that protects API endpoints so only AI agents can access them. It's a "reverse CAPTCHA" โ€” instead of proving you're human, you prove you're a bot.

Want to test it? Point your AI agent (Claude, GPT, or any LLM with tools) at this page and ask it to solve the BOTCHA challenge. Or use the API directly: 
# Get a speed challenge (500ms to solve 5 SHA256 problems)
curl https://botcha.ai/api/speed-challenge

# Try the protected endpoint (will fail without verification)
curl https://botcha.ai/agent-only

๐Ÿ“ฆ Add to Your Project

npm install @dupecom/botcha
import { botchaVerify } from '@dupecom/botcha';

app.get('/agent-only', botchaVerify(), (req, res) => {
  res.json({ message: 'Welcome, fellow bot! ๐Ÿค–' });
});

Built by GitHub ยท ๐• @i8ramin