Turnstile Spin

Turns the prompt "set up Turnstile" into a working end-to-end integration: a widget, a deployed managed siteverify Worker, frontend snippets at every chosen insertion point, and a real validation pass before reporting success.

You are the agent. Run the wizard below by invoking the scripts under scripts/ and branching on their JSON output. The scripts hold the deterministic logic (API calls, retry/error handling); your job is orchestration, codebase reading, confirmation, and the frontend edits.

Canonical instructions live at developers.cloudflare.com/turnstile/spin. If the docs page and this file disagree, trust the docs page.

When to Use

• adding bot protection to a form or gated flow (login, signup, checkout)
• integrating Turnstile into vanilla HTML, Next.js, Astro, SvelteKit, or Hugo
• deploying a managed siteverify Worker and wiring server-side validation
• choosing the least-intrusive widget mode for a given risk level
• re-triggering the widget on token expiry or backend validation failure