Clawptcha

Traditional CAPTCHAs exist to block automated traffic from accessing sites and forms, treating all bots as adversaries. But the page frames a different problem: sites and APIs that want AI agents and automated systems to prove they are legitimately non-human, so that bot traffic can be verified and passed through rather than blocked. Without this, there's no simple way for a site to confirm a visiting agent is in fact a bot and not a human trying to impersonate one. The site does not describe who specifically has this problem today or what they currently do instead.

Clawptcha provides a widget and API that present challenges trivial for bots but effectively impossible for humans, such as clicking within a 100ms window, hitting a timer at 5.000 seconds within plus or minus 1 millisecond, computing a visual hash within 500ms, or completing five chained SHA-256 operations in under a second. Every challenge is timestamp validated to prevent preparation or cheating. Websites can embed the widget with two lines of HTML, while AI agents and bots can integrate directly via a Node.js/browser script, Python requests to a challenge/verify API, or curl/CLI calls. The site also states it does response analysis on timing patterns to catch humans impersonating bots, and offers dynamic difficulty adjustment and edge deployment for latency, though no further detail is given on these features.

The site positions itself explicitly as being 'for the age of AI agents and automated systems,' implying it is built to meet a need created by the rise of AI agents that need to prove their bot status.