Cloudflare's Turnstile Spin lets AI agents install and fix its CAPTCHA-free bot protection

Cloudflare has launched Turnstile Spin, a version of its CAPTCHA-free verification service that AI coding agents can deploy from start to finish. According to a September 25 post on the Cloudflare blog, Spin turns what used to be a manual two-part integration into a guided workflow that an agent such as Claude Code, Cursor or Codex can plan, get approved and execute.

How Turnstile works today

Cloudflare introduced Turnstile in 2023 as a challenge that runs in the browser, is built around privacy, and never asks a visitor to solve a puzzle. It is free, works on sites that do not route traffic through Cloudflare, and has become widely used: the company says it processes roughly three billion verifications on a typical weekday, and that more than 23,000 accounts created a new widget in a single recent week.

Setting it up, however, has always required two steps and some comfort with both frontend and backend code. A developer renders the Turnstile widget on the frontend, where Cloudflare runs the challenge and issues a token. The backend then sends that token to Cloudflare's Siteverify API, which returns metadata on whether the visitor passed, letting the site gate actions like a login button. Cloudflare says demand for simple bot protection reaches well beyond people who write backend code daily, and that AI both helps more people build applications and gives attackers more ways to automate abuse.

What Spin changes

With Spin, the user chooses where protection is needed; the agent then finds the relevant frontend and backend code, proposes a plan, and waits for approval before completing both sides of the integration together. Cloudflare frames this as a way for someone without backend experience to finish the setup correctly, while experienced developers skip the repetitive wiring and catch missing steps.

The architecture is worth noting. According to the Cloudflare blog, Spin does not send application code to Cloudflare, and Cloudflare does not modify code remotely. The agent the developer already uses makes the approved changes inside the codebase, and the sole new resource in the Cloudflare account is the Turnstile widget. Validation logic stays in the backend, next to the application code that decides what happens after a challenge.

Spin adapts to three situations it can find in a codebase:

• Fresh install: no CAPTCHA in place, so the agent embeds the widget and wires Siteverify into the backend from scratch.
• Widget recovery: Cloudflare monitors Siteverify calls per widget, and any widget serving traffic without server-side validation gets a "Fix with Spin" banner in the dashboard. The agent reuses the same secret and adds the missing backend step while the widget keeps serving traffic, pre-empting the support tickets such misconfigurations used to generate.
• Migration from CAPTCHA: the agent detects the markers of an existing provider, proposes a substitution plan, and applies it after approval.

Spin can be started from the Cloudflare dashboard, from the Wrangler CLI, or by pasting a public skill URL directly into an agent. In practice, Cloudflare expects a mix of the three, with Wrangler handling the steps the agent triggers.

Early numbers

Although announced now, Spin has been available in the dashboard since July. Cloudflare reports more than 65,000 successful Spin widget creations since then, along with more than 30,000 copies of the generated prompt by developers. The post was written by a Cloudflare intern, who credits early internal feedback with trimming the workflow down to as few steps as possible.

Why it matters

Turnstile's most common failure mode is not the widget itself but the missing backend half of the integration, which leaves a site looking protected while its challenges go unverified. Spin attacks that gap in two ways: it lets agents install the full stack correctly the first time, and it surfaces existing half-installed widgets with a one-click repair path.

It is also a clear example of security tooling being reshaped for an agent-driven development cycle. Rather than publishing documentation and hoping developers follow it, Cloudflare ships a consumable skill that an agent can execute locally, without source code leaving the developer's machine. As AI agents spin up more of the web, and automate more of the abuse aimed at it, expect this pattern, capability plus agent skill plus local execution, to spread to other security products. Turnstile remains free, and Spin is available to any Cloudflare account holder.