Turnstile Spin helps agents wire both halves of bot protection

Turnstile Spin guides a coding agent through adding Cloudflare’s browser challenge and the backend verification that must accompany it. The agent finds the relevant code, proposes changes for approval and implements both sides. It can also repair widgets missing server-side validation or help migrate another CAPTCHA integration. A visible widget alone is not the complete protection.

Cloudflare · Sep 25, 2026

Why it matters

The practical value is catching the backend step that a frontend-only integration can miss.

More context

Start from the Cloudflare dashboard, Wrangler or the published agent skill with access to your application and account. Review the proposed changes and test rejected tokens. The article says dashboard availability began in July.

Keep in mind

This is a newly published workflow explanation, not a first release today. Turnstile is free, but your coding-agent access may cost money; generated integration code still needs review.

Original read