Human verification
as an API call.

// 1. Embed widget (frontend)
import { NotBot } from '@notbot/widget';

NotBot.init({
  apiKey: 'nb_live_xxxxxxxxxxxx',
  mode: 'cognitive+bio',   // or 'cognitive'
  onComplete: (token) => {
    // Pass token to your backend
    verifyOnServer(token);
  }
});

// 2. Validate server-side (Node.js)
const result = await fetch(
  'https://api.notbot.id/v1/verify',
  {
    method: 'POST',
    headers: {
      'Authorization': `Bearer ${API_KEY}`,
      'Content-Type': 'application/json'
    },
    body: JSON.stringify({ token })
  }
);

const { score, signals, verdict } = await result.json();

if (score < 70) {
  // Block or flag session
}

import requests

# Validate session token
response = requests.post(
    'https://api.notbot.id/v1/verify',
    headers={
        'Authorization': f'Bearer {API_KEY}',
        'Content-Type': 'application/json'
    },
    json={'token': session_token}
)

data = response.json()
score = data['score']         # 0–100
verdict = data['verdict']   # HUMAN / BOT / UNCERTAIN
signals = data['signals']   # per-signal breakdown

if score < 70:
    block_or_flag(session_id)

// POST /v1/verify → 200 OK
{
  "score": 87,
  "verdict": "HUMAN",
  "confidence": "HIGH",
  "signals": {
    "keystroke": { "score": 91, "pass": true },
    "motor":     { "score": 84, "pass": true },
    "reaction":  { "score": 79, "pass": true },
    "rppg":      { "score": 92, "pass": true },
    "cardiac":   { "score": 88, "pass": true }
  },
  "session_id": "sess_abc123xyz",
  "verified_at": "2026-04-10T09:14:22Z",
  "expires_at": "2026-04-10T10:14:22Z"
}