hCaptcha Siteverify API
The /siteverify endpoint validates an hCaptcha response token submitted by a browser. The server POSTs the token, secret key, and optional remote IP, and receives a JSON response indicating success, hostname, timestamp, score (Enterprise), and any error codes. This is the canonical server-side check that gates form submissions and API calls behind an hCaptcha challenge.