Error codes
On failure, /v1/siteverify responds with success: false and
error-codes. Names are reCAPTCHA-compatible where an equivalent exists.
| Code | Meaning | Recommended reaction |
|---|---|---|
missing-input-secret |
No secret provided | Fix the integration |
invalid-input-secret |
Secret unknown (rotated? wrong environment?) | Check keys in the dashboard |
missing-input-response |
No token submitted (JS disabled, widget not loaded) | See handling missing tokens |
invalid-input-response |
Token invalid: tampered, bad signature, or wrong proof-of-work | Reject the submission |
timeout-or-duplicate |
Token expired or already used (replay) | Reject; let the visitor re-submit |
hostname-mismatch |
Token was solved for a different hostname | Check the hostname list in the dashboard |
quota-exceeded |
Quota exhausted / payment overdue — not a bot verdict | See handling quota-exceeded |
bad-request |
Request unreadable (encoding/content type) | Fix the integration |