Interactive demo showing frontend interception + backend validation
When ON: turnstile-guard.js intercepts fetch/XHR, queues until validated, attaches X-CF-Turnstile-Token header.
When ON: Worker requires valid Turnstile token. When OFF: sends X-Bypass-Turnstile: true to skip validation.
Frontend intercepts requests, backend validates tokens. Scrapers blocked.
https://demo-api.oli.xyz