> ## Documentation Index
> Fetch the complete documentation index at: https://captcha.ribaunt.com/llms.txt
> Use this file to discover all available pages before exploring further.
# Ribaunt
> Ribaunt is a stateless proof-of-work CAPTCHA library for Node.js and browsers — no databases, no third-party services, just signed JWT challenges.
Ribaunt is a stateless proof-of-work CAPTCHA library for Node.js and modern browsers. Your server issues challenges as signed JWTs, the browser widget solves the PoW puzzle, and your server verifies the submitted proof — all without touching a database. Drop it in front of any form, sign-up flow, or API endpoint to stop bots while keeping the experience smooth for real users.
Learn what Ribaunt is, how proof-of-work CAPTCHA protects your app, and why stateless verification makes deployment simple.
Install Ribaunt, configure your secret, add two server endpoints, and embed the browser widget in under five minutes.
Full Express server example with challenge and verify endpoints, replay protection, context binding, and TypeScript types.
Complete reference for `createChallenge`, `verifySolution`, `solveChallenge`, adaptive workload selection, and widget configuration.
## Get up and running in four steps
Add the package to your project with your preferred package manager.
```bash theme={null}
npm install ribaunt
```
Add a strong, randomly generated secret to your server environment. Ribaunt uses it to sign and verify JWT challenge tokens.
```env theme={null}
RIBAUNT_SECRET="replace-with-a-long-random-secret"
```
Create a `GET /api/captcha/challenge` endpoint that issues challenges and a `POST /api/captcha/verify` endpoint that validates solutions.
```ts theme={null}
import { createChallenge, verifySolution } from 'ribaunt';
app.get('/api/captcha/challenge', (_req, res) => {
const challenges = createChallenge({ difficulty: 5, amount: 4, ttlSeconds: 120 });
res.json({ challenges });
});
app.post('/api/captcha/verify', async (req, res) => {
const { tokens, solutions } = req.body;
const result = await verifySolution(tokens, solutions);
if (!result.valid) {
return res.status(400).json({ success: false, error: result.reason, message: result.message });
}
return res.json({ success: true });
});
```
Add the web component to your HTML page. It fetches a challenge, solves it in the browser, and emits a `verify` event when done.
```html theme={null}
```