CLOUDFLARE has launched Turnstile Spin, a tool that uses AI coding agents to install, repair or migrate its privacy-focused Turnstile anti-bot service. Turnstile normally requires developers to add a widget to the frontend and send its token to Cloudflare’s Siteverify API from the backend. Cloudflare says Turnstile now handles about three billion verifications on a typical weekday, but incorrect or incomplete integrations can leave sites without effective server-side validation.
Spin lets a developer select the area of an application they want to protect. The coding agent analyses the relevant frontend and backend code, proposes changes and waits for approval before applying them. It supports fresh installations, recovery of widgets that are serving traffic without Siteverify validation, and migration from other CAPTCHA providers.
Cloudflare says the agent operating in the customer’s existing environment makes the approved changes locally; application code is not sent to Cloudflare, and validation remains in the site’s backend.
The feature can be started from the Cloudflare dashboard, Wrangler or by providing an agent with Cloudflare’s public Turnstile Spin skill. Cloudflare reports that, since its release in July, users have created more than 65,000 widgets through Spin and copied its generated prompt more than 30,000 times. The service is available with Turnstile, which Cloudflare says is free to use.