Which Turnstile widget verifies this directory's public forms
Reports the credentials IN EFFECT, which may be the shared platform widget rather than this directory's own. configured: false with source: "platform" is the state worth acting on: that widget issues tokens only on hostnames registered against it, and on any other host the anonymous write endpoints accept every submission and record it as spam behind the same 202 they always return. Nothing fails visibly.
Needs no scope beyond a valid key — the site key is already published in GET /export and ships in the HTML of every page carrying the widget. No part of the secret is returned here, unlike the admin route: this surface cannot rotate one, so it has no reason to confirm a rotation.
Request
- Base URL: https://api.epicdirectories.com
- URL: https://api.epicdirectories.com/public/v1/directories/{directory}/turnstile
- Auth: API key in header x-api-key
Path parameters
Headers
Optional. Send a unique key per logical operation to make retries safe. 1-256 characters, and only letters, digits, - and _ — colons and other separators are rejected with 400. A retry with the same key replays the original response (status + body) instead of re-executing. Cached for 24h. Reusing a key with a different request body returns 409 — note that a timestamp in the body (e.g. fetchedAt) turns an otherwise-stable key into a permanent 409, so either omit it (snapshots default it server-side) or fold a payload digest into the key. Skipped on 5xx responses (transient errors should be retried fresh).
API Key for authentication
Response
Current Turnstile configuration
Changes
No recorded changes to this operation across all 1 revision of this API.