---
title: "Serves a Puzzle"
method: GET
path: "/api/v1/puzzle"
tags: ["CoreApi"]
---

# Serves a Puzzle

`GET /api/v1/puzzle`

The endpoint the widget uses to load a puzzle.
In most cases there is no reason to call this directly from your backend server.

## Query parameters

- `sitekey` string, required

## Response `200`

OK

- PuzzleGETResponseData
  - `puzzle` string, required — The base64 encoded, cryptographically signed Puzzle

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden
- `500` — Internal Server Error
- `502` — Bad Gateway

---

[API](https://skmtc.dev/friendlycaptcha/apis/friendly-captcha-api.md) · [All operations](https://skmtc.dev/friendlycaptcha/apis/friendly-captcha-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/friendlycaptcha/friendly-captcha-api/revisions/a6b8878cf24b/schema)