---
title: "The bot check page for the widget (public)"
method: GET
path: "/public/challenge"
tags: ["Chat widget"]
---

# The bot check page for the widget (public)

`GET /public/challenge`

## Request

- Base URL: `https://api.hypamoon.com/api/v1`
- URL: `https://api.hypamoon.com/api/v1/public/challenge`
- Auth: API key in query parameter `token`

An HTML page with the bot check, which the chat widget shows in a frame; the widget handles this for you. It sends the bot-check token with postMessage only to `origin`, which must be an allowed origin of the token, and only that origin may frame it. Query: token (the public chat token), origin (the origin of the page with the widget) and lang (en, nl, de, fr or es). An unknown or revoked token returns a plain 404, and an origin that is not allowed returns a plain 403.

## Query parameters

- `origin` string, required
- `lang` 'en' | 'nl' | 'de' | 'fr' | 'es'

## Response `200`

The page with the check.

---

[API](https://skmtc.dev/hypamoon/apis/hypamoon-api.md) · [All operations](https://skmtc.dev/hypamoon/apis/hypamoon-api/llms.txt) · [OpenAPI document](https://skmtc.dev/hypamoon/apis/hypamoon-api/revisions/9f0b90004c06?raw)