# Tencent CAPTCHA MCP for AI Agents AI Agent Connect > Tencent CAPTCHA is an anti-bot and CAPTCHA service that lets you verify tickets and audit risk levels through your AI agent. It handles the heavy lifting of fraud prevention for your application, checking frontend results and diagnosing suspicious activity. It's designed to give you real-time security oversight without the friction of manual console navigation. ## Overview - **Category:** industry-titans - **Price:** Free - **Endpoint:** https://edge.vinkius.com/vk_preview_HgSctbY7uLWUMvGJCVrMksLZoBgAi1kd2deCbE1H/ai-agent-connect - **Tags:** anti-bot, risk-management, fraud-prevention, security-verification, authentication, api-integration ## Description This Connector puts a major cloud security platform directly into your agent's hands. Imagine you're trying to keep a high-traffic registration flow from getting hammered by bots. Usually, that means jumping between your security logs and a cloud console, manually checking ticket statuses, and trying to figure out if a specific user is a human or a script. It's a tedious process that makes it hard to react to attacks as they happen. This Connector changes that by letting you just tell your agent to check a ticket or ask about the risk level of a specific interaction, and it handles the communication with the backend for you. It's about moving from "checking a dashboard" to "asking a question." When you connect this through the Vinkius catalog, your agent becomes a security coordinator that can interpret complex risk metrics and audit your configuration settings on the fly. It keeps the security tight while keeping your workflow fast, making sure that only real people get through your gates while your agent handles the technical verification. You can verify frontend results, check your regional compliance, and monitor gateway health without ever having to navigate the dense menus of a cloud provider's dashboard. It turns a complex security operation into a simple conversation, letting you stay focused on building your app rather than managing security hurdles. ## Tools ### get_captcha_app_info Retrieve your current CAPTCHA configuration details. This lets you quickly check your AppId and regional settings. ### verify_captcha Check a CAPTCHA ticket and get a risk score. Use this to see if a user is likely a human or a bot. ## Prompt Examples **Prompt:** ``` Verify this CAPTCHA ticket: 't0...ABCD' with randstr 'xyz123' from IP '1.2.3.4'. ``` **Response:** ``` I've successfully verified the CAPTCHA result. The ticket has passed validation with an **EvilLevel of 5**, indicating a low-risk human user. Should I retrieve the full details for your CaptchaAppId? ``` **Prompt:** ``` What does an EvilLevel of 85 mean? ``` **Response:** ``` An **EvilLevel of 85** is classified as **High Risk**. This indicates a very high probability that the interaction originated from a malicious bot or a fraudulent automation script. I recommend blocking this request or requiring additional authentication. ``` **Prompt:** ``` Show me the configuration and status of my Tencent CAPTCHA project. ``` **Response:** ``` I've retrieved your project overview. Your **CaptchaAppId is correctly registered**, and the API gateway is responding normally in the **'ap-guangzhou' region**. Would you like me to check if your AppSecretKey is also properly configured for verification calls? ``` ## Capabilities ### Verify user tickets Your agent can check CAPTCHA tickets from user inputs to confirm they are valid. ### Audit risk levels Get specific risk scores to see if a user interaction is likely a human or a bot. ### Check configuration settings Retrieve your AppId and regional settings to ensure your security setup is correct. ### Validate IP formats Confirm that incoming data meets your security standards before you process the request. ### Monitor gateway health Check the status of your connection to the security backend to ensure it's active. ## Use Cases ### High-Traffic Signups A developer asks the agent to verify a ticket from a signup form. The agent checks the ticket and confirms it's a low-risk human. ### Fraud Detection A security lead asks why a specific IP is being blocked. The agent looks at the EvilLevel and explains the high risk of bot activity. ### Configuration Audit A DevOps engineer wants to see if their AppId is set to the right region. The agent pulls the config and confirms the 'ap-guangzhou' status. ### Real-time Monitoring A developer asks the agent to check if the CAPTCHA API is still responding. The agent confirms the gateway is up and running. ## Benefits - Stop bots instantly by using verify_captcha to check every user interaction. You get immediate confirmation on whether a request is legitimate or a fraudulent script. - Understand risk better with the EvilLevel score. Instead of guessing, your agent tells you exactly how suspicious a user's behavior is based on real data. - Audit your cloud setup faster with get_captcha_app_info. You can check your AppId and region settings without opening a separate browser tab or navigating complex menus. - Maintain high-precision security by validating IP formats. Your agent can confirm that the incoming data meets your required security standards before you process it. - Keep your security active by monitoring gateway status. Your agent can check if your connection to Tencent Cloud is healthy so you aren't left wondering why tickets aren't verifying. ## How It Works The bottom line is you get real-time bot protection and risk auditing without leaving your chat interface. 1. Connect your Tencent Cloud SecretId, SecretKey, and AppId to the Connector. 2. Ask your agent to verify a specific ticket or check your app's security status. 3. Get a clear pass/fail result along with a risk score for every request. ## Frequently Asked Questions **Can I use Tencent CAPTCHA to block bots in my app?** Yes, this Connector lets your AI agent verify user tickets and check risk scores to keep bots out of your registration or login flows. **How does the EvilLevel score help me with security?** It gives you a specific number representing the risk of a user action. Your agent can use this to tell you if a request is likely a human or a bot. **Can my AI agent check my Tencent Cloud configuration?** Yes, it can pull your AppId details and check your regional settings to make sure your security setup is correct. **Does this Connector support slide-based CAPTCHAs?** Yes, the verification tool is specifically set up to handle slide-type CAPTCHA tickets from Tencent's platform. **How do I know if my CAPTCHA API is actually working?** You can ask your agent to check the gateway status. It will verify that your connection to the Tencent Cloud service is active and responding. **How do I find my Tencent Cloud SecretId and SecretKey?** Log in to the [Tencent Cloud Console](https://console.cloud.tencent.com/), navigate to [Access Management] -> [API Key Management] to find or generate your unique SecretId and SecretKey. **Where do I get the CaptchaAppId and AppSecretKey?** Navigate to the [Tencent CAPTCHA (防水墙) Console](https://console.cloud.tencent.com/captcha), select your CAPTCHA application, and you will find these identifiers in the application overview or basic information section. **What is the 'EvilLevel' metric?** EvilLevel is a risk score (0-100) provided by Tencent Cloud to identify suspicious activity. A higher value indicates a higher probability that the user is a malicious bot or part of a fraudulent attack.