Set the tenant's CAPTCHA keys (admin)

PUT 
/api/widget/captcha

Sets the tenant's own Turnstile keys. The site key is public; the secret is write-only (stored encrypted, never returned). Only the fields present are changed; an empty value clears that key, reverting to the platform-wide fallback. Admin only.

Request

Responses

200

The updated CAPTCHA status.

401

Not authenticated. code: account_disabled means the member's seat was deactivated in this workspace: the session is over even though the token was not revoked (clients sign out and clean up).

403

Authenticated but not allowed.

422

The request failed validation.