Site key for this demo: sitekey_402t_demo. After verifying, the form gets a hidden captchaToken. Your backend should call POST /api/siteverify with the secret key (never in the browser).
sitekey_402t_demo
captchaToken
POST /api/siteverify
Submit (demo only)