Humans: prove you are not one of them.
A WordPress plugin that flips the captcha logic. Instead of blocking bots, it blocks humans.
AI agents, crawlers, and automation tools pass through silently. Browsers get a full-screen challenge overlay powered by AgentGate.
Backend service: AgentGate-captcha · Live demo: captcha.kisara.art | 中文文档
The default service URL points to a public demo instance. It may be discontinued without notice. For production use, deploy your own instance.
Request arrives
├─ UA matches bot/agent/crawler → pass through silently
└─ UA looks like a browser (Chrome, Firefox, Safari…)
└─ Overlay injected via wp_footer
├─ AI Agent: POST /mcp → solve_captcha → token instantly
└─ Human: answer logic puzzle → behavior analysis → cookie set
- Download
agentgate-wordpress.zipfrom Releases - WordPress Admin → Plugins → Add New → Upload Plugin
- Upload the zip → Install → Activate
- Go to Settings → AgentGate to configure
| Field | Description |
|---|---|
| AgentGate Service URL | Base URL of your AgentGate instance. Defaults to the public demo |
| Global Enable | Intercept all pages (posts, pages, homepage, archives) |
| Protected Post / Page IDs | Comma-separated IDs — only active when Global is off |
| Cookie Expiry | Seconds before re-verification required (default: 3600) |
| Custom UA Whitelist | Extra bot keywords to bypass, one per line |
- WordPress >= 5.0
- PHP >= 7.2
- An AgentGate service instance (self-hosted or use the public demo)
| Repo | Description |
|---|---|
| AgentGate-captcha | Core verification service (Flask + MCP) |
| AgentGate-zblog | ZBlog plugin |
| AgentGate-wordpress | WordPress plugin |
MIT
AgentGate for WordPress 是一个反向验证码插件——不拦截爬虫,拦截人类浏览器。
AI Agent、爬虫、自动化工具直接放行。Chrome、Firefox 等浏览器触发全屏遮罩,要求完成 AgentGate 身份验证。Agent 通过 MCP 工具一步拿 token,人类需要回答题目并经过行为分析。
- 从 Releases 下载
agentgate-wordpress.zip - WordPress 后台 → 插件 → 安装插件 → 上传插件
- 上传 zip → 安装 → 启用
- 进入 设置 → AgentGate 配置
| 字段 | 说明 |
|---|---|
| AgentGate Service URL | AgentGate 服务地址,默认指向公开 Demo |
| 全局启用 | 对所有页面启用拦截 |
| 受保护文章/页面 ID | 逗号分隔,全局关闭时仅对这些 ID 触发 |
| Cookie 有效期 | 验证通过后多少秒内无需重复验证(默认 3600) |
| 自定义 UA 白名单 | 每行一个关键词,额外放行特定 Agent |
UA 检测本质是猜测,UA 字符串可以伪造。如需可靠的身份判定,请使用配套的 PHP SDK。
Demo 实例目前公开访问,但不保证永久运行。生产环境建议自行部署 AgentGate-captcha。
| 仓库 | 说明 |
|---|---|
| AgentGate-captcha | 核心验证服务(Flask + MCP) |
| AgentGate-zblog | ZBlog 插件 |
| AgentGate-wordpress | WordPress 插件 |