Cloudflare's September 25 post explains Turnstile Spin, an agent-assisted installation workflow that the company says had been available in its dashboard since July. It covers creating a widget, adding it to the site and connecting server-side validation.
A Turnstile installation has two parts. The visitor-facing widget issues a token after its checks, and the application’s server sends that token to Cloudflare’s Siteverify API. A widget appearing on the page does not by itself show that the server checks incoming requests.
Spin can also repair incomplete installations and help migrate from other CAPTCHA providers. It can be started from Cloudflare’s dashboard, through Wrangler, or by supplying the public skill URL to a compatible coding agent.
Turnstile itself is free to use and does not require the website to route its traffic through Cloudflare. The application still decides how to act on the validation result, including whether to allow a login or form submission.