Title: Shed Turnstile
Author: teamstaccato
Published: <strong>May 13, 2026</strong>
Last modified: May 13, 2026

---

Search plugins

![](https://ps.w.org/shed-turnstile/assets/banner-772x250.png?rev=3530417)

![](https://ps.w.org/shed-turnstile/assets/icon-256x256.png?rev=3530417)

# Shed Turnstile

 By [teamstaccato](https://profiles.wordpress.org/teamstaccato/)

[Download](https://downloads.wordpress.org/plugin/shed-turnstile.1.0.6.zip)

 * [Details](https://wordpress.org/plugins/shed-turnstile/#description)
 * [Reviews](https://wordpress.org/plugins/shed-turnstile/#reviews)
 *  [Installation](https://wordpress.org/plugins/shed-turnstile/#installation)
 * [Development](https://wordpress.org/plugins/shed-turnstile/#developers)

 [Support](https://wordpress.org/support/plugin/shed-turnstile/)

## Description

Shed Turnstile provides centralized management of Cloudflare Turnstile Site Key 
and Secret Key, offering a shared API for compatible plugins such as Shed Form.

**Features:**

 * Centralized Site Key / Secret Key management
 * API functions callable from other plugins
 * Turnstile widget rendering helper
 * Server-side token verification

#### API Functions

 * `shedturn_is_configured()` — Check if keys are configured
 * `shedturn_render_widget( $args )` — Return widget HTML
 * `shedturn_verify_token( $token, $ip )` — Verify a Turnstile token
 * `shedturn_enqueue_script()` — Enqueue Cloudflare JS

#### 日本語の説明

Shed Turnstile は Cloudflare Turnstile の Site Key / Secret Key を一元管理し、Shed
Form などの対応プラグインに共通の API を提供します。

**主な機能:**

 * Site Key / Secret Key の一元管理
 * 他プラグインから呼び出せる API 関数
 * Turnstile ウィジェットの描画ヘルパー
 * トークンのサーバーサイド検証

### Third-Party Services

This plugin connects to Cloudflare’s servers for Turnstile verification.

 * Service: [Cloudflare Turnstile](https://www.cloudflare.com/products/turnstile/)
 * Privacy Policy: [https://www.cloudflare.com/privacypolicy/](https://www.cloudflare.com/privacypolicy/)
 * Terms of Service: [https://www.cloudflare.com/website-terms/](https://www.cloudflare.com/website-terms/)
 * Data sent: Turnstile token, site key, user IP address
 * When: Each time a form with Turnstile enabled is submitted

## Screenshots

 * [[
 * Settings page — enter your Cloudflare Turnstile Site Key and Secret Key.

## Installation

 1. Upload the plugin folder to `/wp-content/plugins/`, or install directly through
    the WordPress plugin screen.
 2. Activate the plugin through the ‘Plugins’ menu.
 3. Go to **Settings  Shed Turnstile** and enter your Cloudflare Turnstile Site Key
    and Secret Key.
 4. Compatible plugins (e.g. Shed Form) will automatically detect and use the configured
    keys.

## FAQ

### Where do I get a Turnstile Site Key and Secret Key?

Log in to your Cloudflare dashboard, navigate to Turnstile, and create a new site.
The Site Key and Secret Key will be provided.

### Does this plugin work standalone?

This plugin manages Turnstile keys and provides an API. To use Turnstile on your
forms, you need a compatible form plugin such as Shed Form.

### Is Cloudflare Turnstile free?

Yes. Cloudflare Turnstile is a free CAPTCHA alternative service.

## Reviews

There are no reviews for this plugin.

## Contributors & Developers

“Shed Turnstile” is open source software. The following people have contributed 
to this plugin.

Contributors

 *   [ teamstaccato ](https://profiles.wordpress.org/teamstaccato/)

[Translate “Shed Turnstile” into your language.](https://translate.wordpress.org/projects/wp-plugins/shed-turnstile)

### Interested in development?

[Browse the code](https://plugins.trac.wordpress.org/browser/shed-turnstile/), check
out the [SVN repository](https://plugins.svn.wordpress.org/shed-turnstile/), or 
subscribe to the [development log](https://plugins.trac.wordpress.org/log/shed-turnstile/)
by [RSS](https://plugins.trac.wordpress.org/log/shed-turnstile/?limit=100&mode=stop_on_copy&format=rss).

## Changelog

#### 1.0.6

 * Fixed: Apply wp_unslash() to nonce field in admin settings save handler
 * Added: languages/shed-turnstile.pot for translation support

#### 1.0.5

 * Fixed: Sanitize externally-supplied $ip parameter in shedturn_verify_token()
 * Fixed: Remove HTTP_CLIENT_IP trust in shedturn_get_client_ip() (spoofable header)
 * Fixed: Add is_array() guard on json_decode result
 * Added: Screenshots section to readme.txt

#### 1.0.4

 * Added: GPL-2.0 LICENSE file
 * Added: Domain Path header
 * Fixed: i18n — all user-facing strings wrapped with __()
 * Fixed: uninstall.php now removes legacy wsf_turnstile_* options

#### 1.0.3

 * Changed: All function, class, constant, hook, and option prefixes renamed from
   wst_/WST_ to shedturn_/SHEDTURN_/Shedturn_.

#### 1.0.2

 * Changed: Plugin slug

## Meta

 *  Version **1.0.6**
 *  Last updated **14 hours ago**
 *  Active installations **Fewer than 10**
 *  WordPress version ** 6.0 or higher **
 *  Tested up to **6.9.4**
 *  PHP version ** 8.1 or higher **
 * Tags
 * [bot protection](https://wordpress.org/plugins/tags/bot-protection/)[captcha](https://wordpress.org/plugins/tags/captcha/)
   [cloudflare](https://wordpress.org/plugins/tags/cloudflare/)[spam](https://wordpress.org/plugins/tags/spam/)
   [turnstile](https://wordpress.org/plugins/tags/turnstile/)
 *  [Advanced View](https://wordpress.org/plugins/shed-turnstile/advanced/)

## Ratings

No reviews have been submitted yet.

[Your review](https://wordpress.org/support/plugin/shed-turnstile/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/shed-turnstile/reviews/)

## Contributors

 *   [ teamstaccato ](https://profiles.wordpress.org/teamstaccato/)

## Support

Got something to say? Need help?

 [View support forum](https://wordpress.org/support/plugin/shed-turnstile/)