npm install botshield-sdk

import BotShield from 'botshield-sdk';

const client = new BotShield({
  apiKey: process.env['BOTSHIELD_API_KEY'], // bs_prod_... or bs_test_...
});

// Create a grant window (session token)
const session = await client.sdk.createSession({
  partner_user_id: 'your_internal_user_id', // optional, your own opaque ref
});

// Create a verification link
const verification = await client.sdk.createVerificationLink({
  scope: 'checkout.complete',
  webhook_url: 'https://your-platform.com/botshield-webhook',
  metadata: { order_id: 'ORD-12345' }, // your own correlation data
});

console.log(verification.data.deep_link);
console.log(verification.data.web_url);
console.log(verification.data.qr_code_url);
console.log(verification.data.request_id);

const result = await client.sdk.verifyToken({
  token: req.body.botshield_token,
});

if (result.data.valid) {
  const { request_id, verified, organization_id, timestamp, nonce } = result.data.claims;
  // No email, no auth mode, no user ID — claims are anonymous by design.
  // Match request_id back to the action you started.
}

try {
  const response = await client.sdk.createVerificationLink({ ... });
} catch (err) {
  if (err instanceof BotShield.APIError) {
    console.log(err.status);  // 400, 401, etc.
    console.log(err.name);    // BadRequestError, AuthenticationError, etc.
    console.log(err.message);
  }
}

const client = new BotShield({
  maxRetries: 0, // disable retries
});

// Or per-request:
await client.sdk.createVerificationLink({
  maxRetries: 5,
});