Verify Players
Create a player verification challenge and process the result in your plugin.
A plugin can require a hosted form before it performs an action. EnderDash creates a one-time link to this form.
The plugin receives an accept or reject result. The result also contains risk and location information.
Use verification to collect a response from a player through an agent-created link. The flow also collects setup information and hCaptcha results.
For OpenID Connect sign-in with an in-game command, use Game OAuth. Hosted verification does not issue OAuth tokens.
How verification works
- Create a verification challenge through the EnderDash agent.
- Set the title, optional description, fields, and lifetime.
- Give the returned
https://verify.enderdash.comlink to the player. - The player completes and submits the form.
- Process the decision and signals that EnderDash sends to the plugin.
Agents only
Only an authenticated EnderDash agent can create a challenge. A player cannot create one. Each link belongs to one challenge.
What players see
The hosted page shows the title, description, fields, and expiration timer. The player must complete hCaptcha before they submit the form.
The endpoint rejects invalid requests. A challenge accepts only one successful submission.
Field types
A challenge can contain 1 to 8 fields. Each field has an id, a label, an optional description, and a required flag.
| Type | Extra options | Notes |
|---|---|---|
text | placeholder, minLength, maxLength | Single-line text, up to 500 characters. |
number | placeholder, min, max | Numeric input. |
select | placeholder, options | A dropdown of 1 to 20 options. |
checkbox | none | A single box, useful for agreements. |
Challenge lifetime
When you create a challenge, set its lifetime. The default is 5 minutes. The maximum is 15 minutes.
After expiration, create a new challenge for the player.
Risk and location signals
EnderDash adds these signals to the decision:
- hCaptcha result
- whether the connection looks like a proxy, hosting provider, or mobile network
- approximate location from the IP address, such as the country, region, city, and network operator
Your plugin decides how to use these signals.
Review results
The Verification panel shows recent results. Each result includes the time, status, plugin ID, decision code, latency, and risk flags.
The history also records challenge IDs, correlation IDs, decision messages, hCaptcha status, and risk details.
Related
- Plugin Integrations for what plugins can drive through the agent.
- Java API for the agent-side surface.
Was this page helpful?
Send a quick note if anything is missing or unclear.
Last updated on