useHUMA
+ Supabase.

Sign up at humaverify.com and grab your API key from the dashboard. 14-day free trial — no credit card required.

HUMA_API_KEY=huma_live_xxxxxxxxxxxxxxxxxxxxxxxx

Add this to your Supabase Edge Function secrets or .env.local.

Add this to your layout.tsx or _app.tsx:

<script src="https://humaverify.com/huma.js"></script>

Then collect the behavioral signals on form submit:

const handleSubmit = async (e) => {
  e.preventDefault();
  // Anonymous behavioral signals — no PII
  const signals = window.Huma?.debug().features ?? {};
  await signUp({ email, password, signals });
};

Create supabase/functions/verify-human/index.ts:

import { serve } from 'https://deno.land/std@0.168.0/http/server.ts'

serve(async (req) => {
  const { signals, email, password } = await req.json()

  // Verify with useHUMA
  const humaRes = await fetch('https://humaverify.com/api/v1/verify', {
    method: 'POST',
    headers: {
      'Content-Type': 'application/json',
      'Authorization': `Bearer ${Deno.env.get('HUMA_API_KEY')}`,
    },
    body: JSON.stringify({ userId: email, sessionData: signals }),
  })

  const { human } = await humaRes.json()

  if (!human) {
    return new Response(
      JSON.stringify({ error: 'Verification failed. Please try again.' }),
      { status: 403, headers: { 'Content-Type': 'application/json' } }
    )
  }

  // Proceed with Supabase signup
  const { createClient } = await import('https://esm.sh/@supabase/supabase-js@2')
  const supabase = createClient(
    Deno.env.get('SUPABASE_URL')!,
    Deno.env.get('SUPABASE_SERVICE_ROLE_KEY')!
  )

  const { data, error } = await supabase.auth.admin.createUser({
    email, password, email_confirm: true,
  })

  if (error) return new Response(
    JSON.stringify({ error: error.message }),
    { status: 400, headers: { 'Content-Type': 'application/json' } }
  )

  return new Response(
    JSON.stringify({ user: data.user }),
    { status: 200, headers: { 'Content-Type': 'application/json' } }
  )
})

Add useHUMA to your app/signup/actions.ts:

'use server'

export async function signUp(formData: FormData) {
  const email = formData.get('email') as string
  const password = formData.get('password') as string
  const signals = JSON.parse((formData.get('huma_signals') as string) ?? '{}')

  const humaRes = await fetch('https://humaverify.com/api/v1/verify', {
    method: 'POST',
    headers: {
      'Content-Type': 'application/json',
      'Authorization': `Bearer ${process.env.HUMA_API_KEY}`,
    },
    body: JSON.stringify({ userId: email, sessionData: signals }),
  })

  const { human } = await humaRes.json()

  if (!human) {
    return { error: 'Verification failed. Please try again.' }
  }

  const supabase = createClient()
  const { error } = await supabase.auth.signUp({ email, password })

  if (error) return { error: error.message }
  return { success: true }
}