Use reCAPTCHA WAF express protection to protect any content other than web pages, like APIs and IoT devices.