Deliver the customers.
Keep the spam.

curl https://api.spamex.dev/v1/classify \
  -H "Authorization: Bearer $SPAMEX_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "email": "[email protected]",
    "message": "I noticed your site is not on page 1 of Google...",
    "ip": "203.0.113.9",
    "mode": "fast"
  }'

# 200 OK · 1.4 ms
{
  "label": "spam",
  "score": 0.97,
  "stage": "ml",
  "reasons": ["NAME_EMAIL_MISMATCH", "SPAM_PHRASE"]
}

const res = await fetch("https://api.spamex.dev/v1/classify", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.SPAMEX_KEY}`,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    name, email, subject, message,
    honeypot: fields.website,
    ip: req.ip,
    mode: "fast",
  }),
  signal: AbortSignal.timeout(5000),
});

const verdict = res.ok ? await res.json() : null; // null: deliver (fail open)

if (verdict?.label === "spam") {
  quarantine(verdict); // keep verdict.id for feedback
} else {
  deliver();
}

$verdict = spamex_classify([
  'name'    => $_POST['name'],
  'email'   => $_POST['email'],
  'message' => $_POST['message'],
  'website' => $_POST['website'] ?? '', // honeypot
  'ip'      => $_SERVER['REMOTE_ADDR'],
]);

if ($verdict && $verdict['label'] === 'spam') {
    quarantine($verdict); // keep $verdict['id'] for feedback
} else {
    deliver();
}

r = client.post("/v1/classify", json={
    "name": name,
    "email": email,
    "message": message,
    "honeypot": fields.get("website", ""),
    "ip": request.client.host,
    "mode": "fast",
})

verdict = r.json() if r.status_code == 200 else None  # None: deliver

if verdict and verdict["label"] == "spam":
    quarantine(verdict)
else:
    deliver()

add_filter('wpcf7_spam', function ($spam, $submission) {
    if ($spam) {
        return $spam;
    }
    $d = $submission->get_posted_data();
    $v = spamex_classify([
        'name'    => $d['your-name'] ?? '',
        'email'   => $d['your-email'] ?? '',
        'message' => $d['your-message'] ?? '',
        'website' => $d['website'] ?? '',
    ]);
    return $v && $v['label'] === 'spam';
}, 10, 2);