Actually, I specced this out for Delicious around 2007. I wanted to have the API be able to reply with "break this CAPTCHA/challenge/etc to continue" before actually applying the write/read/etc. (Delicious was very aggressively spammed.)