Hey there! @apoorv-2204 Great question, unfortunately, Retool doesn't have native reCAPTCHA support, and both methods you tried run into platform limitations, custom components are sandboxed under retool-edge.com (not your domain), and preloaded scripts struggle with reCAPTCHA v3's behavioral scoring in Retool's environment.
The best working approach is to host a small HTML page on your own domain that handles the reCAPTCHA execution, embed it in your Retool app via an IFrame component, and use postMessage to pass the token back to Retool. Token verification should then happen server-side via Google's verify API.
This keeps reCAPTCHA running on a domain you control, which resolves both the domain rejection and the low confidence score issues. Let me know if you need more help with this setup!