A simple captcha would be to just make the user move their mouse or finger to 2 or 3 dots in a square.

Shouldn’t take more than a second to perform the motions as a website visitor..

If the movement is suspiciously smooth, or isn’t accelerated and decelerated as a human hand would, it’s a bot - or an agentic browser.