A simple captcha would be to just make the user move their mouse or finger to 2 or 3 dots in a square.
Shouldn’t take more than a second to perform the motions as a website visitor..
If the movement is suspiciously smooth, or isn’t accelerated and decelerated as a human hand would, it’s a bot - or an agentic browser.