API Documentation
Captcha Solving Service API Guide
v2.1
Must Read
Submit Task
The integration follows three steps: Submit Task → Get Result (Poll or Webhook) → Use Response Data. Expand each step for details.
Submit a captcha solving task. Returns a task_id for polling.
Request Parameters
Request Example (hCaptcha)
POST /task/submit HTTP/1.1
Host: www.passxapi.com
Content-Type: application/json
x-api-key: YOUR_API_KEY
{
"task_type": "hcaptcha",
"proxy": "http://user:pass@ip:port",
"target_url": "https://example.com/login",
"site_key": "your-site-key"
}Response
{
"ok": true,
"task_id": "abc123-def456"}Method 1: Polling
Query the task result by task_id. Poll every 1-2 seconds until the task is complete. Suitable for most use cases.
Status Description
Example Code
GET /task/result/abc123-def456 HTTP/1.1
Host: www.passxapi.com
x-api-key: YOUR_API_KEYSuccess Response Example
{
"status": "SUCCESS",
"result": {
"token": "P0_eyJ...",
"ua": "Mozilla/5.0 ...",
"cookies": { "cf_clearance": "xxx"}
}
}Use Response Data
Once the task succeeds, the result contains token, cookies, ua and other fields. Use them directly in your request to the target website.
# result contains token / cookies / ua, use them directly
import requests
result = {
"token": "P0_eyJ...",
"ua": "Mozilla/5.0 ...",
"cookies": {"cf_clearance": "xxx"}
}
# Use the solved token in your target request
resp = requests.post(
"https://example.com/login",
headers={
"User-Agent": result["ua"],
"Content-Type": "application/x-www-form-urlencoded"
},
cookies=result.get("cookies", {}),
data={
"username": "your_username",
"password": "your_password",
"captcha_token": result["token"]
}
)
print(resp.status_code, resp.text[:200])Method 2: Callback
Provide a callback URL when submitting a task. The system will automatically push the result to your endpoint when done.
How to Use
Add the callback_url parameter to your /task/submit request:
{
"task_type": "hcaptcha",
"proxy": "http://user:pass@ip:port",
"target_url": "https://example.com/login",
"site_key": "your-site-key",
"callback_url": "https://yoursite.com/webhook/captcha"}Callback Payload
When the task completes, the system sends a POST request to your callback_url with Content-Type: application/json:
Success callback payload
{
"taskId": "abc123-def456-...",
"status": "ready",
"errorId": 0,
"solution": {
"token": "P0_eyJ...",
"cookies": {
"cf_clearance": "xxx"},
"userAgent": "Mozilla/5.0 ..."}
}Failure callback payload
{
"taskId": "abc123-def456-...",
"status": "failed",
"errorId": 1,
"errorCode": "ERROR_CAPTCHA_UNSOLVABLE",
"errorDescription": "Task failed"}Retry Policy
A normal response (HTTP 200) from your endpoint means delivery is successful. If the endpoint returns 404 or the connection times out (10s), the system will automatically retry up to 3 times with delays of 5s → 30s → 120s.
Important Notes
- The callback URL must be a publicly accessible HTTP/HTTPS endpoint
- Your endpoint must respond within 10 seconds, otherwise it's treated as a timeout
- Callback and polling can be used simultaneously without conflict
- Once a callback is delivered successfully, it will not be sent again
- Use taskId for idempotency checks to avoid duplicate processing
Error Codes
Funcaptcha Invisiblefuncaptcha$1/1k
Request Parameters
Request Example
{
"task_type": "funcaptcha",
"proxy": "http://username:password@ip:port",
"target_url": "https://login.coinbase.com/signup",
"custom_api_host": "ark.coinbase.com",
"public_key": "32FBE3BC-228C-4967-9D76-8B27B3EBCF08"}Notice
If your site contains blob, you need to use a proxy with the same IP as the one used for generating the blob request.
Only supports invisible mode, does not support image verification.
Akamai sbsd/bm_scsbsd$1/1k
Request Parameters
Request Example
{
"task_type": "sbsd",
"proxy": "http://username:password@ip:port",
"target_url": "https://aswbe-i.ana.co.jp/rei12e/international_asw/pages/award/search/roundtrip/award_search_roundtrip_result_owd.xhtml",
"sbsd_js_url": "https://aswbe-i.ana.co.jp/NAOAvP/g/p/QDWF9UmqEw/rcYOS6b93wYa/M25MIQ0C/K18aV/SB9Vy0C?v=70653420-b257-2e52-8195-fcb561c117d5&t=633180829",
"init_cookies": {
"bm_s": "xxx",
"bm_sc": "xxx"}
}Forter Tokenforter$1/1k
Request Parameters
Request Example
{
"task_type": "forter",
"proxy": "http://username:password@ip:port",
"target_url": "https://arcteryx.com/ca/en/checkout/",
"forter_js_url": "https://scripts.arcteryx.com/js/forter.js",
"site_id": "cbf12a88ccce"}DataDome Device Checkdatadome-device-check$1/1k
Request Parameters
Request Example
{
"task_type": "datadome-device-check",
"proxy": "http://username:password@ip:port",
"target_url": "https://www.cma-cgm.com/",
"target_method": "GET"}Castle Tokencastle$1/1k
Request Parameters
Request Example
{
"task_type": "castle",
"proxy": "http://username:password@ip:port",
"target_url": "https://signin.rockstargames.com/create/date-of-birth",
"config_json": {
"pk": "pk_1Tt6Yzr1WFzxrJCh7WzMZzY1rHpaPudN",
"wUrl": "https://s.rsg.sc/auth/js/20250915bgbb/build/cw.js",
"swUrl": "https://s.rsg.sc/auth/js/20250915bgbb/build/csw.js",
"avoidCookies": true
}
}Kasada cdkasada_cd$1/1k
Request Parameters
Request Example
{
"task_type": "kasada_cd",
"ct": "0b3jqi5b3LjWE63tZoPso14738QbuA0PA2x9D83CqbZerMQyjGMAVQoNxO7FPTzFEGui72xxAd6ewGAmBKx1tfs5BSXVnNDU83WzSfqnJCX8vZCqmxE7s24XJgWs77sPSl6fTtzbj1n1yf6GIvntSJYA0lkQxmm9F6UAzciBvvZ",
"st": "1756879688265",
"fc": "eyJmZWF0dXJlRmxhZ3MiOnsicmVtb3RlLWNvbmZpZ3VyYXRpb25zIjp0cnVlLCJyZW1vdGUtbG9nZ2luZyI6ZmFsc2V9LCJkeW5hbWljQ29uZmlnIjp7ImZyb250ZW5kIjp7ImNyeXB0b0NoYWxsZW5nZSI6eyJjdXJyZW50UGFyYW1ldGVycyI6eyJkaWZmaWN1bHR5IjoxMCwic3ViY2hhbGxlbmdlQ291bnQiOjIsInNlZWRTdWZmaXgiOiIifX0sImxvZ0xldmVsIjo1MH19fQ==",
"site": "arcteryx"}Notice
Currently supports over a dozen sites. Contact support if adding new sites is needed.
Once you have accumulated 300 points from Kasada CT tasks, please contact the administrator to activate access to the free CD interface.
This interface becomes automatically free when your balance exceeds 100,000 points ($100).
reCaptcha V3recaptchav3$1/1k
Request Parameters
Request Example
{
"task_type": "recaptchav3",
"proxy": "http://username:password@ip:port",
"target_url": "https://2captcha.com/demo/recaptcha-v3",
"site_key": "6Lcyqq8oAAAAAJE7eVJ3aZp_hnJcI6LgGdYD8lge",
"action": "demo_action",
"title": "Google reCAPTCHA V3 demo: Sample Form with Google reCAPTCHA V3",
"enterprise": false
}Notice
Currently does not support reCAPTCHA with s value.
Plugin may show incorrect site_key and hide action parameter, please search in HTML.
ThreatMetrixthreatmetrix$1/1k
Request Parameters
Request Example
{
"task_type": "threatmetrix",
"proxy": "http://username:password@ip:port",
"target_url": "https://www.kleinanzeigen.de/m-einloggen.html",
"org_id": "181rzcrc",
"page_id": "94",
"session_id": "3029471b-4b25-41cd-8d78-46598448325e",
"custom_domain": "dfme.kleinanzeigen.de",
"title": "Login - Anmelden bei Kleinanzeigen"}AwsWafToken Invisibleaws$1/1k
Request Parameters
Request Example
{
"task_type": "aws",
"proxy": "http://username:password@ip:port",
"target_url": "https://sportsbook.caesars.com/us/ia/bet/",
"aws_js_url": "https://b470c5d1aeb4.edge.sdk.awswaf.com/b470c5d1aeb4/06faba802dee/challenge.js"}Notice
Only supports invisible mode, does not support click verification.
Vercel Challengevercel$1/1k
Request Parameters
Request Example
{
"task_type": "vercel",
"proxy": "http://username:password@host:port",
"target_url": "https://packdraw.com/"}DataDome Sliderdatadome-slider$1/1k
Request Parameters
Request Example
{
"task_type": "datadome-slider",
"proxy": "http://username:password@ip:port",
"target_url": "https://mygift.giftcardmall.com/api/card/getCardBalanceSummary",
"target_method": "POST",
"init_cookies": {
"datadome": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"}
}CaptchaFoxcaptchafox$1/1k
Request Parameters
Request Example
{
"task_type": "captchafox",
"proxy": "http://username:password@ip:port",
"target_url": "https://web.de/",
"site_key": "sk_7R1vL5RIKvHgmNWpqbC9ppWKOfODF"}Incapsula _utmvcutmvc$1/1k
Request Parameters
Request Example
{
"task_type": "utmvc",
"proxy": "http://username:password@ip:port",
"utmvc_js_url": "https://www.thaiairways.com/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=2&cb=1558987183",
"incap_cookie": {
"nlbi_1584510": "Mv20CSpoRh/WQODNRk7kTwAAAACRz85+N7F/WQIGhC...",
"visid_incap_1584510": "o/UvTkB5QueTUtQBoLdWYVGWS2gAAAAAQU...",
"incap_ses_958_1584510": "WZSQFuVAs3NDeHYpMIBLDVuWS2gAAAAAX..."}
}Akamai sec_cptsec_cpt$1/1k
Request Parameters
Request Example
{
"task_type": "sec_cpt",
"sec_cpt": "ADE36B02B21573BDBB5BFBF91F336959~1~....",
"sec_json": {
"count": 10,
"nonce": "30cc8a4637ca...",
"token": "AAQAAAAL_____...",
"timestamp": 1758097163,
"difficulty": 5000
}
}Notice
Returns an answers array for /verify API. The web page verifies once per second, but you can verify after difficulty/1000 seconds in actual use
Kasada ctkasada$1/1k
Request Parameters
Request Example
{
"task_type": "kasada",
"proxy": "http://username:password@ip:port",
"target_url": "https://arcteryx.com/",
"protected_api_domain": "arcteryx.com",
"kasada_js_domain": "arcteryx.com"}Notice
For proxyless feature (directly return /tl request payload), contact admin.
PerimeterX Invisibleperimeterx_invisible$3/1k
Request Parameters
Request Example
{
"task_type": "perimeterx_invisible",
"proxy": "http://username:password@ip:port",
"target_url": "https://www.walmart.com/",
"perimeterx_js_url": "https://www.walmart.com/px/PXu6b0qd2S/init.js",
"pxAppId": "PXu6b0qd2S"}Notice
Currently does not support app or Microsoft email registration.
HCaptcha2hcaptcha_pro$7/1k
Request Parameters
Request Example
{
"task_type": "hcaptcha_pro",
"proxy": "http://username:password@ip:port",
"target_url": "https://www.wolt.com/",
"site_key": "85fed6af-162f-4a66-a7ab-8822a7d81f72"}Notice
Currently does not support dynamic js hcaptcha and rqData.
Cloudflare Turnstileturnstile$1/1k
Request Parameters
Request Example
{
"task_type": "turnstile",
"proxy": "http://username:password@ip:port",
"target_url": "https://peet.ws/turnstile-test/managed.html",
"site_key": "0x4AAAAAAABS7TtLxsNa7Z2e"}TLS Forwardtls_forward$1/1k
Request Parameters
Request Example
{
"task_type": "tls_forward",
"proxy": "http://username:password@host:port",
"url": "https://httpbin.org/post",
"method": "POST",
"headers": {
"x-sss": "111",
"accept": "application/json",
"referer": "https://httpbin.org/aa"},
"body_base64": "dGVzdEJvZHk=",
"cookies_dict": {
"test": "11"}
}Notice
Fast use:
import riskbypass
client = riskbypass.RiskByPassClient(token="your token")
response = client.tls_get(xxx)或client.tls_post(xxx)
This interface will not deduct points if your balance is 100,000($100) or more.
Shape F5shape$1/1k
Request Parameters
Request Example
{
"task_type": "shape",
"proxy": "http://username:password@ip:port",
"target_url": "https://www.pokemoncenter-online.com/login/",
"target_api": "https://www.pokemoncenter-online.com/on/demandware.store/Sites-POL-Site/ja_JP/Account-SubmitConfirmationEmail",
"shape_js_url": "https://www.pokemoncenter-online.com/larkbileomet.js?single",
"method": "POST",
"title": "ログイン|【公式】ポケモンセンターオンライン"}Notice
Each site requires separate configuration. Contact admin for assistance.
PerimeterX Holdperimeterx_holdMaintenance$5/1k
Request Parameters
Request Example
{
"task_type": "perimeterx_hold",
"proxy": "http://username:password@ip:port",
"target_url": "https://www.walmart.com/",
"perimeterx_js_url": "https://client.px-cloud.net/PXu6b0qd2S/main.min.js",
"captcha_js_url": "https://www.walmart.com/px/PXu6b0qd2S/captcha/captcha.js",
"init_cookies": {
"pxhd": "3a72e00e1ce54a44b3d59b42a8eead42ee5c246a4389de2aba9544281656c0a9:84439b81-676a-11f0-b082-def9cefce6ae"},
"pxvid": "84439b81-676a-11f0-b082-def9cefce6ae",
"pxuuid": "1d90e990-982a-11f0-9531-bb778ceab4d7",
"pxAppId": "PXu6b0qd2S"}Notice
Currently does not support app or Microsoft email registration.
Akamai _abckakamai$1/1k
Request Parameters
Request Example
{
"task_type": "akamai",
"proxy": "http://username:password@ip:port",
"target_url": "https://shop.lululemon.com/",
"akamai_js_url": "https://shop.lululemon.com/WGlx/lc_w/w/vez/w0HNXw/EmubktLXh3Npr6Nab5/TXUGYQ/Lh9aC2xK/H34",
"page_fp": "424541475255414d424b41585f5e50495c5148",
"init_cookies": {}
}Notice
For proxyless feature (directly return "sensor_data"), contact admin.
akamai_js_url changes daily, ensure your script updates it.
High-risk websites must be used in conjunction with our site’s tls_forward task in order to pass Akamai’s risk control checks.
DataDome Invisibledatadome-invisible$1/1k
Request Parameters
Request Example
{
"task_type": "datadome-invisible",
"proxy": "http://username:password@ip:port",
"target_url": "https://www.tripadvisor.com/",
"datadome_js_url": "https://js.datadome.co/tags.js",
"ddjskey": "2F05D671381DB06BEE4CC52C7A6FD3",
"ddoptions": "{\"ajaxListenerPath\": true, \"allowHtmlContentTypeOnCaptcha\": true}"}Notice
Only for cookies from tags.js, if it from device verification or slider captcha,please use datadome-slider.
If you confirm it is from tags.js and the cookie obtained in this task is not usable, it means separate configuration is needed for this site, please contact admin.
Incapsula Reese84reese84$1/1k
Request Parameters
Request Example
{
"task_type": "reese84",
"proxy": "http://username:password@ip:port",
"reese84_js_url": "https://book.virginaustralia.com/side-you-ares-may-Exit-sition-Alaruern-Naugmen-G"}Notice
If _Incapsula_Resource JS is returned, try utmvc task.
Cloudflare WAFcloudflare_waf$1/1k
Request Parameters
Request Example
{
"task_type": "cloudflare_waf",
"proxy": "http://username:password@ip:port",
"target_url": "https://pastebin.com/login",
"target_method": "GET"}Notice
Ensure proxy consistency and use request headers matching the returned UA.
For customization or concurrency, please contact admin.
HCaptcha1hcaptcha$1/1k
Request Parameters
Request Example
{
"task_type": "hcaptcha",
"proxy": "http://username:password@ip:port",
"target_url": "https://www.yelp.com/",
"site_key": "6660d4df-1884-4ac6-a933-e5f3bd460946"}Notice
Currently does not support rqData.
If the token obtained from this task is invalid, try changing proxies or using hcaptcha_pro.