reCAPTCHA v3 never shows a checkbox. It scores the visitor silently in the background and hands the page a token, so there is nothing to click and nothing to read from an image. Our API produces that token for you: send the sitekey and the page URL, then submit the token back into the page.
Version 3 is a scoring system, not a challenge. The script runs on every page and watches behaviour, then asks Google for a token together with a score between 0.0 and 1.0. The site decides where to draw the line. Because there is no widget, there is also no image to solve and no checkbox to tick, which is why every v3 solve on the market is a token solve rather than a recognition solve.
The token is written into the hidden field that the page already has, usually named g-recaptcha-response, and then the form is submitted. With a few frameworks you instead hand it to the page callback, for example grecaptcha callback functions or a framework specific resolver. Either way the token is the only thing you need from us.
One accepted token costs one credit, and a submission that the upstream refuses is not charged. Polling for the result is free. A new account starts with 200 free solves, which is roughly 200 tokens, enough to validate an integration end to end before paying anything.
curl -X POST https://fuckcaptcha.top/v1/token/recaptcha3 \\
-H "Authorization: Basic $NSK_KEY" \\
-d '{"sitekey":"<sitekey>","url":"<page url>"}'
Charged per solve: one credit for each recognition request, and polling for the result is free. Signing up includes 200 free solves.
No. Version 2 shows a checkbox or an image grid and can be solved by recognition. Version 3 shows nothing and returns a score, so it can only be solved by producing a token. They use different endpoints, so picking the wrong one is the most common integration mistake.
The token is what the page needs. Scores are assigned by Google when the page validates the token and can vary with traffic and reputation, so a token that validates can still be rejected by a site that has raised its own threshold.
Around two minutes. Request it close to the moment of submission instead of caching it, and request a fresh one for each form you fill.
Only when the page calls grecaptcha.execute with an action name. Check the page source first; sending a wrong action can make the token fail validation.
No. The token is produced from the sitekey and URL, so no cookies or account access are required.