Специализированный решательAPI для решения Kasada
Подключите решение Kasada к автоматизации через единый стабильный REST-эндпоинт. Отправьте данные цели и получите готовое решение без поддержки собственного bypass-кода.
Kasada, without custom bypass code.
Предсказуемый процесс из трёх шагов, который не меняется даже после обновлений защиты Kasada.
Send the PJS script URL from the target's x-kpsdk-v header or <script> tag. Once you already hold a valid x-kpsdk-ct, switch to cd_only to refresh just the proof-of-work x-kpsdk-cd header at 1/10th the price of a full solve.
Отправьте цель
Передайте URL страницы и поля конкретной проверки в одном API-запросе.
Мы решаем проверку
CaptchaSolv направляет задачу специализированному решателю и отслеживает её до завершения.
Используйте решение
Получите токен, заголовки, cookies или sensor payload для следующего запроса.
Единый эндпоинт и формат ответа для всех поддерживаемых решателей.
{
"api_key": "YOUR_API_KEY",
"type": "Kasada",
"site_url": "https://example.com/api/data",
"data": {
"pjs": "https://example.com/149e9513.../2d206a39.../p.js"}
}{
"errorId": 0,
"status": "ready",
"solvtime": 3.42,
"data": {
"useragent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)...",
"language": "en-US,en;q=0.9",
"solution": {
"x-kpsdk-cd": "eyAgImlzQm90IjogZmFsc2U...",
"x-kpsdk-ct": "0a5b8c3d...",
"x-kpsdk-st": "1697234567890",
"x-kpsdk-r": "eyJsYW5ndWFnZSI6ImVu...",
"x-kpsdk-cr": "eyJob3N0bmFtZSI6..."}
}
}Поля, которые можно передать внутри объекта data при отправке запроса на решение этого типа captcha.
pjsОбязательноеThe Kasada PJS (Primary JavaScript) URL or content, from the x-kpsdk-v header or a <script> tag. Not required when cd_only is used.
endpointОпциональноеThe specific API endpoint URL to solve against. Defaults to site_url if omitted.
kasada_versionОпциональноеOverride for the x-kpsdk-v version string, e.g. j-1.2.139. Auto-detected if omitted.
cd_onlyОпциональноеWhen true, only solves the x-kpsdk-cd proof-of-work header. Requires x-kpsdk-ct. Billed at 1/10th the normal Kasada price.
x-kpsdk-ctОпциональноеRequired when cd_only is true - the current x-kpsdk-ct value for your session; cd is cryptographically tied to it.
Поля, возвращаемые в data.solution после решения таска.
solution.x-kpsdk-cdОбязательноеChallenge data header - pass this in subsequent requests.
solution.x-kpsdk-ctОбязательноеClient timestamp header.
solution.x-kpsdk-stОпциональноеSession token header.
solution.x-kpsdk-rОпциональноеResponse header.
solution.x-kpsdk-crОпциональноеChallenge response header.
data.useragentОбязательноеThe user-agent used during solving - must match on your requests, Kasada binds headers to this fingerprint.
Kasada (also referred to as KPSDK) is an anti-bot system that protects websites and APIs from automated traffic. Instead of showing a visible puzzle, it ships a heavily obfuscated JavaScript sensor to the browser and decides in the background whether a request comes from a real user or a bot.
Under the hood the script decrypts a bytecode program and runs it inside its own JavaScript virtual machine. That VM fingerprints the browser and environment - user-agent, screen, WebGL, timezone, plugins and anti-tamper probes - then encrypts the telemetry and posts it to Kasada's collection endpoint (/tl). The server scores that data and hands back the tokens a legitimate client is expected to reuse.
Because those tokens are short-lived and bound to a specific session and browser fingerprint, your requests have to carry the correct Kasada headers and keep the same user-agent throughout. Our solver reproduces this flow and returns the headers ready to drop straight into your requests.
- 01
Obfuscated sensor
Kasada serves a heavily obfuscated ips.js script instead of a visible challenge.
- 02
Virtual machine
It decrypts a bytecode program and runs it in its own JS VM to fingerprint the browser.
- 03
Encrypted telemetry
The collected signals are encrypted and posted to Kasada's /tl endpoint.
- 04
Session tokens
The server scores the data and returns the short-lived x-kpsdk headers to reuse.
x-kpsdk-ctKeyTelemetry session token - ties a client to its scored /tl submission and is sent on protected requests.
x-kpsdk-cdKeyProof-of-work / challenge-data header derived for the session. This is the main header your requests must present.
x-kpsdk-vKeyKasada SDK version string (e.g. j-1.2.x) - tells the server which script build produced the tokens.
x-kpsdk-stSession timestamp issued alongside the tokens.
x-kpsdk-rResponse token returned by the challenge flow.
x-kpsdk-crChallenge-response value used on some endpoints.
Частые вопросы о правильной интеграции этого решателя.
Yes - our Kasada solver works on any site protected by Kasada, not just a fixed list of targets. Send the PJS script from the page you're hitting and we solve that specific site's challenge, so new domains work the same way as the ones we already support.
Не получается сделать bypass Kasada?
Присоединяйтесь к нашему Discord - команда поможет настроить решение Kasada в вашем проекте, бесплатно подскажет, как обрабатывать это программно, даже когда защита меняется.
Переключитесь на другой поддерживаемый тип captcha.