Akamai 解决方案的工作原理
Akamai Bot Manager's sensor data challenge. We auto-detect the Akamai script, challenge, seed, and pixel from the target page and generate valid sensor data plus the _abck and bm_sz cookies your requests need.
即使 Akamai 更新其防护机制，这个可预测的三步流程也始终保持不变。
In the simplest case you only send site_url - the solver auto-detects everything else from the page. Pass the script URL or existing cookies yourself for faster solves or cookie refreshes.
提交目标
在一次 API 请求中发送页面 URL 和挑战特定字段。
我们处理挑战
CaptchaSolv 将任务路由到专门的解决方案，并跟踪直至完成。
使用解决方案
获取下一次请求所需的令牌、请求头、cookies 或 sensor payload。
Akamai API 请求与响应
所有支持的解决方案使用相同的接口和响应格式。
{
"api_key": "YOUR_API_KEY",
"type": "Akamai",
"site_url": "https://example.com/page"}{
"errorId": 0,
"status": "ready",
"solvtime": 2.15,
"data": {
"useragent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)...",
"language": "en-US,en;q=0.9",
"solution": {
"token": "_abck=XXXXX~0~YYYYYY~-1; bm_sz=XXXXX"}
}
}任务数据字段
此验证码类型的求解请求中，可在 data 对象内发送的字段。
akamai_script可选Akamai Bot Manager script URL. Auto-detected if omitted; passing it speeds up solving.
challenge_script可选Challenge script URL. Auto-detected if omitted.
_abck可选Existing _abck cookie value, for a cookie refresh instead of a fresh solve.
bm_sz可选Existing bm_sz cookie value, for a cookie refresh.
pixel可选Pixel URL. Auto-detected if omitted.
seed可选Seed variable from the page. Auto-detected if omitted.
解决方案字段
任务解决后在 data.solution 中返回的字段。
solution.token必填Cookie string containing _abck and the other Akamai cookies.
data.useragent必填Must be reused in all subsequent requests - Akamai tracks this fingerprint.
What is Akamai Bot Manager?
Akamai Bot Manager is the bot-detection layer of Akamai's CDN and security platform, used by many airlines, retailers, ticketing sites and banks. It injects a dynamic, heavily obfuscated sensor script into protected pages that collects browser fingerprint and behavioural data - device properties, timing, mouse and keyboard events - and posts it back as sensor_data.
Akamai validates that payload and updates the _abck cookie. A valid _abck, together with bm_sz and the related cookies, is what lets requests reach protected endpoints such as login, search or checkout; a session without one gets blocked or challenged. The cookies are tied to the user-agent and fingerprint that produced them, so they can't simply be shared between clients.
Generating sensor data by hand means reverse-engineering a script that changes often. Our Akamai solver does it for you: send the page URL and it detects the script, builds valid sensor data and returns the cookies ready to attach to your requests.
- 01
Sensor script
A dynamic, obfuscated script is injected into every protected page.
- 02
sensor_data
It collects fingerprint and behaviour signals and posts them to Akamai.
- 03
Cookie validation
Akamai scores the payload and updates _abck and bm_sz accordingly.
- 04
Protected requests
Requests carrying a valid _abck and the matching user-agent pass through.
Akamai cookies & fields
_abckKeyMain Bot Manager cookie - requests only get through once a valid sensor has been accepted for it.
bm_szKeySession cookie issued with the sensor script, required alongside _abck.
sensor_dataKeyEncrypted fingerprint payload the script posts to Akamai's sensor endpoint.
ak_bmscBot Manager cookie set on the first response to track the session.
bm_svCookie some sites use to keep validating the session on later requests.
user-agentMust stay identical to the one returned by the solver - the cookies are bound to it.
How to bypass Akamai Bot Manager with the API
Akamai checks every session for a valid _abck cookie, and that cookie only becomes valid after an accepted sensor_data payload. Instead of reverse-engineering the sensor script, let the solver generate it.
- 01
Send the page URL
POST site_url to /solve with type Akamai. The solver finds the Bot Manager script, seed and pixel on the page by itself.
- 02
Speed it up (optional)
Pass akamai_script to skip auto-detection, or existing _abck / bm_sz values when you only need a cookie refresh.
- 03
Use the cookies
Set the returned cookie string (_abck, bm_sz, ...) on your session and send every request with the returned user-agent.
- 04
Solve again when needed
When the target starts rejecting the session or the cookies expire, request a fresh set instead of reusing old ones.
Akamai 解决方案常见问题
关于正确集成此解决方案的常见问题。
Yes - our Akamai Bot Manager solver works on any protected site, not just a fixed list of targets. In most cases sending only site_url is enough, since the solver auto-detects the script, seed, and pixel for that specific site.
The _abck cookie Akamai issues is tied to the browser fingerprint used while solving, including the user-agent. Sending a different user-agent on your follow-up requests can make Akamai treat the cookie as invalid even though it was generated correctly.
_abck and bm_sz typically expire within minutes to a few hours depending on the target's configuration. Solve a fresh set whenever your session needs new cookies rather than trying to reuse old ones long-term.
Passing akamai_script speeds up solving since we skip auto-detection, and passing existing _abck / bm_sz values is useful when you just need a cookie refresh instead of a brand new sensor solve.
In most cases, yes: solve once to get _abck and bm_sz, then send them with the returned user-agent from your own HTTP client. Some targets also check the TLS / HTTP2 fingerprint of the client, so a client that resembles a real browser gives the best pass rates.
在绕过 Akamai 时遇到困难？
加入我们的 Discord，我们的团队会帮助您在您的环境中成功解决 Akamai - 提供免费建议，即使挑战随时间变化也能持续应对。