reCAPTCHA v3 解决方案的工作原理
Google's invisible, score-based captcha and its Enterprise variant (RecaptchaV3Enterprise). We return a high-score token without any user interaction, ready to submit alongside your form or API request.
即使 reCAPTCHA v3 更新其防护机制，这个可预测的三步流程也始终保持不变。
Send the site key and the page_action your target page passes to execute(). We return a token plus the matching _GRECAPTCHA cookie and browser fingerprint, so follow-up requests stay consistent.
提交目标
在一次 API 请求中发送页面 URL 和挑战特定字段。
我们处理挑战
CaptchaSolv 将任务路由到专门的解决方案，并跟踪直至完成。
使用解决方案
获取下一次请求所需的令牌、请求头、cookies 或 sensor payload。
reCAPTCHA v3 API 请求与响应
所有支持的解决方案使用相同的接口和响应格式。
{
"api_key": "YOUR_API_KEY",
"type": "RecaptchaV3",
"site_url": "https://example.com/contact",
"data": {
"site_key": "6LcXXXXXXXXXXXXXXXXXXXXXX",
"page_action": "contact_submit"}
}{
"errorId": 0,
"status": "ready",
"solvtime": 1.38,
"data": {
"useragent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)...",
"language": "en-US,en;q=0.9",
"solution": {
"token": "03AGdBq25SqKmv...",
"cookie": "_GRECAPTCHA=09AKhCRw..."}
}
}任务数据字段
此验证码类型的求解请求中，可在 data 对象内发送的字段。
site_key必填The reCAPTCHA site key from the target page.
page_action可选The action string passed to execute(), e.g. "submit" or "homepage". Should match the page.
cookie可选An existing _GRECAPTCHA cookie value to seed the solver session for cookie continuity across solves.
解决方案字段
任务解决后在 data.solution 中返回的字段。
solution.token必填The reCAPTCHA token to submit to the target site.
solution.cookie可选Updated _GRECAPTCHA cookie from the solve session - send it with the token in follow-up requests.
What is reCAPTCHA v3?
reCAPTCHA v3 is Google's invisible, score-based captcha. There is no checkbox and no image puzzle: the script runs in the background on every page that loads api.js (or enterprise.js for reCAPTCHA Enterprise) and produces a token that Google turns into a risk score between 0.0 (very likely a bot) and 1.0 (very likely a human).
When the page calls grecaptcha.execute(siteKey, { action }), the script collects browser and interaction signals, sends them to Google together with the site key and the action name, and receives a token. The site forwards the token to its backend, which asks Google for the score through the siteverify API (or an Enterprise assessment) and then accepts, challenges or blocks the request. Google's default suggestion is a 0.5 threshold, but each site picks its own.
That is why reCAPTCHA v3 is hard to bypass with plain HTTP requests: there is nothing to click, the token is bound to the site key and action, it expires after about two minutes, and it is only useful if it carries a high score. Our reCAPTCHA v3 solver generates that token for you - your scraper or automation sends the site key and page_action, then submits the returned token the same way a real browser would.
- 01
Invisible script
The page loads api.js or enterprise.js with its site key - no widget is shown.
- 02
execute(action)
grecaptcha.execute() collects browser signals and requests a token for a named action.
- 03
Server-side score
The site sends the token to Google and gets back a 0.0-1.0 score and the action.
- 04
Allow or block
Requests below the site's threshold are blocked, challenged or flagged.
reCAPTCHA v3 parameters
site_keyKeyPublic key from the render= parameter of api.js or the first argument of grecaptcha.execute().
page_actionKeyAction name passed to execute(), e.g. login or submit - Google scores it and many sites check it.
tokenKeyValue the page sends to its backend, often as g-recaptcha-response or a custom JSON field.
_GRECAPTCHAGoogle cookie from the solve session - reuse it to keep the session consistent.
enterprise.jsLoaded instead of api.js on reCAPTCHA Enterprise sites - use RecaptchaV3Enterprise.
siteverifyGoogle endpoint the target's backend calls to read the score - you never call it yourself.
How to bypass reCAPTCHA v3 with the API
Bypassing reCAPTCHA v3 doesn't mean breaking Google's scoring - it means presenting a token that already carries a good score. With CaptchaSolv that takes four steps and no browser on your side.
- 01
Find the site key
Look for render=SITE_KEY in the api.js or enterprise.js script URL, or the first argument of grecaptcha.execute() in the page source.
- 02
Copy the page action
Find the action passed to execute(), e.g. { action: 'login' }, and send it as page_action so the token matches what the real page requests.
- 03
Create a RecaptchaV3 task
POST site_url, site_key and page_action to /solve - use RecaptchaV3Enterprise when the page loads enterprise.js - and poll until the status is ready.
- 04
Submit the token
Send solution.token in the field the site expects within two minutes, together with the returned user-agent and _GRECAPTCHA cookie.
reCAPTCHA v3 解决方案常见问题
关于正确集成此解决方案的常见问题。
Yes - it works on any site running reCAPTCHA v3 or reCAPTCHA v3 Enterprise, not just a fixed list of targets. Send the site key and page_action from the page you're hitting and we solve that site's specific challenge.
reCAPTCHA v3 never exposes its score directly - the target site checks it server-side against Google. We return a token that scores high enough to pass typical thresholds, which is what your request needs to submit alongside the form or API call.
Google's scoring takes the action name into account, so sending a page_action that doesn't match what the real page passes to execute() can lower the score the target site sees. Always copy the exact action string from the page's script.
Reuse solution.cookie together with the token when the site tracks the _GRECAPTCHA cookie across requests - it keeps the session consistent and can improve the score on subsequent solves for the same visitor.
Yes. Send the site key, page URL and page_action to the API and submit the returned token from your own HTTP client - no Selenium, Puppeteer or Playwright session is needed on your side.
Yes - use the RecaptchaV3Enterprise type for sites that load recaptcha/enterprise.js. The request and response shape is the same as for standard reCAPTCHA v3, so switching between the two only changes the type string.
Google expires reCAPTCHA tokens after about two minutes and each token can be verified only once, so request it right before you send the form or API call it protects.
在绕过 reCAPTCHA v3 时遇到困难？
加入我们的 Discord，我们的团队会帮助您在您的环境中成功解决 reCAPTCHA v3 - 提供免费建议，即使挑战随时间变化也能持续应对。