[ 01 ]What it looks like
A small rounded box that says Verifying, then flips to a tick; in invisible mode nothing renders.
Captcha type · Cloudflare
Cloudflare Turnstile solver API
Managed, non-interactive and invisible Turnstile widgets solved in about 3 seconds. Returns the cf-turnstile-response token, ready to post with your form.
Also searched asTurnstile captchacf-turnstile-responseTurnstile token solverinvisible TurnstileCloudflare widget captcha
- Price
- $2.18
- per 1,000
- Token acceptance
- 99.8%
- Median solve
- 3.1s
- p95 solve
- 7.4s
[ 02 ]Why it is hard
Turnstile replaces the image test with rotating browser-integrity probes: Private Access Tokens, a proof-of-work, canvas and WebGL readback, and event-loop timing. There is no puzzle to answer, only a browser environment to reproduce. Tokens are single use, expire in 300 seconds, and the sitekey and action pair are re-checked server-side at siteverify.
[ 03 ]How we solve it
A dedicated worker pool runs real browser profiles carrying the fingerprint surface Turnstile probes, and the profile set is rebuilt whenever Cloudflare rotates the challenge script. Managed, non-interactive and invisible modes all go through the same task type: send websiteURL and websiteKey, plus cData and action when the widget is embedded in a challenge page. Tokens come back inside their 300-second window, and a task that times out is retried on a fresh profile before it is marked failed.
[ 02 ]Solve it in five lines
Solve it in five lines
Post the task, get the token. Our SDKs collapse creation, polling and retries into one call.
cloudflare-turnstile.sh
curl -s https://api.nexcaptcha.net/createTask \
-H "Content-Type: application/json" \
-d '{
"clientKey": "YOUR_API_KEY",
"task": {
"type": "TurnstileTaskProxyless",
"websiteURL": "...",
"websiteKey": "..."
}
}'Required parameters
- API task type
- TurnstileTaskProxyless
- websiteURL
- required
- websiteKey
- required
- Difficulty
- Moderate
[ 03 ]Where this one shows up
Where this one shows up
Web Scraping & Data Collection
Keep a crawl moving when challenges start firing at volume.
E-commerce Price & Inventory Monitoring
Price feeds that finish their run before the data goes stale.
SERP & Rank Tracking
Daily rank runs that come back complete, not half collected.
QA & Test Automation
Run signup and checkout specs in CI instead of skipping them.
AI Agents & Browser Automation
One tool call returns a token and the agent keeps going.
Market Research & Data Aggregation
One call shape across sources that each protect differently.
Accessibility Automation
For people the audio challenge does not actually serve.
Security Research & Pentesting
Authorised testing, where a challenge hides the attack surface.
Ad Verification & Brand Protection
Check live placements from the consumer’s geo, continuously.
Owned-Account & Session Management
Re-login and session refresh, on accounts you already operate.
[ 05 ]Questions about this one
Questions about this one
$2.18 per 1,000 returned tokens. A task that fails or times out is not billed. Median solve time is 3.1s and p95 is 7.4s on our current Turnstile traffic.
Not for the standard widget. The token is validated against the sitekey and action rather than the IP that minted it, so proxyless tasks are the default and the cheapest path. You only need a proxy when the widget sits inside a full Cloudflare Challenge page, and that is a different task type.
300 seconds from issue, and it is single use. Submit the form inside that window. If your request sits in a queue longer than that, request a new solve rather than replaying the old token.
Turnstile is a widget inside a page that already loaded; solving it returns a cf-turnstile-response token you post with the form. The Challenge is a full-page interstitial; solving it returns a cf_clearance cookie bound to your proxy IP and user agent. If you get a 403 before your form ever renders, you need the Challenge type.
Solve your first thousand on us.
Create a key, paste it into the sample above, and watch a real token come back. No card, no sales call.