Skip to content
NexCaptcha

Captcha type · Arkose Labs

FunCaptcha and Arkose Labs solver API

Arkose Labs FunCaptcha solved by public key, including rotation and 3D object challenges. Hard keys quoted per key rather than refused outright.

Also searched asArkose Labs captchaMatchKey challengedata-pkeyfc-tokenArkose rotation challenge

Price
$2.18
per 1,000
Token acceptance
97.9%
Median solve
7.8s
p95 solve
18.3s

[ 01 ]What it looks like

A game-like 3D puzzle: rotate the animal upright, or pick the one image that matches.

[ 02 ]Why it is hard

Each customer gets its own randomised puzzle pack rendered from 3D assets, so a classifier cannot be pre-trained on a fixed image set. The widget is pinned to a per-customer subdomain such as client-api.arkoselabs.com, the public key is a UUID carried inside fc-token, and the optional data blob has to be JSON.stringify’d and replayed byte for byte. A wrong answer escalates difficulty instead of failing, so a weak solver burns rounds and then still loses the session.

[ 03 ]How we solve it

A dedicated worker pool handles Arkose only, with per-public-key models retrained on live traffic as Arkose rotates its puzzle packs. We read the subdomain and key you send and drive the widget on its own origin, so the fc-token comes back tied to a real session. Keys that Arkose has hardened for one customer get their own quote rather than sitting inside a $2-to-$50 band.

[ 02 ]Solve it in five lines

Solve it in five lines

Post the task, get the token. Our SDKs collapse creation, polling and retries into one call.

funcaptcha-arkose-labs.sh
curl -s https://api.nexcaptcha.net/createTask \
  -H "Content-Type: application/json" \
  -d '{
    "clientKey": "YOUR_API_KEY",
    "task": {
      "type": "FunCaptchaTaskProxyless",
      "websiteURL": "...",
      "websitePublicKey": "...",
      "funcaptchaApiJSSubdomain": "..."
    }
  }'

Required parameters

API task type
FunCaptchaTaskProxyless
websiteURL
required
websitePublicKey
required
funcaptchaApiJSSubdomain
required
Difficulty
Very hard

[ 03 ]Where this one shows up

Where this one shows up

Security Research & Pentesting

Authorised testing, where a challenge hides the attack surface.

Owned-Account & Session Management

Re-login and session refresh, on accounts you already operate.

[ 05 ]Questions about this one

Questions about this one

$2.18 per 1,000 accepted tokens. Failed and timed-out tasks are not billed, so the rate you pay tracks the 97.9% accepted rate rather than attempts. Hard public keys are quoted per key after we test yours.

Arkose tunes puzzle packs per customer, so one key can be three times the work of another. Publishing a $2-to-$50 range hides that. Send us the key and the target URL and you get one number for that key, fixed for the contract.

Not for most keys. FunCaptchaTaskProxyless is the default because the token is checked against the site key and the puzzle session, not the solving IP. Use FunCaptchaTask with proxy and userAgent when the target also scores the IP that submits the token.

Three usual causes: websitePublicKey taken from the wrong element instead of data-pkey or fc-token, a missing funcaptchaApiJSSubdomain when the site uses a custom one, or a data blob that was re-serialised. Tokens also expire in about 120 seconds, so submit immediately.

Solve your first thousand on us.

Create a key, paste it into the sample above, and watch a real token come back. No card, no sales call.

Get your API keyTalk to an engineer