Cloudflare Turnstile

Cloudflare Turnstile 的协议解法。

Turnstile 常用于替代 reCAPTCHA。基础的 websiteURL + websiteKey 就够；如果页面调用时带了 action 或 cData，需要一并提供。

请求

POST /v1/captcha/solve?timeout=180
Authorization: Bearer arp_xxx
Content-Type: application/json

请求参数

只传上表列出的参数即可，认证由网关自动处理。

请求示例

{
  "type": "TurnstileTaskProxyless",
  "websiteURL": "https://example.com/",
  "websiteKey": "0x4AAAAAAABkMYinukE8nzY"
}

响应示例

{
  "ok": true, "ready": true, "price": 10, "balance": 940,
  "solution": { "token": "0.KlUZ3f...", "userAgent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) ..." },
  "token": "0.KlUZ3f..."
}

完整调用

curl -X POST 'https://api.xiaobaicap.com/v1/captcha/solve?timeout=180' \
  -H "Authorization: Bearer arp_xxx" \
  -H 'Content-Type: application/json' \
  -d '{
         "type": "TurnstileTaskProxyless",
         "websiteURL": "https://example.com/",
         "websiteKey": "0x4AAAAAAABkMYinukE8nzY"
       }'

import requests

r = requests.post(
    "https://api.xiaobaicap.com/v1/captcha/solve",
    headers={"Authorization": "Bearer arp_xxx"},
    params={"timeout": 180},
    json={
  "type": "TurnstileTaskProxyless",
  "websiteURL": "https://example.com/",
  "websiteKey": "0x4AAAAAAABkMYinukE8nzY"
},
    timeout=200,
)
d = r.json()
if not d.get("ok"):
    raise SystemExit(d)
print(d.get("token") or d.get("text") or d.get("objects"))

注意事项

• solution.userAgent 是建议的 UA，提交时用它更稳。

错误

失败时返回 502，积分全额退回，可以安全重试：

{"error":"识别失败，已全额退回 10 积分：...","code":"mint_failed"}