Cloudflare Turnstile
Turnstile is the challenge Cloudflare serves instead of a classic image CAPTCHA: a checkbox, an interactive prompt or an invisible check that runs while the visitor fills in a form. Sites use it on signups, logins and comment forms to keep bots out without sending people to an image grid.
EndCaptcha solves these challenges through the same API as every other CAPTCHA type. You send the widget details, poll for the result and receive a token, and then your page submits that token as if the visitor had solved the challenge themselves.
What you need from the target page
- Site key - the value of the widget's data-sitekey attribute, a property in the page script, or part of the widget iframe address.
- Page URL - the full address where the widget loads, including its path.
- Action - optional, from data-action or the turnstile.render call.
- Proxy - optional but recommended, HTTP proxies only, so the address that solves the challenge and the address that submits the form match.
Solve it through the API
- Submit with type=12 to http://api.endcaptcha.com/upload.
- Poll the returned id every 3 seconds.
- Take the token and place it in the input named cf-turnstile-response, or hand it to the widget callback.
The full parameter list, an example and the error table live on the Turnstile API guide.
What it costs
Turnstile challenges are charged in credits like every other CAPTCHA, and some types cost more credits than others. The packages and their credit prices are on the pricing block of the home page, and a challenge that solved incorrectly is not billed when you report it.
Turnstile questions
Does the visitor notice anything?
Usually not. Turnstile decides in the background whether to show an
interactive prompt, and most visitors pass without a click.
Which proxies are supported?
HTTP proxies only, and only when you send them with the payload.
How long does a solve take?
Poll every 3 seconds until the token arrives. The home page publishes a
seven second service level agreement for the service.

