Turnstile Token API

Solve Cloudflare Turnstile challenges. Get fresh tokens on demand.

What it does

Given a URL hosting a Cloudflare Turnstile widget and its site key, this actor solves the challenge and returns a fresh cf-turnstile-response token you can use to authenticate subsequent requests.

No third-party solver API. Uses Scrapling's undetectable browser (Camoufox/Patchright) so Cloudflare can't distinguish us from a real visitor.

Pricing (pay-per-event)

Event	Price
token-solved	$0.003 per token
token-failed	$0 (diagnostic only)

You pay only for successful tokens.

Input

{
  "url": "https://example.com/login",
  "siteKey": "0x4AAAAAAADnPIDROrmt1Wwj",
  "action": "",
  "cdata": "",
  "proxyConfiguration": {
    "useApifyProxy": true,
    "apifyProxyGroups": ["RESIDENTIAL"]
  },
  "timeoutMs": 60000
}

Fields

• url (required) — Page URL that hosts the Turnstile challenge.
• siteKey (required) — Turnstile site key (from the <div data-sitekey="..."> or script).
• action — Optional Turnstile action name.
• cdata — Optional custom data.
• proxyConfiguration — Apify residential proxy (recommended) or bring-your-own.
• timeoutMs — Max solve time, 10-180 seconds.

Output (dataset)

{
  "token": "0.abc-long-cf-token-...",
  "url": "https://example.com/login",
  "siteKey": "0x4AAAAAAADnPIDROrmt1Wwj",
  "solvedAt": "2026-04-23T01:02:03.456Z",
  "durationMs": 8420,
  "method": "scrapling_stealth",
  "error": null
}

Try This First

curl https://api.apify.com/v2/acts/lanky_quantifier~turnstile-token-api/run-sync-get-dataset-items \
  -H "Content-Type: application/json" \
  -d '{
    "url": "https://somesite.com/protected",
    "siteKey": "0xYOUR_SITE_KEY"
  }'

Why this vs 2captcha / CapSolver

	This actor	2captcha / CapSolver
Price per token	$0.003	$0.0015-0.002
Per-run overhead	paid only on success	usually pay-per-attempt
Third-party dep	none (self-hosted browser)	requires their API
Geo-IP control	Apify proxy (195+ countries)	fixed
Integration	Apify standard	custom API

Price-match is intentional. We win on reliability + already integrated with Apify's proxy/scheduler/webhooks infrastructure.

Limits & Caveats

• Each successful solve takes 5-30 seconds (stealth browser navigation).
• Pages with heavy anti-bot stacks beyond Turnstile (Akamai / DataDome / PerimeterX) may reduce success rate.
• Tokens are single-use and valid 3-5 minutes — request fresh token just before the protected action.

Changelog

• 0.1 (2026-04-23) — Initial release. Pain #1 from V-Markets research validated (engagement 27).