hCaptcha website screenshot

hCaptcha

hCaptcha, operated by Intuition Machines, is a privacy-focused CAPTCHA and bot-defense platform used as a drop-in replacement for Google reCAPTCHA. The free Publisher and Pro tiers offer a JavaScript widget and a server-side /siteverify endpoint that issue and verify single-use tokens. The Enterprise tier (hCaptcha Enterprise) adds advanced bot detection, account defense, MFA, machine-learning fraud signals, and management APIs. hCaptcha is broadly integrated into web frameworks and CMS platforms (React, Vue, Angular, Node/Express, WordPress, Magento) and ships first-party mobile SDKs for iOS and Android.

5 APIs 0 Features
CAPTCHABot DefensePrivacyhCaptchaIntuition MachinesAccount DefenseEnterprise Security

APIs

hCaptcha Siteverify API

The /siteverify endpoint validates an hCaptcha response token submitted by a browser. The server POSTs the token, secret key, and optional remote IP, and receives a JSON respons...

hCaptcha JavaScript Widget

The hCaptcha JS widget renders the visible or invisible challenge on a page and produces a response token on success. Developers include a script tag pointing at js.hcaptcha.com...

hCaptcha Invisible

Invisible hCaptcha runs the challenge in the background and only surfaces a visible puzzle when risk requires it. It is configured via the same widget script and an additional d...

hCaptcha Mobile SDKs

hCaptcha publishes native iOS and Android SDKs (with React Native and Flutter wrappers) so mobile apps can present the same risk-based challenges as the web widget and obtain re...

hCaptcha Enterprise

hCaptcha Enterprise extends the core challenge with advanced bot detection, account defense (ATO and fake-account protection), MFA and pull-based SMS, fraud signals, and managem...

Collections

hCaptcha API

OPEN

Pricing Plans

Hcaptcha Plans Pricing

1 plans

PLANS

Rate Limits

Hcaptcha Rate Limits

2 limits

RATE LIMITS

FinOps

Hcaptcha Finops

FINOPS

Resources

🔗
Website
Website
🔗
Documentation
Documentation
🔗
Enterprise
Enterprise
📝
Signup
Signup
💰
Pricing
Pricing
👥
GitHubOrganization
GitHubOrganization
📰
Blog
Blog
📜
Privacy
Privacy
🟢
Status
Status

Sources

apis.yml Raw ↑ 
opencollection: 1.0.0
info:
  name: hCaptcha API
  version: 1.0.0
request:
  auth:
    type: apikey
    key: secret
    value: '{{secret}}'
    placement: query
items:
- info:
    name: Verify user response token
    type: http
  http:
    method: POST
    url: https://api.hcaptcha.com/siteverify
    body:
      type: form-urlencoded
      data:
      - name: secret
        value: ''
      - name: response
        value: ''
      - name: remoteip
        value: ''
      - name: sitekey
        value: ''
  docs: 'Verify the response token returned to the client by the hCaptcha widget.

    The request must be sent as application/x-www-form-urlencoded. Do not

    use a GET request for this endpoint.

    '
bundled: true