hCaptcha · Authentication Profile

Hcaptcha Authentication

Authentication

hCaptcha secures its APIs with apiKey across 1 declared security scheme, as derived from its OpenAPI definitions.

CAPTCHABot DefensePrivacyhCaptchaIntuition MachinesAccount DefenseEnterprise Security
Methods: apiKey Schemes: 1 OAuth flows: API key in: query

Security Schemes

secretKey apiKey
· in: query (secret)

Source

Authentication Profile

hcaptcha-authentication.yml Raw ↑ 
generated: '2026-07-11'
method: derived
source: openapi/hcaptcha-openapi.yml
summary:
  types:
  - apiKey
  api_key_in:
  - query
schemes:
- name: secretKey
  type: apiKey
  in: query
  parameter: secret
  description: |-
    The hCaptcha secret key is passed as a form field named `secret` in the
    request body (application/x-www-form-urlencoded). It is modeled here as
    an apiKey scheme for tooling compatibility; the actual transport is the
    form body, not a query string.
  sources:
  - openapi/hcaptcha-openapi.yml