How to Solve Cloudflare Turnstile?

TL;DR

• Cloudflare Turnstile is a modern CAPTCHA alternative designed to block automated traffic with minimal user interaction.
• CapSolver supports all Turnstile variants (Manual, Non-Interactive, and Invisible) with automatic detection.
• The AntiTurnstileTaskProxyLess task allows you to solve Turnstile without providing your own proxy.
• The returned token from getTaskResult must be submitted to the target website to complete verification successfully.

Introduction

Cloudflare Turnstile is a privacy-focused CAPTCHA alternative that replaces traditional reCAPTCHA challenges. It is designed to reduce user friction while still effectively preventing automated abuse. From a developer’s perspective, however, Turnstile introduces new challenges for automation, testing, and data collection workflows.

Unlike Cloudflare’s 5s Challenge, Turnstile relies on token-based validation rather than browser fingerprint continuity. This makes it easier to integrate—provided the correct parameters and task type are used.

In this guide, you will learn:

• The different Cloudflare Turnstile types handled by CapSolver
• How CapSolver automatically manages Turnstile challenges
• How to use AntiTurnstileTaskProxyLess to solve Turnstile without a proxy
• How to retrieve and submit the token correctly to avoid rejection

This tutorial is suitable for developers looking for a fast, scalable, and low-maintenance Turnstile solution.

Types of Turnstiles Handled by CapSolver

CapSolver automatically handles all Cloudflare Turnstile variants, including:

• Manual
• Non-Interactive
• Invisible

No additional configuration is required to distinguish between these types—CapSolver detects and processes them automatically.

Overcoming the Cloudflare Turnstile

Before solving the Cloudflare Turnstile, ensure you meet the following prerequisites and understand the validation requirements.

Prerequisites

• CapSolver API Key

Essential Considerations for a Valid Solution

• The token returned in the getTaskResult response is the final CAPTCHA verification token.
• This token must be submitted to the target website exactly as expected by the Turnstile verification flow.

For a full parameter breakdown, refer to the official documentation:
https://docs.capsolver.com/en/guide/captcha/cloudflare_turnstile/

In this tutorial, we focus only on the required parameters. The supported task type for Cloudflare Turnstile is:

• AntiTurnstileTaskProxyLess – uses CapSolver’s built-in proxy infrastructure

This task type is recommended when the website is protected by Cloudflare Turnstile and does not require browser-level fingerprint reuse.

Step 1: Initiating a Task with CapSolver

Create a task using the createTask API and submit the required information:

POST https://api.capsolver.com/createTask

{
  "clientKey": "YOUR_API_KEY",
  "task": {
    "type": "AntiTurnstileTaskProxyLess",
    "websiteURL": "https://www.yourwebsite.com",
    "websiteKey": "0x4XXXXXXXXXXXXXXXXX",
    "metadata": {
      "action": "login",  
      "cdata": "0000-1111-2222-3333-example-cdata"
    }
  }
}

• websiteKey is mandatory
• metadata.action and metadata.cdata are optional and depend on the website’s implementation

Step 2: Retrieving the Results

Poll the getTaskResult endpoint until the task is completed:

POST https://api.capsolver.com/getTaskResult
Host: api.capsolver.com
Content-Type: application/json

{
  "clientKey": "YOUR_API_KEY",
  "taskId": "TASKID_OF_CREATETASK"
}

Once solved, the response will include a valid Turnstile token:

Using the Turnstile Token Correctly

To complete verification on the target website:

• Submit the returned token to the site’s Turnstile verification endpoint
• Ensure the token is used before expiration
• Do not reuse tokens across unrelated sessions

⚠️ If the token is rejected, verify that the website is protected by Cloudflare Turnstile and not the Cloudflare 5s Challenge, which requires a different task type and parameters.

Conclusion

Cloudflare Turnstile offers a streamlined alternative to traditional CAPTCHAs, but automation still requires a reliable token generation process.

CapSolver simplifies Turnstile resolution through AntiTurnstileTaskProxyLess, eliminating the need for custom proxies or browser fingerprint management. By supplying the correct parameters and properly submitting the returned token, developers can integrate Turnstile solving into their workflows quickly and at scale.

With the right setup, solving Cloudflare Turnstile becomes efficient, predictable, and production-ready.

FAQs

1. What is the difference between Cloudflare Turnstile and the 5s Challenge?

Turnstile is a token-based CAPTCHA mechanism, while the 5s Challenge is a browser and network fingerprint verification process. They require different task types.

2. Do I need my own proxy to solve Cloudflare Turnstile?

No. AntiTurnstileTaskProxyLess uses CapSolver’s internal proxy infrastructure.

3. Why is my Turnstile token rejected?

Common reasons include incorrect websiteKey, expired tokens, or attempting to solve a Cloudflare 5s Challenge instead of Turnstile.

4. Can the same token be reused multiple times?

No. Turnstile tokens are single-use and tied to a specific session or action.

For Cloudflare Challenge 5s (IUAM) solutions, refer to:
https://www.capsolver.com/blog/how-to-solve-cloudflare-challenge