Looking for an overview? See the reCAPTCHA v3 product page

reCAPTCHA v3 Score-Based Verification

Human-in-the-Loop Requirement

This service is for accessibility testing and QA verification only. By using this API, you confirm: "I am NOT using this service for fully automated AI resolution in violation of the target service's 'No AI/Bot' clauses."

reCAPTCHA v3 provides invisible, score-based verification without user interaction. Returns a hidden g-recaptcha-response token and a score from 0.0 (bot) to 1.0 (human). MeshPrivacy helps QA teams verify score-based verification flows in their applications.

Score Interpretation

Score RangeInterpretationTypical Action
0.0 - 0.3Likely botBlock or step-up challenge
0.3 - 0.7Suspicious behaviorAdditional verification
0.7 - 1.0Likely humanAllow

Note: Score thresholds are configurable per site. Check site-specific documentation for exact thresholds.

Token Details

Response Token
Field: g-recaptcha-response
Format: Base64-encoded JWT
Token TTL: ~2 hours
Action Types
homepage - Page view
login - Login attempt
purchase - Transaction
Custom action strings

Integration Example

// Submit reCAPTCHA v3 task to MeshPrivacy (QA/Testing only)
const response = await fetch('https://api.meshprivacy.com/v1/tasks/submit', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'X-API-Key': API_KEY
  },
  body: JSON.stringify({
    service: 'recaptcha_v3',
    url: 'https://target-site.com/',
    sitekey: '6Lc_xxxxxx...', // From page source
    action: 'login', // Match the action used on the page
    min_score: 0.7, // Minimum acceptable score
    proxy_config: 'http://user:pass@ip:port', // Your proxy
    user_agent: 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36...',
    // Acknowledgment required for HITL services
    hitl_acknowledgment: true
  })
});

const { task_id } = await response.json();

// Poll for result
const result = await fetch(`https://api.meshprivacy.com/v1/tasks/result/${task_id}`, {
  headers: { 'X-API-Key': API_KEY }
});

const { token, score } = await result.json();
// token is g-recaptcha-response value
// score is the achieved score (0.0-1.0)

FAQ

Why does reCAPTCHA v3 use scores instead of challenges?

v3 runs entirely in the background, analyzing user behavior patterns to calculate a probability score. This provides friction-free verification while letting site owners decide how to handle different score ranges.

What's the action parameter for?

Actions identify which page/operation is being protected. Google Analytics uses this to track verification patterns. The action string in your request should match what the target site specifies in grecaptcha.execute().

Can I guarantee a specific score?

Scores depend on behavioral analysis performed by Google. MeshPrivacy aims for high scores through human-assisted verification, but exact scores cannot be guaranteed as they depend on Google's risk assessment.

Related Services