Cloudflare Turnstile solver for Puppeteer Node.js

Runnable example

import puppeteer from 'puppeteer'
import { CaptchaSonic } from 'captchasonic'

const browser = await puppeteer.launch()
const page = await browser.newPage()
await page.goto('https://target.example.com/login')

const sonic = new CaptchaSonic('YOUR_API_KEY')
const { token } = await sonic.solve({
  type: 'TurnstileTaskProxyless',
  websiteURL: page.url(),
  websiteKey: '0x4AAAAAAA...',
})

await page.evaluate(
  (t) => { document.querySelector('[name=cf-turnstile-response]').value = t },
  token,
)
await page.click('form button[type=submit]')

Replace YOUR_API_KEY with a real key from your dashboard. The token is good for one form submission.

FAQ

Does Cloudflare detect Puppeteer immediately?

Default Puppeteer sessions trigger Cloudflare's bot-shield within a couple of requests. Stealth plugins help with TLS / navigator markers; a Sonic token handles the captcha challenge itself.

How fast is Turnstile via Sonic + Puppeteer?

End-to-end solve is 4–7 seconds in production. The Puppeteer round-trip itself is dominated by page navigation; the captcha hop adds minimal extra latency.

What if I don't know the sitekey?

Inspect the page for cf-turnstile or [data-sitekey] elements. For pages that load Turnstile via JS, search the document for "0x4" — that's the Turnstile sitekey prefix.

Other Cloudflare Turnstile stacks

• hCaptcha · Puppeteer · Node.jsBypass hCaptcha in Puppeteer Node.js scripts with a Sonic-issued token. Drop-in replacement for the manual click flow.
• Cloudflare Turnstile · Playwright · PythonPass Cloudflare Turnstile from Playwright Python. Sonic returns the cf-turnstile-response token in under 7 seconds, ready to drop into the page.
• Cloudflare Turnstile · HTTP / requests · PythonPass Cloudflare Turnstile from a pure-requests Python script — no headless browser. Sonic returns the cf-turnstile-response token to POST directly.