KasadaTokenProxyLess

Hand over the Kasada p.js URL and get back ready-to-replay x-kpsdk-cd, x-kpsdk-ct and x-kpsdk-st headers.

Kasada blocks a request with a 429 whose body loads a single script (p.js or ips.js) under a path like /149e9513-01fa-4fb0-aad4-566afd725d1b/2d206a39-8ed7-437e-a3be-862e0f06eea3/. This task runs that whole flow for you: it fetches the script, builds the payload, POSTs it to /tl, and returns the headers the protected endpoint expects.

Finding `pJsUrl`

Open DevTools on the blocked page and look for the script under the Kasada UUID path. Two shapes are common:

The block page loads it directly: <script src="/149e9513…/2d206a39…/ips.js?…">.
The page loads it in the background from the fingerprint endpoint /149e9513…/2d206a39…/fp?x-kpsdk-v=j-1.2.x, which answers 429 with the same script tag.

Pass the protected page as websiteURL, then pass the absolute script URL as pJsUrl, query string included. The UUID path is stable per site, so you only have to find it once.

Replaying the solution

Send x-kpsdk-ct, x-kpsdk-st and x-kpsdk-cd on the request that was blocked, together with any Kasada cookies your own session already holds.

Never send x-kpsdk-v to the protected endpoint

x-kpsdk-v belongs on the /tl POST only. Forwarding it to the protected endpoint is one of the most common reasons a valid token still gets blocked.

x-kpsdk-cd is single-use

The cd header is a proof-of-work computed for one request. Reusing it across requests fails. Solve again for each protected call, or keep the session yourself and mint only the proof-of-work with KasadaWorkTimeProxyLess.

Match the returned user agent

solution.userAgent is the User-Agent the token was minted with. Send that exact value, and pair it with a TLS client that fingerprints as the same Chrome version: Kasada checks both.

KasadaPayloadProxyLess: you POST /tl yourself, so the session binds to your IP.
KasadaCtBrowserToken: browser-based solve behind your own proxy.
KasadaCdToken: refresh only x-kpsdk-cd for a session you already hold.

Supported Providers

Provider	Price per 1,000	Routing
Salamoonder	$2.40

Request Schema

Field	Type	Required	Description
`clientKey`*	string	Yes	Your API key. Create one in the AnySolver dashboard. Example: `your-api-key-from-dashboard`
`task`*	object	Yes	The task body. Required fields depend on the task type. See Tasks for per-task schemas. View task properties
`settings`	object	No	Per-request settings for routing, auto retry, auto fallback, and proxy behavior. See Routing Strategies. View settings reference

Task Object Properties

The task field accepts an object with the following properties:

Field	Type	Required	Description
`type`*		Yes
`websiteURL`*	URL	Yes	Full URL of the page where the CAPTCHA is displayed. Example: `https://www.nike.com/`
`pJsUrl`*	URL	Yes	Absolute URL of the Kasada `p.js` (or `ips.js`) script the protected page loads, query string included. Example: `https://www.nike.com/149e9513-01fa-4fb0-aad4-566afd725d1b/2d206a39-8ed7-437e-a3be-862e0f06eea3/p.js`

{    "clientKey": "your-api-key-from-dashboard",    "task": {        "type": "KasadaTokenProxyLess",        "websiteURL": "https://www.nike.com/",        "pJsUrl": "https://www.nike.com/149e9513-01fa-4fb0-aad4-566afd725d1b/2d206a39-8ed7-437e-a3be-862e0f06eea3/p.js"    }}

Optional fields are not guaranteed across providers

Required fields are guaranteed across every provider that supports this task. Optional fields may be honored by some providers and silently ignored by others. AnySolver does not document per-provider parameter support, so before relying on an optional field, check that provider's own docs for the task you are using.

Response Schema

Field	Type	Required	Description
`status`*		Yes	Task status: "processing", "ready", or "failed". Example: `ready`
`errorId`*		Yes	0 = success, 1 = external error, 2 = internal error. Example: `0`
`taskId`	string	No	Unique identifier returned when the task was created. Example: `01KFNDF328KAN2AJ3BNHCQYE88`
`errorCode`		No	Machine-readable error code. Example: `CAPTCHA_UNSOLVABLE`
`errorDescription`	string	No	Human-readable error message with resolution hints. Example: `The captcha could not be solved.`
`cost`	number	No	Actual cost charged for this task in USD. Example: `0.002`
`taskType`		No	The type of CAPTCHA task to solve. Example: `ReCaptchaV2TokenProxyLess`
`provider`		No	Provider that handled this task. While processing, the provider currently solving it. Example: `Multibot`
`solution`	object	No	View solution properties

Solution Object Properties

The solution field contains an object with the following properties:

Field	Type	Required	Description
`xKpsdkCd`*	string	Yes	Proof-of-work header. It is single-use: request a new task for every protected request. Example: `{"workTime":1765212789082,"id":"4f1c…","answers":[…]}`
`xKpsdkCt`*	string	Yes	Session token header, valid until the Kasada session expires. Example: `02ZDV4Wf8UnQrrkylUAizpCB8ASqkRLkm6…`
`xKpsdkSt`*	string	Yes	Server timestamp the session was issued at. Example: `1765212777507`
`raw`*	Record<string, unknown>	Yes	Raw provider response data for advanced use cases.
`xKpsdkR`	string	No	Result header returned by the `/tl` endpoint. `1-AA` or `1-AQ` mean the fingerprint or IP was rejected. Example: `1-BwVtcmY`
`xKpsdkCr`	string	No	Challenge-required flag returned by the `/tl` endpoint. Example: `true`
`userAgent`	string	No	User-Agent string used during solving (if applicable). Example: `Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36`

Finding `pJsUrl`

Open DevTools on the blocked page and look for the script under the Kasada UUID path. Two shapes are common:

The block page loads it directly: <script src="/149e9513…/2d206a39…/ips.js?…">.
The page loads it in the background from the fingerprint endpoint /149e9513…/2d206a39…/fp?x-kpsdk-v=j-1.2.x, which answers 429 with the same script tag.

Pass the protected page as websiteURL, then pass the absolute script URL as pJsUrl, query string included. The UUID path is stable per site, so you only have to find it once.

Replaying the solution

Send x-kpsdk-ct, x-kpsdk-st and x-kpsdk-cd on the request that was blocked, together with any Kasada cookies your own session already holds.

Never send x-kpsdk-v to the protected endpoint

x-kpsdk-v belongs on the /tl POST only. Forwarding it to the protected endpoint is one of the most common reasons a valid token still gets blocked.

x-kpsdk-cd is single-use

Match the returned user agent

solution.userAgent is the User-Agent the token was minted with. Send that exact value, and pair it with a TLS client that fingerprints as the same Chrome version: Kasada checks both.

KasadaPayloadProxyLess: you POST /tl yourself, so the session binds to your IP.
KasadaCtBrowserToken: browser-based solve behind your own proxy.
KasadaCdToken: refresh only x-kpsdk-cd for a session you already hold.

Supported Providers

Provider	Price per 1,000	Routing
Salamoonder	$2.40

Request Schema

Field	Type	Required	Description
`clientKey`*	string	Yes	Your API key. Create one in the AnySolver dashboard. Example: `your-api-key-from-dashboard`
`task`*	object	Yes	The task body. Required fields depend on the task type. See Tasks for per-task schemas. View task properties
`settings`	object	No	Per-request settings for routing, auto retry, auto fallback, and proxy behavior. See Routing Strategies. View settings reference

Task Object Properties

The task field accepts an object with the following properties:

Field	Type	Required	Description
`type`*		Yes
`websiteURL`*	URL	Yes	Full URL of the page where the CAPTCHA is displayed. Example: `https://www.nike.com/`
`pJsUrl`*	URL	Yes	Absolute URL of the Kasada `p.js` (or `ips.js`) script the protected page loads, query string included. Example: `https://www.nike.com/149e9513-01fa-4fb0-aad4-566afd725d1b/2d206a39-8ed7-437e-a3be-862e0f06eea3/p.js`

{    "clientKey": "your-api-key-from-dashboard",    "task": {        "type": "KasadaTokenProxyLess",        "websiteURL": "https://www.nike.com/",        "pJsUrl": "https://www.nike.com/149e9513-01fa-4fb0-aad4-566afd725d1b/2d206a39-8ed7-437e-a3be-862e0f06eea3/p.js"    }}

Optional fields are not guaranteed across providers

Response Schema

Field	Type	Required	Description
`status`*		Yes	Task status: "processing", "ready", or "failed". Example: `ready`
`errorId`*		Yes	0 = success, 1 = external error, 2 = internal error. Example: `0`
`taskId`	string	No	Unique identifier returned when the task was created. Example: `01KFNDF328KAN2AJ3BNHCQYE88`
`errorCode`		No	Machine-readable error code. Example: `CAPTCHA_UNSOLVABLE`
`errorDescription`	string	No	Human-readable error message with resolution hints. Example: `The captcha could not be solved.`
`cost`	number	No	Actual cost charged for this task in USD. Example: `0.002`
`taskType`		No	The type of CAPTCHA task to solve. Example: `ReCaptchaV2TokenProxyLess`
`provider`		No	Provider that handled this task. While processing, the provider currently solving it. Example: `Multibot`
`solution`	object	No	View solution properties

Solution Object Properties

The solution field contains an object with the following properties:

Field	Type	Required	Description
`xKpsdkCd`*	string	Yes	Proof-of-work header. It is single-use: request a new task for every protected request. Example: `{"workTime":1765212789082,"id":"4f1c…","answers":[…]}`
`xKpsdkCt`*	string	Yes	Session token header, valid until the Kasada session expires. Example: `02ZDV4Wf8UnQrrkylUAizpCB8ASqkRLkm6…`
`xKpsdkSt`*	string	Yes	Server timestamp the session was issued at. Example: `1765212777507`
`raw`*	Record<string, unknown>	Yes	Raw provider response data for advanced use cases.
`xKpsdkR`	string	No	Result header returned by the `/tl` endpoint. `1-AA` or `1-AQ` mean the fingerprint or IP was rejected. Example: `1-BwVtcmY`
`xKpsdkCr`	string	No	Challenge-required flag returned by the `/tl` endpoint. Example: `true`
`userAgent`	string	No	User-Agent string used during solving (if applicable). Example: `Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36`

KasadaTokenProxyLess

Finding `pJsUrl`

Replaying the solution

Supported Providers

Request Schema

Task Object Properties

Response Schema

Solution Object Properties

On this page

KasadaTokenProxyLess

Finding `pJsUrl`

Replaying the solution

Supported Providers

Request Schema

Task Object Properties

Response Schema

Solution Object Properties

On this page

KasadaTokenProxyLess

Finding pJsUrl

Replaying the solution

Related tasks

Supported Providers

Request Schema

Task Object Properties

Response Schema

Solution Object Properties

On this page

KasadaTokenProxyLess

Finding pJsUrl

Replaying the solution

Related tasks

Supported Providers

Request Schema

Task Object Properties

Response Schema

Solution Object Properties

On this page

Finding `pJsUrl`

Finding `pJsUrl`