{"id":24969,"date":"2026-08-06T10:17:06","date_gmt":"2026-08-06T10:17:06","guid":{"rendered":"https:\/\/capskip.com\/?p=24969"},"modified":"2026-08-06T10:17:06","modified_gmt":"2026-08-06T10:17:06","slug":"recaptcha-v3-python","status":"publish","type":"post","link":"https:\/\/capskip.com\/zh\/recaptcha-v3-python\/","title":{"rendered":"\u5982\u4f55\u7528 Python \u8bc6\u522b reCAPTCHA v3 \u5e76\u8bbe\u7f6e action"},"content":{"rendered":"

reCAPTCHA v3 never shows a challenge. It runs in the background and hands the site a token, which the site then verifies server side. From your code that means there is nothing to click and nothing to look at, so the whole job is producing a token the site will accept. In Python that is the same recaptcha<\/code> method you would use for v2, with a version flag.<\/p>\n

The part that trips people up is the action.<\/p>\n

Setup<\/h2>\n
# Python 3.10 or newer.\npip install capskip<\/pre>\n
from capskip import CapSkip\n\nsolver = CapSkip(\n    host="127.0.0.1",\n    port=8080,\n    recaptchaTimeout=300,   # seconds, shared with Turnstile and GeeTest\n)<\/pre>\n
CapSkip runs on your own machine, so the desktop app has to be open before any of this works.<\/p>\n
The basic call<\/h2>\n
result = solver.recaptcha(\n    sitekey="6Lc...YOUR_SITEKEY",\n    url="https:\/\/example.com\/checkout",\n    version="v3",\n    action="submit",\n)\n\nprint(result["code"])   # the v3 token<\/pre>\n
Two things differ from v2. version=\"v3\"<\/code> is required, and action<\/code> should match whatever the page passes to grecaptcha.execute<\/code>. If you omit it the default is verify<\/code>.<\/p>\n
Why the action matters<\/h2>\n
v3 actions are labels the site attaches to each protected interaction, so a login and a checkout can be scored separately. The site’s own backend usually checks that the action on the returned token matches the action it expected for that endpoint.<\/p>\n
Send the wrong one and the token is technically valid but arrives labelled for a different interaction, which many backends reject outright. Read the real value out of the page rather than guessing:<\/p>\n
import re\nimport requests\n\nhtml = requests.get("https:\/\/example.com\/checkout").text\n\n# Sites usually call execute() with the action as a literal string.\nmatch = re.search(r"execute\\([^,]+,\\s*\\{\\s*action:\\s*['\\"]([^'\\"]+)", html)\naction = match.group(1) if match else "verify"\n\nresult = solver.recaptcha(\n    sitekey=sitekey, url=page_url, version="v3", action=action,\n)<\/pre>\n
Common values are login<\/code>, submit<\/code>, homepage<\/code> and checkout<\/code>, but they are arbitrary strings chosen by whoever built the site.<\/p>\n
Enterprise v3<\/h2>\n
Enterprise is an orthogonal flag rather than a separate product, so it stacks on top:<\/p>\n
result = solver.recaptcha(\n    sitekey=sitekey,\n    url=page_url,\n    version="v3",\n    enterprise=1,\n    action="submit",\n)<\/pre>\n
You can tell Enterprise from standard by the script the page loads. Enterprise pulls enterprise.js<\/code>, standard pulls api.js<\/code>. Guessing wrong causes the solve to fail rather than returning a bad token, so it is cheap to check.<\/p>\n
Submitting the token<\/h2>\n
import requests\n\nresponse = requests.post(\n    "https:\/\/example.com\/checkout",\n    data={\n        "g-recaptcha-response": result["code"],\n        "order_id": "...",\n    },\n)<\/pre>\n
Some v3 integrations use a different field name, or send the token as JSON, because there is no standard form widget to constrain them. Check what the page’s own JavaScript does before assuming g-recaptcha-response<\/code>.<\/p>\n
Solving in bulk<\/h2>\n
Python is the only CapSkip SDK where AsyncCapSkip<\/code> is a real async client rather than an alias, so it genuinely overlaps work:<\/p>\n
import asyncio\nfrom capskip import AsyncCapSkip\n\nasync def main():\n    solver = AsyncCapSkip()\n    tokens = await asyncio.gather(*[\n        solver.recaptcha(sitekey=sitekey, url=u, version="v3", action="submit")\n        for u in urls\n    ])\n    return [t["code"] for t in tokens]\n\nasyncio.run(main())<\/pre>\n
Errors<\/h2>\n
from capskip import (\n    ValidationException, NetworkException, ApiException, TimeoutException,\n)\n\ntry:\n    result = solver.recaptcha(sitekey=sitekey, url=page_url, version="v3")\nexcept ValidationException:\n    pass   # missing sitekey or url\nexcept NetworkException:\n    pass   # CapSkip is not running\nexcept ApiException:\n    pass   # rejected sitekey or pageurl\nexcept TimeoutException:\n    pass   # exceeded recaptchaTimeout<\/pre>\n
Frequently asked questions<\/h2>\n
\n\n
What happens if I leave out the action?<\/h3>\n<\/summary>\n
It defaults to verify<\/code>. That works on sites that never check the action, and fails on sites that do. Since reading the real value out of the page is a few lines, it is worth doing rather than relying on the default.<\/p>\n<\/details>\n
\n\n
Can I check the score before submitting?<\/h3>\n<\/summary>\n
No. The score lives with Google and is only revealed to the site owner when their backend verifies the token. From the client side you get a token and nothing else, so there is no way to inspect or filter on the score before you submit.<\/p>\n<\/details>\n
\n\n
How long is a v3 token valid?<\/h3>\n<\/summary>\n
About two minutes, and single use, the same as v2. Solve immediately before the request that needs it rather than building up a pool.<\/p>\n<\/details>\n
Summary<\/h2>\n
Pass version=\"v3\"<\/code>, set action<\/code> to whatever the page actually uses, add enterprise=1<\/code> when the page loads enterprise.js<\/code>, and submit the token quickly because it expires in about two minutes.<\/p>\n
Other languages are covered on the reCAPTCHA v3 solver<\/a> page, the Enterprise specifics on the Enterprise solver<\/a> page, and the wider Python surface on the Python CAPTCHA solver<\/a> page. You can watch a real v3 token being generated on our v3 demo<\/a>, and CapSkip itself is an unlimited captcha solver<\/a> that runs locally.<\/p>\n","protected":false},"excerpt":{"rendered":"
reCAPTCHA v3 \u4e0e v2 \u662f\u540c\u4e00\u4e2a Python \u65b9\u6cd5\uff0c\u53ea\u591a\u4e86\u4e00\u4e2a version \u6807\u5fd7\u3002\u8ba9\u4eba\u8e29\u5751\u7684\u662f action\uff0c\u5b83\u5fc5\u987b\u4e0e\u9875\u9762\u4f7f\u7528\u7684\u5185\u5bb9\u4e00\u81f4\u3002<\/p>","protected":false},"author":1,"featured_media":24968,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"rank_math_title":"Solve reCAPTCHA v3 in Python | CapSkip","rank_math_description":"reCAPTCHA v3 needs a version flag and an action that matches the page. Here is the Python call for both standard and Enterprise, and where the token goes.","rank_math_focus_keyword":"solve recaptcha v3 in python","footnotes":""},"categories":[71],"tags":[],"class_list":["post-24969","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-google-recaptcha"],"_links":{"self":[{"href":"https:\/\/capskip.com\/zh\/wp-json\/wp\/v2\/posts\/24969","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/capskip.com\/zh\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/capskip.com\/zh\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/capskip.com\/zh\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/capskip.com\/zh\/wp-json\/wp\/v2\/comments?post=24969"}],"version-history":[{"count":1,"href":"https:\/\/capskip.com\/zh\/wp-json\/wp\/v2\/posts\/24969\/revisions"}],"predecessor-version":[{"id":24990,"href":"https:\/\/capskip.com\/zh\/wp-json\/wp\/v2\/posts\/24969\/revisions\/24990"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/capskip.com\/zh\/wp-json\/wp\/v2\/media\/24968"}],"wp:attachment":[{"href":"https:\/\/capskip.com\/zh\/wp-json\/wp\/v2\/media?parent=24969"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/capskip.com\/zh\/wp-json\/wp\/v2\/categories?post=24969"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/capskip.com\/zh\/wp-json\/wp\/v2\/tags?post=24969"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}