captchakraken
A captcha solver for browser automation.
The Python engine and CLI behind CaptchaKraken.
OpenCV tile detection plus a fine-tuned Qwen3.5-9B vision model. Give it a
screenshot of a captcha and it returns the plan to solve it — which tiles to
select, where to click, what to drag, how far to slide, or what text to type.
Ships the captchakraken command.
Run the model on your own hardware, or point it at the hosted API and run nothing at all.
For demo videos, accuracy numbers, the browser driver, and the full self-hosting guide, see the main repo CaptchaKraken.
What it solves
| Vendor | Puzzles |
|---|---|
| reCAPTCHA | 3×3 and 4×4 image grids, including the dynamic re-deal |
| hCaptcha | Image grids, click, drag, connect-the-path, tetris-fit, animated |
| GeeTest v3 + v4 | Slide, icon, nine, svg, gobang, iconcrush |
| NetEase Yidun | Jigsaw, picture-click, icon-click |
| Tencent, Lemin, Prosopo | Slide, cropped-image and grid flows |
| BotDetect, MTCaptcha, Yandex | Distorted text — read and typed, not clicked |
| Cloudflare Turnstile | Via the checkbox flow (free on the hosted API) |
44 puzzle types, driven end to end in CI against generated fixtures on both the TypeScript and Python ports. Animated challenges are recorded, sliced into keyframes and answered with the frame the action belongs to.
Install
pip install captchakraken # client: OpenCV detection + vLLM HTTP planner
pip install "captchakraken[serve]" # + the serving stack (vLLM/torch) to self-host
The base install is lightweight — everything you need to solve captchas against
a vLLM server (local or remote). The [serve] extra pulls the heavy stack only
if you want to run the model yourself. The one-command
setup.sh installs [serve],
downloads the weights, and writes an env file for you.
No GPU? Use the hosted API
Point the client at https://api.captchakraken.com/v1 and run no model at all.
Sign in at captchakraken.com/signin for a
ck_live_… key, or let the MCP server write one for you:
claude mcp add captchakraken -- npx -y captchakraken-mcp
# then call sign_in, then create_api_key
create_api_key writes the key and the endpoint to ~/.captchakraken/credentials,
which the client reads on its own — no environment variables needed.
Hands-off server
The vLLM server is managed for you. On your first solve, if the configured
endpoint is local and nothing is listening, a server is started
automatically and reused. Point VLLM_BASE_URL at a server you already run to
skip local management entirely.
captchakraken server start | stop | status | run
Usage
# Solve an image/video: classify → find_grid → plan. Prints the click actions.
captchakraken path/to/captcha.png
captchakraken path/to/captcha.png --puzzle-source hcaptcha
from captchakraken import CaptchaSolver
solver = CaptchaSolver() # connects to / auto-starts a local vLLM
actions = solver.solve("captcha.png")
Pure-OpenCV tool subcommands (no model): find-grid, find-checkbox,
detect-selected, grid-cell-states, find-move, find-movable, and a
persistent serve worker the browser driver polls.
Configuration (model-agnostic)
Everything model-specific lives in captchakraken.config and is env-overridable
— the solver never hard-codes a model.
| Variable | Meaning | Default |
|---|---|---|
VLLM_BASE_URL |
Inference endpoint | ~/.captchakraken/credentials, else http://localhost:8000/v1 |
CAPTCHA_KRAKEN_API_KEY |
Bearer token (VLLM_API_KEY also accepted) |
~/.captchakraken/credentials, else EMPTY |
CAPTCHA_BASE_MODEL |
Base weights vLLM loads | RedHatAI/Qwen3.5-9B-FP8-dynamic |
CAPTCHA_LORA_ADAPTER |
Captcha adapter (HF id or path) | CaptchaKraken/CaptchaKraken-Lora-v1.2 |
CAPTCHA_LORA_NAME |
Served adapter name the client requests | captcha-v12 |
CAPTCHA_KRAKEN_AUTOSTART |
0 disables local auto-start |
1 |
License
CaptchaKraken Source-Available License v1.1 — see LICENSE. Build with it (scrapers, QA tooling) and run it against any browser you like, stealth or not. You may not sell the solve itself, ship a thin wrapper (browser extension, hosted solving API), or bundle it as a built-in feature of a stealth/antidetect browser you distribute — using it with one is fine. Those three are licensable, not categorically refused: open an issue to ask.
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file captchakraken-2.6.1.tar.gz.
File metadata
- Download URL: captchakraken-2.6.1.tar.gz
- Upload date:
- Size: 262.5 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
753a8ba20b33ad64bf51f4e29927d2f8c36c68e52ae6d163712aad5e75a22624
|
|
| MD5 |
b967989b3208167850206b0aabfb70b9
|
|
| BLAKE2b-256 |
f6390b4479b313c773316cef8e748fffa4fe99c865c40eb4b83004b9ac386a98
|
Provenance
The following attestation bundles were made for captchakraken-2.6.1.tar.gz:
Publisher:
publish.yml on JWriter20/CaptchaKraken
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
captchakraken-2.6.1.tar.gz -
Subject digest:
753a8ba20b33ad64bf51f4e29927d2f8c36c68e52ae6d163712aad5e75a22624 - Sigstore transparency entry: 2569448774
- Sigstore integration time:
-
Permalink:
JWriter20/CaptchaKraken@a0dcc4c3505be91a3a3aa4ecd4314d9739fee3ed -
Branch / Tag:
refs/heads/main - Owner: https://github.com/JWriter20
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yml@a0dcc4c3505be91a3a3aa4ecd4314d9739fee3ed -
Trigger Event:
push
-
Statement type:
File details
Details for the file captchakraken-2.6.1-py3-none-any.whl.
File metadata
- Download URL: captchakraken-2.6.1-py3-none-any.whl
- Upload date:
- Size: 189.5 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
e3b235c5c2ff8df2a6e5b95c0915fc365dad88481452bee777f292d447c78990
|
|
| MD5 |
291ad82952763d26420891b5a771a620
|
|
| BLAKE2b-256 |
fa0fd0341fa71f7a253b0138f7b162daa11a25198b92b3739335e3b309672fa1
|
Provenance
The following attestation bundles were made for captchakraken-2.6.1-py3-none-any.whl:
Publisher:
publish.yml on JWriter20/CaptchaKraken
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
captchakraken-2.6.1-py3-none-any.whl -
Subject digest:
e3b235c5c2ff8df2a6e5b95c0915fc365dad88481452bee777f292d447c78990 - Sigstore transparency entry: 2569448777
- Sigstore integration time:
-
Permalink:
JWriter20/CaptchaKraken@a0dcc4c3505be91a3a3aa4ecd4314d9739fee3ed -
Branch / Tag:
refs/heads/main - Owner: https://github.com/JWriter20
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yml@a0dcc4c3505be91a3a3aa4ecd4314d9739fee3ed -
Trigger Event:
push
-
Statement type: