[ Guide ]

CaptchaSonic's MCP server: captcha solving for AI agents

How an AI agent solves captchas through CaptchaSonic's MCP server: hosted or local, its five tools, the Claude Code plugin, prices and the alternatives.

Published 2026-10-11 by Phillip Paul Inker. Sources re-read 2026-10-11. 11 sources.

Disclosure: Since 2026-10-11 the company behind this site and CaptchaSonic list each other as partners on their partners pages. This guide was written from CaptchaSonic's public code and documentation, read that day, and it changes nothing in the rubric or in any score.

What the MCP route is

The Model Context Protocol is, in its own documentation's words, an open-source standard for connecting AI applications to external systems. Plug a captcha solver in through it and the solver becomes a tool the agent can call. When a page throws a challenge, the agent hands it to the solver and gets the answer back, without anyone copying keys or tokens around.

Underneath, nothing changes. The solver still runs the loop every captcha API runs (a task created, a result polled, a token returned), and the token still expires on the captcha provider's clock. How a captcha solving API works covers that loop. This guide covers how CaptchaSonic exposes it to an agent.

Hosted or local

CaptchaSonic publishes its server on npm as @captchasonic/mcp-server, under the MIT licence. The package first appeared on 30 May 2026, and version 2.0.0 went up on 6 October 2026. It runs two ways.

Hosted, there's nothing to install: the client points at https://mcp.captchasonic.com and sends the API key as a bearer token. Local, the client starts the package with npx over stdio and passes the key in SONIC_API_KEY, which needs Node.js 20.3 or later. The hosted route needs no Node.js on your machine; the local one keeps the server process on it.

The commands below follow Claude Code's own syntax: claude mcp add --transport http with a --header for a bearer token, or --env and a -- separator for a local process. Claude Code adds a server to the current project by default. CaptchaSonic's docs give the same server as JSON configuration for Cursor, Windsurf and Antigravity.

  1. 1
    Get an API key

    Sign up at my.captchasonic.com. Keys start with sonic_, and new accounts get starter credit without a card.

  2. 2
    Add the hosted server

    claude mcp add --transport http captchasonic https://mcp.captchasonic.com --header "Authorization: Bearer sonic_xxx"

  3. 3
    Or run it locally

    claude mcp add captchasonic --env SONIC_API_KEY=sonic_xxx -- npx -y @captchasonic/mcp-server

  4. 4
    Check it

    Ask the agent to call get_balance. A wallet balance back means the key works.

The five tools

Once connected, version 2.0.0 gives the agent five tools. With list_captcha_types an agent can read a type's price before it spends anything.

ToolWhat it does
solve_token_captchaSolves reCAPTCHA v2 and v3, Turnstile, Cloudflare's challenge page, Popular Captcha, GeeTest and MTCaptcha from the page address and site key, and waits for the token
solve_image_captchaSolves image grids, sliders, click challenges, OCR and audio from an image, and answers at once
get_task_resultFetches a token task's result by id, for clients that stop waiting early
get_balanceReturns the wallet balance and plan limits
list_captcha_typesLists every supported type with its required fields, answer format and price
From the server's README on GitHub, version 2.0.0, read 11 October 2026.

The Claude Code plugin

For Claude Code there's also a plugin. Two commands add it: /plugin marketplace add captchasonic/captchasonic-skill, then /plugin install captchasonic. It brings three skills (captchasonic-setup, captchasonic-solve and captchasonic-balance) and ships a configuration that registers the MCP server on install. The API key still has to be set once.

A lighter plugin wraps the SDK instead of the server. sonic@captchasonic, from the captchasonic/sonic-sdk marketplace, adds /sonic:solve, /sonic:balance and /sonic:test-sdk.

What a solve costs from an agent

An agent pays the same per-solve prices as any other client, so the price list in CaptchaSonic's review applies unchanged. The rows an agent meets most:

ChallengeTokenImage modeStated ceiling
reCAPTCHA v2$2.99$1.0012 s
reCAPTCHA v3$1.45not listed3 s
Cloudflare Turnstile$1.45not listed13 s
hCaptchaby contact$0.2010 s
GeeTestnot listed$2.9914 s
Text and OCRnot listed$0.503 s
Per 1,000 successful solves, from captchasonic.com/pricing, read 11 October 2026. Ceilings are the vendor's stated maximum times.

What raises the bill in an agent loop

Retries first. Google's documentation states that a reCAPTCHA token is valid for two minutes and can be verified once, so every retry needs a new solve, and every solve is charged.

Then waiting. The two minutes run from the moment the token is generated. An agent that solves first and thinks afterwards can pay for tokens it never submits. The token budget has the arithmetic.

The other solvers with an MCP server

CaptchaSonic isn't alone here. Three other vendors reviewed on this site publish MCP servers under their own GitHub accounts.

VendorPackageRuns asScopeSince
CaptchaSonic@captchasonic/mcp-server (npm)Hosted or localSolving, 5 toolsMay 2026
2Captcha@2captcha/mcp (npm)Hosted or local40 tools, scraping and browser tools includedAugust 2026
CapSolvercapsolver-mcp (PyPI)Local; HTTP if you host itreCAPTCHA v2 and v3, TurnstileJune 2026
CapMonster Cloudcapmonster-mcp (uvx)Local only, stdioreCAPTCHA v2 and v3, Turnstile, DataDome; no hCaptchaJuly 2026
From each project's README and repository dates on GitHub, read 11 October 2026. 2Captcha's first and narrower server (Python, reCAPTCHA v2 only) dates from April 2026.

How they differ

Scope is the big difference. 2Captcha's package is the broadest by far, a scraping toolkit with solving inside it. CaptchaSonic's is the narrowest and the most focused on solving. With 2Captcha's, it's one of the two you can use without running anything locally.

CapSolver and CapMonster Cloud ship Python servers you run yourself. CapSolver's can serve over HTTP once you host it; CapMonster Cloud's speaks stdio only and leaves hCaptcha out.

One gap is worth knowing. The official MCP Registry lists the CapSolver and CapMonster Cloud servers, and a search there for CaptchaSonic returned nothing on 11 October 2026. A client that discovers servers through the registry won't find CaptchaSonic's yet.

What the server can't do

It returns a valid token or answer. Whether the page then lets the agent through depends on the site's own checks and on the address the request comes from, which no solver changes. Why the exit address decides your captcha rate covers that half.

And the speeds are the vendor's. The price list states ceilings of 12 seconds for reCAPTCHA v2 and 13 for Turnstile, and its comparison table claims an average reCAPTCHA v2 solve under 3 seconds. We didn't run solves through the server to measure either.

Sources
  1. [1]
    Model Context Protocol, introduction Model Context Protocol, read 2026-10-11.

    “MCP (Model Context Protocol) is an open-source standard for connecting AI applications to external systems.”

  2. [2]
    Claude Code docs, Connect Claude Code to tools via MCP Anthropic, read 2026-10-11.

    “claude mcp add --transport http <name> <url> ... --header "Authorization: Bearer your-token"; claude mcp add [options] <name> -- <command> [args...]. Local scope is the default. A local-scoped server loads only in the project where you added it and stays private to you.”

  3. [3]
    CaptchaSonic MCP server, README CaptchaSonic, read 2026-10-11.

    “No install. Point your client at https://mcp.captchasonic.com with your API key as a bearer token. Requires Node.js 20.3+. Tools: solve_token_captcha, solve_image_captcha, get_task_result, get_balance, list_captcha_types (every supported type with required fields, answer format and price). License MIT.”

  4. [4]
    CaptchaSonic docs, AI Agents and MCP CaptchaSonic, read 2026-10-11.

    “A single stdio binary that exposes three tools (health_check, get_balance, solve_captcha). /plugin marketplace add captchasonic/captchasonic-skill, /plugin install captchasonic. It bundles three Claude skills and ships an .mcp.json that auto-configures the MCP server on install. claude plugin install sonic@captchasonic exposes /sonic:solve, /sonic:balance and /sonic:test-sdk.”

  5. [5]
    npm registry, @captchasonic/mcp-server npm, read 2026-10-11.

    “Created 2026-05-30; version 2.0.0 published 2026-10-06; 138 downloads from 2026-09-11 to 2026-10-10.”

  6. [6]
    CaptchaSonic, Captcha solving prices CaptchaSonic, read 2026-10-11.

    “Prices shown per 1,000 solves. reCAPTCHA v2 Token $2.99, Image $1.00, up to 12 s; reCAPTCHA v3 Token $1.45, up to 3 s; hCaptcha Token Contact, Image $0.20, up to 10 s; Cloudflare Turnstile Token $1.45, up to 13 s; GeeTest Image $2.99, up to 14 s; Text / OCR Image $0.50, up to 3 s. Avg. solve time (reCAPTCHA v2) < 3s. New accounts get a starter credit balance applied automatically, no card required.”

  7. [7]
    2Captcha MCP, README 2Captcha, read 2026-10-11.

    “The official 2Captcha MCP package is @2captcha/mcp. It exposes 40 tools. Two deployment options: the hosted remote server (one URL, no installation) or a local instance via npx @2captcha/mcp.”

  8. [8]
    CapSolver MCP, README CapSolver, read 2026-10-11.

    “Published on PyPI as capsolver-mcp and listed in the official MCP Registry. --transport {stdio,sse,streamable-http} Transport protocol (default: stdio). (reCAPTCHA v2/v3, Cloudflare Turnstile).”

  9. [9]
    CapMonster Cloud MCP, README CapMonster Cloud, read 2026-10-11.

    “Official CapMonster Cloud MCP server, AI captcha solver for reCAPTCHA v2/v3, Cloudflare Turnstile & DataDome. hCaptcha is not currently supported. uvx capmonster-mcp. The server only runs over stdio.”

  10. [10]
    Official MCP Registry, server search Model Context Protocol Registry, read 2026-10-11.

    “search=captchasonic: no servers. Listed: io.github.capsolver-ai/capsolver-mcp; io.github.CapMonsterCloud/capmonster-mcp-captcha-solver.”

  11. [11]
    Google reCAPTCHA developer guide, Verifying the user's response Google, read 2026-10-11.

    “Each reCAPTCHA user response token is valid for two minutes, and can only be verified once to prevent replay attacks.”

Reviews this guide draws on

Run a captcha service?Get it on the record.

Send us the pages that state your prices, speeds and limits. We read them, score them on the public rubric, and publish the review with the date.