CaptchaSonic's MCP server: captcha solving for AI agents
How an AI agent solves captchas through CaptchaSonic's MCP server: hosted or local, its five tools, the Claude Code plugin, prices and the alternatives.
Published 2026-10-11 by Phillip Paul Inker. Sources re-read 2026-10-11. 11 sources.
Disclosure: Since 2026-10-11 the company behind this site and CaptchaSonic list each other as partners on their partners pages. This guide was written from CaptchaSonic's public code and documentation, read that day, and it changes nothing in the rubric or in any score.

What the MCP route is
The Model Context Protocol is, in its own documentation's words, an open-source standard for connecting AI applications to external systems. Plug a captcha solver in through it and the solver becomes a tool the agent can call. When a page throws a challenge, the agent hands it to the solver and gets the answer back, without anyone copying keys or tokens around.
Underneath, nothing changes. The solver still runs the loop every captcha API runs (a task created, a result polled, a token returned), and the token still expires on the captcha provider's clock. How a captcha solving API works covers that loop. This guide covers how CaptchaSonic exposes it to an agent.
Hosted or local
CaptchaSonic publishes its server on npm as @captchasonic/mcp-server, under the MIT licence. The package first appeared on 30 May 2026, and version 2.0.0 went up on 6 October 2026. It runs two ways.
Hosted, there's nothing to install: the client points at https://mcp.captchasonic.com and sends the API key as a bearer token. Local, the client starts the package with npx over stdio and passes the key in SONIC_API_KEY, which needs Node.js 20.3 or later. The hosted route needs no Node.js on your machine; the local one keeps the server process on it.
The commands below follow Claude Code's own syntax: claude mcp add --transport http with a --header for a bearer token, or --env and a -- separator for a local process. Claude Code adds a server to the current project by default. CaptchaSonic's docs give the same server as JSON configuration for Cursor, Windsurf and Antigravity.
- 1Get an API key
Sign up at my.captchasonic.com. Keys start with
sonic_, and new accounts get starter credit without a card. - 2Add the hosted server
claude mcp add --transport http captchasonic https://mcp.captchasonic.com --header "Authorization: Bearer sonic_xxx" - 3Or run it locally
claude mcp add captchasonic --env SONIC_API_KEY=sonic_xxx -- npx -y @captchasonic/mcp-server - 4Check it
Ask the agent to call
get_balance. A wallet balance back means the key works.
The five tools
Once connected, version 2.0.0 gives the agent five tools. With list_captcha_types an agent can read a type's price before it spends anything.
| Tool | What it does |
|---|---|
solve_token_captcha | Solves reCAPTCHA v2 and v3, Turnstile, Cloudflare's challenge page, Popular Captcha, GeeTest and MTCaptcha from the page address and site key, and waits for the token |
solve_image_captcha | Solves image grids, sliders, click challenges, OCR and audio from an image, and answers at once |
get_task_result | Fetches a token task's result by id, for clients that stop waiting early |
get_balance | Returns the wallet balance and plan limits |
list_captcha_types | Lists every supported type with its required fields, answer format and price |
The Claude Code plugin
For Claude Code there's also a plugin. Two commands add it: /plugin marketplace add captchasonic/captchasonic-skill, then /plugin install captchasonic. It brings three skills (captchasonic-setup, captchasonic-solve and captchasonic-balance) and ships a configuration that registers the MCP server on install. The API key still has to be set once.
A lighter plugin wraps the SDK instead of the server. sonic@captchasonic, from the captchasonic/sonic-sdk marketplace, adds /sonic:solve, /sonic:balance and /sonic:test-sdk.
What a solve costs from an agent
An agent pays the same per-solve prices as any other client, so the price list in CaptchaSonic's review applies unchanged. The rows an agent meets most:
| Challenge | Token | Image mode | Stated ceiling |
|---|---|---|---|
| reCAPTCHA v2 | $2.99 | $1.00 | 12 s |
| reCAPTCHA v3 | $1.45 | not listed | 3 s |
| Cloudflare Turnstile | $1.45 | not listed | 13 s |
| hCaptcha | by contact | $0.20 | 10 s |
| GeeTest | not listed | $2.99 | 14 s |
| Text and OCR | not listed | $0.50 | 3 s |
What raises the bill in an agent loop
Retries first. Google's documentation states that a reCAPTCHA token is valid for two minutes and can be verified once, so every retry needs a new solve, and every solve is charged.
Then waiting. The two minutes run from the moment the token is generated. An agent that solves first and thinks afterwards can pay for tokens it never submits. The token budget has the arithmetic.
The other solvers with an MCP server
CaptchaSonic isn't alone here. Three other vendors reviewed on this site publish MCP servers under their own GitHub accounts.
| Vendor | Package | Runs as | Scope | Since |
|---|---|---|---|---|
| CaptchaSonic | @captchasonic/mcp-server (npm) | Hosted or local | Solving, 5 tools | May 2026 |
| 2Captcha | @2captcha/mcp (npm) | Hosted or local | 40 tools, scraping and browser tools included | August 2026 |
| CapSolver | capsolver-mcp (PyPI) | Local; HTTP if you host it | reCAPTCHA v2 and v3, Turnstile | June 2026 |
| CapMonster Cloud | capmonster-mcp (uvx) | Local only, stdio | reCAPTCHA v2 and v3, Turnstile, DataDome; no hCaptcha | July 2026 |
How they differ
Scope is the big difference. 2Captcha's package is the broadest by far, a scraping toolkit with solving inside it. CaptchaSonic's is the narrowest and the most focused on solving. With 2Captcha's, it's one of the two you can use without running anything locally.
CapSolver and CapMonster Cloud ship Python servers you run yourself. CapSolver's can serve over HTTP once you host it; CapMonster Cloud's speaks stdio only and leaves hCaptcha out.
One gap is worth knowing. The official MCP Registry lists the CapSolver and CapMonster Cloud servers, and a search there for CaptchaSonic returned nothing on 11 October 2026. A client that discovers servers through the registry won't find CaptchaSonic's yet.
What the server can't do
It returns a valid token or answer. Whether the page then lets the agent through depends on the site's own checks and on the address the request comes from, which no solver changes. Why the exit address decides your captcha rate covers that half.
And the speeds are the vendor's. The price list states ceilings of 12 seconds for reCAPTCHA v2 and 13 for Turnstile, and its comparison table claims an average reCAPTCHA v2 solve under 3 seconds. We didn't run solves through the server to measure either.
- [1]Model Context Protocol, introduction Model Context Protocol, read 2026-10-11.
“MCP (Model Context Protocol) is an open-source standard for connecting AI applications to external systems.”
- [2]Claude Code docs, Connect Claude Code to tools via MCP Anthropic, read 2026-10-11.
“claude mcp add --transport http <name> <url> ... --header "Authorization: Bearer your-token"; claude mcp add [options] <name> -- <command> [args...]. Local scope is the default. A local-scoped server loads only in the project where you added it and stays private to you.”
- [3]CaptchaSonic MCP server, README CaptchaSonic, read 2026-10-11.
“No install. Point your client at https://mcp.captchasonic.com with your API key as a bearer token. Requires Node.js 20.3+. Tools: solve_token_captcha, solve_image_captcha, get_task_result, get_balance, list_captcha_types (every supported type with required fields, answer format and price). License MIT.”
- [4]CaptchaSonic docs, AI Agents and MCP CaptchaSonic, read 2026-10-11.
“A single stdio binary that exposes three tools (health_check, get_balance, solve_captcha). /plugin marketplace add captchasonic/captchasonic-skill, /plugin install captchasonic. It bundles three Claude skills and ships an .mcp.json that auto-configures the MCP server on install. claude plugin install sonic@captchasonic exposes /sonic:solve, /sonic:balance and /sonic:test-sdk.”
- [5]npm registry, @captchasonic/mcp-server npm, read 2026-10-11.
“Created 2026-05-30; version 2.0.0 published 2026-10-06; 138 downloads from 2026-09-11 to 2026-10-10.”
- [6]CaptchaSonic, Captcha solving prices CaptchaSonic, read 2026-10-11.
“Prices shown per 1,000 solves. reCAPTCHA v2 Token $2.99, Image $1.00, up to 12 s; reCAPTCHA v3 Token $1.45, up to 3 s; hCaptcha Token Contact, Image $0.20, up to 10 s; Cloudflare Turnstile Token $1.45, up to 13 s; GeeTest Image $2.99, up to 14 s; Text / OCR Image $0.50, up to 3 s. Avg. solve time (reCAPTCHA v2) < 3s. New accounts get a starter credit balance applied automatically, no card required.”
- [7]2Captcha MCP, README 2Captcha, read 2026-10-11.
“The official 2Captcha MCP package is @2captcha/mcp. It exposes 40 tools. Two deployment options: the hosted remote server (one URL, no installation) or a local instance via npx @2captcha/mcp.”
- [8]CapSolver MCP, README CapSolver, read 2026-10-11.
“Published on PyPI as capsolver-mcp and listed in the official MCP Registry. --transport {stdio,sse,streamable-http} Transport protocol (default: stdio). (reCAPTCHA v2/v3, Cloudflare Turnstile).”
- [9]CapMonster Cloud MCP, README CapMonster Cloud, read 2026-10-11.
“Official CapMonster Cloud MCP server, AI captcha solver for reCAPTCHA v2/v3, Cloudflare Turnstile & DataDome. hCaptcha is not currently supported. uvx capmonster-mcp. The server only runs over stdio.”
- [10]Official MCP Registry, server search Model Context Protocol Registry, read 2026-10-11.
“search=captchasonic: no servers. Listed: io.github.capsolver-ai/capsolver-mcp; io.github.CapMonsterCloud/capmonster-mcp-captcha-solver.”
- [11]Google reCAPTCHA developer guide, Verifying the user's response Google, read 2026-10-11.
“Each reCAPTCHA user response token is valid for two minutes, and can only be verified once to prevent replay attacks.”
Reviews this guide draws on
Twenty-seven priced types and an MCP server that runs hosted or local, at $2.99 per 1,000 reCAPTCHA v2 tokens. Its homepage claims are the part you can't check.
The widest type list and the deepest integration menu here, at a euro price that's a range rather than a rate. Pick it when coverage matters more than the last cent.
Mid-market rates with the best integration menu here for agent and browser automation. Its price list lives in the docs, and neither a speed nor a success rate is published.
The lowest published rates on the common types and a success percentage next to each one. It publishes no solving time, so budget the token window yourself.
Run a captcha service?Get it on the record.
Send us the pages that state your prices, speeds and limits. We read them, score them on the public rubric, and publish the review with the date.