capskip-mcp 1.1.0 → 1.2.0

package/CHANGELOG.md

@@ -10,6 +10,46 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 Nothing yet. Add entries here as changes land; they move into a version
 section at release time.
 
+## [1.2.0] - 2026-09-22
+
+### Added
+
+- **`capskip_solve_capy`** — solve a Capy Puzzle captcha. Unlike every other
+  solve tool, the answer is **not a token**: the result carries `captchakey`,
+  `challengekey` and `answer`, which all go into the target form's
+  `capy_captchakey`, `capy_challengekey` and `capy_answer` fields. The text reply
+  names all three, since an agent acting on `code` alone would post a JSON blob
+  into a field expecting a drag path. Optional `api_server` and `proxy`.
+- **`capskip_solve_captchafox`** — solve a CaptchaFox challenge. Returns `token`
+  for the form's `cf-captcha-response` field, plus `userAgent` when the solve
+  reported one: the UA the browser actually minted the token under, which is not
+  one the caller sent. Optional `api_server` selects the widget source (the MAM
+  package returns a `MAM_` prefixed token) and `proxy`.
+- **`capskip_solve_friendly_captcha`** — solve a Friendly Captcha proof-of-work
+  challenge. Takes `version` (`v1`/`v2`) or `module_script` / `nomodule_script`
+  so CapSkip can read the version off the build the site loads, plus optional
+  `api_server` for the data-residency tenant and `proxy`. The text reply names
+  the form field for the version that was actually solved —
+  `frc-captcha-solution` on v1, `frc-captcha-response` on v2 — because mixing
+  those up is the single most common way a working integration breaks.
+- Output schemas `capyOutput`, `captchaFoxOutput` and `friendlyCaptchaOutput`.
+
+### Changed
+
+- Requires `capskip` (the Node SDK) `^1.3.0`, which is where the three new solve
+  methods live.
+- The server's instructions now list Capy, CaptchaFox and Friendly Captcha among
+  the types it can solve, so a client choosing a tool from the listing sees them.
+
+### Notes
+
+- CaptchaFox and Friendly Captcha use `CAPSKIP_RECAPTCHA_TIMEOUT`: the first is a
+  real browser solve, and the second has its difficulty set per request by the
+  service (and always solves in a browser on v2). Capy uses
+  `CAPSKIP_TIMEOUT` — it is one HTTP fetch plus pixel math, though it still takes
+  about two seconds because Capy refuses answers that arrive faster than a human
+  could have produced them.
+
 ## [1.1.0] - 2026-09-12
 
 ### Added

package/README.md

@@ -5,7 +5,7 @@
 [![Tests](https://github.com/capskip/capskip-mcp/actions/workflows/ci.yml/badge.svg)](https://github.com/capskip/capskip-mcp/actions/workflows/ci.yml)
 [![npm](https://img.shields.io/npm/v/capskip-mcp.svg)](https://www.npmjs.com/package/capskip-mcp)
 
-**A captcha solver [MCP](https://modelcontextprotocol.io) server that lets AI agents solve reCAPTCHA, Cloudflare Turnstile, GeeTest, ALTCHA and image captchas instead of stalling on them.**
+**A captcha solver [MCP](https://modelcontextprotocol.io) server that lets AI agents solve reCAPTCHA, Cloudflare Turnstile, GeeTest, ALTCHA, Capy Puzzle, CaptchaFox, Friendly Captcha and image captchas instead of stalling on them.**
 
 Works with Claude Desktop, Claude Code, Cursor, VS Code, and any Model Context Protocol client. Powered by [CapSkip](https://capskip.com) — a **local captcha solver** that runs on your own machine, licensed once rather than billed per solve.
 
@@ -17,7 +17,7 @@ npx -y capskip-mcp
 
 ## What this solves
 
-An AI agent driving a browser hits a captcha and stops. This server gives it five tools so it can read the sitekey, solve the challenge, and carry on — without a human stepping in and without a per-solve API bill.
+An AI agent driving a browser hits a captcha and stops. This server gives it nine tools so it can read the sitekey, solve the challenge, and carry on — without a human stepping in and without a per-solve API bill.
 
 CapSkip runs as a desktop app exposing a captcha-solving HTTP API on `127.0.0.1:8080`. `capskip-mcp` is a thin translation layer over that API: the fifth official CapSkip client, alongside the [Python](https://github.com/capskip/capskip-python), [Node.js](https://github.com/capskip/capskip-node), [PHP](https://github.com/capskip/capskip-php) and [.NET](https://github.com/capskip/capskip-dotnet) SDKs.
 
@@ -32,6 +32,9 @@ CapSkip runs as a desktop app exposing a captcha-solving HTTP API on `127.0.0.1:
 | **Cloudflare Turnstile solver** | `capskip_solve_turnstile` | Widget and interstitial challenge pages |
 | **GeeTest v3 solver** | `capskip_solve_geetest` | Slide puzzle; returns challenge/validate/seccode |
 | **ALTCHA solver** | `capskip_solve_altcha` | Proof-of-work; returns the token for the `altcha` field |
+| **Capy Puzzle solver** | `capskip_solve_capy` | Slide puzzle; returns three form values, not a token |
+| **CaptchaFox solver** | `capskip_solve_captchafox` | Returns the token for the `cf-captcha-response` field |
+| **Friendly Captcha solver** | `capskip_solve_friendly_captcha` | Proof-of-work; say which version (v1 or v2) |
 | **Image captcha solver** (text/OCR) | `capskip_solve_image_captcha` | File path, URL, data URI, or base64 |
 
 **Not supported: hCaptcha and FunCaptcha/Arkose.** There is no tool for them and `capskip_solve_recaptcha` will not work on one. hCaptcha is the easiest to misidentify since it also carries a `data-sitekey` — check for `class="h-captcha"` or a `js.hcaptcha.com` script first.
@@ -77,7 +80,7 @@ No install step — `npx` fetches and runs it on demand.
 
 ### 3. Restart your client
 
-It should list five tools, all prefixed `capskip_`.
+It should list nine tools, all prefixed `capskip_`.
 
 ### 4. Ask your agent to solve a captcha
 
@@ -114,6 +117,9 @@ CapSkip exposes the familiar `in.php` / `res.php` endpoints, so it works as a **
 | `capskip_solve_turnstile` | Solve a Cloudflare Turnstile widget or challenge page | `sitekey`, `url` |
 | `capskip_solve_geetest` | Solve a GeeTest v3 slide-puzzle captcha | `gt`, `challenge`, `url` |
 | `capskip_solve_altcha` | Solve an ALTCHA proof-of-work challenge | `url`, and one of `challenge_url` / `challenge_json` |
+| `capskip_solve_capy` | Solve a Capy Puzzle captcha | `sitekey`, `url` |
+| `capskip_solve_captchafox` | Solve a CaptchaFox challenge | `sitekey`, `url` |
+| `capskip_solve_friendly_captcha` | Solve a Friendly Captcha proof-of-work challenge | `sitekey`, `url` |
 
 > **There is no `min_score` parameter on `capskip_solve_recaptcha`.** reCAPTCHA v3 scores are assigned by Google from signals no solver has access to — local or cloud, none can raise a score after the fact. A `min_score` option would promise control that does not exist, so it is deliberately left out. Passing it anyway is rejected as an unrecognized key, not silently ignored.
 
@@ -153,10 +159,15 @@ For non-agent scripts, use the language SDKs directly — see the [Playwright](h
 | `CAPSKIP_HOST` | `127.0.0.1` | CapSkip host |
 | `CAPSKIP_PORT` | `8080` | API port from CapSkip settings |
 | `CAPSKIP_TIMEOUT` | `120` | Default `timeout` for `capskip_solve_image_captcha`, seconds |
-| `CAPSKIP_RECAPTCHA_TIMEOUT` | `300` | Default `timeout` for the reCAPTCHA / Turnstile / GeeTest tools, seconds |
+| `CAPSKIP_RECAPTCHA_TIMEOUT` | `300` | Default `timeout` for the reCAPTCHA / Turnstile / GeeTest / CaptchaFox / Friendly Captcha tools, seconds |
 
-ALTCHA uses `CAPSKIP_DEFAULT_TIMEOUT`, not the reCAPTCHA one — it is CPU
-proof-of-work measured in milliseconds, not a browser solve.
+ALTCHA and Capy use `CAPSKIP_DEFAULT_TIMEOUT`, not the reCAPTCHA one — neither
+is a browser solve. ALTCHA is CPU proof-of-work measured in milliseconds; a Capy
+solve is one HTTP fetch plus pixel math, held back to roughly two seconds because
+Capy refuses answers that arrive faster than a human could have produced them.
+
+Friendly Captcha is proof-of-work too but takes the longer timeout: the service
+sets the difficulty per request, and v2 always solves in a browser.
 
 | `CAPSKIP_POLLING_INTERVAL` | `5` | Max seconds between polls |
 
@@ -186,6 +197,9 @@ Every solve tool returns a human-readable text block and `structuredContent` mat
 - **`capskip_solve_turnstile`** adds `userAgent`. Submit the token with this exact User-Agent — Cloudflare rejects a token replayed under a different one.
 - **`capskip_solve_geetest`** adds `challenge`, `validate` and `seccode`, to post back exactly as the site's own front-end would; `code` keeps the raw JSON string CapSkip returns.
 - **`capskip_solve_altcha`** adds `token`, the base64 payload to submit verbatim in the site's form field named `altcha`, and `number`, the counter that solved the challenge; `code` holds the same string as `token`.
+- **`capskip_solve_capy`** adds `captchakey`, `challengekey` and `answer` — **not** a token. All three go into the target form, in fields named `capy_captchakey`, `capy_challengekey` and `capy_answer`; `code` keeps the raw answer as JSON. The `answer` is the drag path the widget would have recorded, so submit it verbatim, and promptly: the challenge key is single-use and short-lived.
+- **`capskip_solve_captchafox`** adds `token`, for the form field named `cf-captcha-response`, and `userAgent` when the solve reported one — the UA the browser minted the token under, not any you sent. Submit under that one.
+- **`capskip_solve_friendly_captcha`** adds `token`. The field it goes into differs by version: `frc-captcha-solution` on v1, `frc-captcha-response` on v2. The text reply names the right one for the version that was solved.
 
 Long solves emit MCP progress notifications, so a 45-second reCAPTCHA does not trip your client's tool-call timeout.
 
@@ -228,11 +242,11 @@ The MCP server is MIT-licensed and free. It requires the CapSkip desktop app, wh
 
 ### Which captchas can it solve?
 
-reCAPTCHA v2 (checkbox and invisible), reCAPTCHA v3, reCAPTCHA Enterprise, Cloudflare Turnstile, GeeTest v3, ALTCHA, and image/text captchas. hCaptcha and FunCaptcha/Arkose are not supported.
+reCAPTCHA v2 (checkbox and invisible), reCAPTCHA v3, reCAPTCHA Enterprise, Cloudflare Turnstile, GeeTest v3, ALTCHA, Capy Puzzle, CaptchaFox, Friendly Captcha, and image/text captchas. hCaptcha and FunCaptcha/Arkose are not supported.
 
 ### Why does my reCAPTCHA v3 token get a low score?
 
-Google assigns v3 scores from signals such as IP reputation and browsing history. A solver returns a valid token, but cannot raise the score. If a site enforces a high threshold, solve from a cleaner IP — a proxy is supported on the reCAPTCHA, Turnstile, GeeTest and ALTCHA tools (for ALTCHA it applies only to the challenge fetch).
+Google assigns v3 scores from signals such as IP reputation and browsing history. A solver returns a valid token, but cannot raise the score. If a site enforces a high threshold, solve from a cleaner IP — a proxy is supported on every solve tool except the image one (for ALTCHA it applies only to the challenge fetch, and for Capy only to the puzzle-image fetch).
 
 ### Does it need my captcha to be on a public page?
 

package/dist/schemas.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.statusOutput = exports.altchaOutput = exports.geetestOutput = exports.turnstileOutput = exports.baseSolveOutput = exports.pageUrlSchema = exports.timeoutSchema = exports.proxySchema = void 0;
+exports.statusOutput = exports.friendlyCaptchaOutput = exports.captchaFoxOutput = exports.capyOutput = exports.altchaOutput = exports.geetestOutput = exports.turnstileOutput = exports.baseSolveOutput = exports.pageUrlSchema = exports.timeoutSchema = exports.proxySchema = void 0;
 const zod_1 = require("zod");
 /**
  * CapSkip maps only these four proxy schemes and answers ERROR_BAD_PARAMETERS
@@ -48,6 +48,32 @@ exports.altchaOutput = exports.baseSolveOutput.extend({
     /** The counter that satisfied the challenge. Absent if the payload did not decode. */
     number: zod_1.z.number().optional(),
 });
+exports.capyOutput = exports.baseSolveOutput.extend({
+    /** The value for the target form's `capy_captchakey` field. */
+    captchakey: zod_1.z.string().optional(),
+    /** The value for the target form's `capy_challengekey` field. Single-use. */
+    challengekey: zod_1.z.string().optional(),
+    /** The value for the target form's `capy_answer` field — the drag path, verbatim. */
+    answer: zod_1.z.string().optional(),
+    /** Empty for a puzzle solve; present only for shape compatibility. */
+    respKey: zod_1.z.string().optional(),
+});
+exports.captchaFoxOutput = exports.baseSolveOutput.extend({
+    /** The token to submit in the site's `cf-captcha-response` field, verbatim. */
+    token: zod_1.z.string(),
+    /**
+     * The User-Agent the token was minted under — the browser's own, not one the
+     * caller sent. Absent when the solve captured none rather than guessed.
+     */
+    userAgent: zod_1.z.string().optional(),
+});
+exports.friendlyCaptchaOutput = exports.baseSolveOutput.extend({
+    /**
+     * The token to submit verbatim — in `frc-captcha-solution` on v1, or
+     * `frc-captcha-response` on v2. The field names differ between versions.
+     */
+    token: zod_1.z.string(),
+});
 exports.statusOutput = zod_1.z.object({
     reachable: zod_1.z.boolean(),
     host: zod_1.z.string(),

package/dist/schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../src/schemas.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAExB;;;GAGG;AACU,QAAA,WAAW,GAAG,OAAC,CAAC,MAAM,CAAC;IAClC,IAAI,EAAE,OAAC;SACJ,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;SAC5C,QAAQ,CAAC,iDAAiD,CAAC;IAC9D,GAAG,EAAE,OAAC;SACH,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,6DAA6D,CAAC;CAC3E,CAAC,CAAC;AAIH;;;GAGG;AACU,QAAA,aAAa,GAAG,OAAC;KAC3B,MAAM,EAAE;KACR,GAAG,EAAE;KACL,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,QAAQ,EAAE;KACV,QAAQ,CAAC,gDAAgD,CAAC,CAAC;AAEjD,QAAA,aAAa,GAAG,OAAC;KAC3B,GAAG,EAAE;KACL,QAAQ,CAAC,gEAAgE,CAAC,CAAC;AAEjE,QAAA,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC;IACtC,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;IACrB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;IAChB,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE;CACzB,CAAC,CAAC;AAEU,QAAA,eAAe,GAAG,uBAAe,CAAC,MAAM,CAAC;IACpD,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAEU,QAAA,aAAa,GAAG,uBAAe,CAAC,MAAM,CAAC;IAClD,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAEU,QAAA,YAAY,GAAG,uBAAe,CAAC,MAAM,CAAC;IACjD,gFAAgF;IAChF,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE;IACjB,sFAAsF;IACtF,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC;AAEU,QAAA,YAAY,GAAG,OAAC,CAAC,MAAM,CAAC;IACnC,SAAS,EAAE,OAAC,CAAC,OAAO,EAAE;IACtB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;IAChB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE;CACnB,CAAC,CAAC","sourcesContent":["import { z } from 'zod';\n\n/**\n * CapSkip maps only these four proxy schemes and answers ERROR_BAD_PARAMETERS\n * for anything else, SOCKS4 included.\n */\nexport const proxySchema = z.object({\n  type: z\n    .enum(['HTTP', 'HTTPS', 'SOCKS5', 'SOCKS5H'])\n    .describe('Proxy scheme. CapSkip supports only these four.'),\n  uri: z\n    .string()\n    .min(1)\n    .describe('Proxy address as `host:port` or `login:password@host:port`.'),\n});\n\nexport type ProxyInput = z.infer<typeof proxySchema>;\n\n/**\n * Bounded at 600s. A larger value is rejected rather than clamped so the caller\n * learns the limit instead of silently getting a shorter wait.\n */\nexport const timeoutSchema = z\n  .number()\n  .int()\n  .min(1)\n  .max(600)\n  .optional()\n  .describe('Seconds to wait before giving up. Maximum 600.');\n\nexport const pageUrlSchema = z\n  .url()\n  .describe('Full URL of the page the captcha appears on, including scheme.');\n\nexport const baseSolveOutput = z.object({\n  captchaId: z.string(),\n  code: z.string(),\n  solveSeconds: z.number(),\n});\n\nexport const turnstileOutput = baseSolveOutput.extend({\n  userAgent: z.string().optional(),\n});\n\nexport const geetestOutput = baseSolveOutput.extend({\n  challenge: z.string().optional(),\n  validate: z.string().optional(),\n  seccode: z.string().optional(),\n});\n\nexport const altchaOutput = baseSolveOutput.extend({\n  /** The base64 payload to submit in the site's `altcha` form field, verbatim. */\n  token: z.string(),\n  /** The counter that satisfied the challenge. Absent if the payload did not decode. */\n  number: z.number().optional(),\n});\n\nexport const statusOutput = z.object({\n  reachable: z.boolean(),\n  host: z.string(),\n  port: z.number(),\n  latencyMs: z.number().optional(),\n  detail: z.string(),\n});\n"]}
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../src/schemas.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAExB;;;GAGG;AACU,QAAA,WAAW,GAAG,OAAC,CAAC,MAAM,CAAC;IAClC,IAAI,EAAE,OAAC;SACJ,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;SAC5C,QAAQ,CAAC,iDAAiD,CAAC;IAC9D,GAAG,EAAE,OAAC;SACH,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,6DAA6D,CAAC;CAC3E,CAAC,CAAC;AAIH;;;GAGG;AACU,QAAA,aAAa,GAAG,OAAC;KAC3B,MAAM,EAAE;KACR,GAAG,EAAE;KACL,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,QAAQ,EAAE;KACV,QAAQ,CAAC,gDAAgD,CAAC,CAAC;AAEjD,QAAA,aAAa,GAAG,OAAC;KAC3B,GAAG,EAAE;KACL,QAAQ,CAAC,gEAAgE,CAAC,CAAC;AAEjE,QAAA,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC;IACtC,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;IACrB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;IAChB,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE;CACzB,CAAC,CAAC;AAEU,QAAA,eAAe,GAAG,uBAAe,CAAC,MAAM,CAAC;IACpD,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAEU,QAAA,aAAa,GAAG,uBAAe,CAAC,MAAM,CAAC;IAClD,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAEU,QAAA,YAAY,GAAG,uBAAe,CAAC,MAAM,CAAC;IACjD,gFAAgF;IAChF,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE;IACjB,sFAAsF;IACtF,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC;AAEU,QAAA,UAAU,GAAG,uBAAe,CAAC,MAAM,CAAC;IAC/C,+DAA+D;IAC/D,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,6EAA6E;IAC7E,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,qFAAqF;IACrF,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,sEAAsE;IACtE,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAEU,QAAA,gBAAgB,GAAG,uBAAe,CAAC,MAAM,CAAC;IACrD,+EAA+E;IAC/E,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE;IACjB;;;OAGG;IACH,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAEU,QAAA,qBAAqB,GAAG,uBAAe,CAAC,MAAM,CAAC;IAC1D;;;OAGG;IACH,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE;CAClB,CAAC,CAAC;AAEU,QAAA,YAAY,GAAG,OAAC,CAAC,MAAM,CAAC;IACnC,SAAS,EAAE,OAAC,CAAC,OAAO,EAAE;IACtB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;IAChB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE;CACnB,CAAC,CAAC","sourcesContent":["import { z } from 'zod';\n\n/**\n * CapSkip maps only these four proxy schemes and answers ERROR_BAD_PARAMETERS\n * for anything else, SOCKS4 included.\n */\nexport const proxySchema = z.object({\n  type: z\n    .enum(['HTTP', 'HTTPS', 'SOCKS5', 'SOCKS5H'])\n    .describe('Proxy scheme. CapSkip supports only these four.'),\n  uri: z\n    .string()\n    .min(1)\n    .describe('Proxy address as `host:port` or `login:password@host:port`.'),\n});\n\nexport type ProxyInput = z.infer<typeof proxySchema>;\n\n/**\n * Bounded at 600s. A larger value is rejected rather than clamped so the caller\n * learns the limit instead of silently getting a shorter wait.\n */\nexport const timeoutSchema = z\n  .number()\n  .int()\n  .min(1)\n  .max(600)\n  .optional()\n  .describe('Seconds to wait before giving up. Maximum 600.');\n\nexport const pageUrlSchema = z\n  .url()\n  .describe('Full URL of the page the captcha appears on, including scheme.');\n\nexport const baseSolveOutput = z.object({\n  captchaId: z.string(),\n  code: z.string(),\n  solveSeconds: z.number(),\n});\n\nexport const turnstileOutput = baseSolveOutput.extend({\n  userAgent: z.string().optional(),\n});\n\nexport const geetestOutput = baseSolveOutput.extend({\n  challenge: z.string().optional(),\n  validate: z.string().optional(),\n  seccode: z.string().optional(),\n});\n\nexport const altchaOutput = baseSolveOutput.extend({\n  /** The base64 payload to submit in the site's `altcha` form field, verbatim. */\n  token: z.string(),\n  /** The counter that satisfied the challenge. Absent if the payload did not decode. */\n  number: z.number().optional(),\n});\n\nexport const capyOutput = baseSolveOutput.extend({\n  /** The value for the target form's `capy_captchakey` field. */\n  captchakey: z.string().optional(),\n  /** The value for the target form's `capy_challengekey` field. Single-use. */\n  challengekey: z.string().optional(),\n  /** The value for the target form's `capy_answer` field — the drag path, verbatim. */\n  answer: z.string().optional(),\n  /** Empty for a puzzle solve; present only for shape compatibility. */\n  respKey: z.string().optional(),\n});\n\nexport const captchaFoxOutput = baseSolveOutput.extend({\n  /** The token to submit in the site's `cf-captcha-response` field, verbatim. */\n  token: z.string(),\n  /**\n   * The User-Agent the token was minted under — the browser's own, not one the\n   * caller sent. Absent when the solve captured none rather than guessed.\n   */\n  userAgent: z.string().optional(),\n});\n\nexport const friendlyCaptchaOutput = baseSolveOutput.extend({\n  /**\n   * The token to submit verbatim — in `frc-captcha-solution` on v1, or\n   * `frc-captcha-response` on v2. The field names differ between versions.\n   */\n  token: z.string(),\n});\n\nexport const statusOutput = z.object({\n  reachable: z.boolean(),\n  host: z.string(),\n  port: z.number(),\n  latencyMs: z.number().optional(),\n  detail: z.string(),\n});\n"]}

package/dist/server.js

@@ -5,13 +5,16 @@ exports.createServer = createServer;
 const mcp_js_1 = require("@modelcontextprotocol/sdk/server/mcp.js");
 const solver_js_1 = require("./solver.js");
 const altcha_js_1 = require("./tools/altcha.js");
+const captchafox_js_1 = require("./tools/captchafox.js");
+const capy_js_1 = require("./tools/capy.js");
+const friendlycaptcha_js_1 = require("./tools/friendlycaptcha.js");
 const geetest_js_1 = require("./tools/geetest.js");
 const image_js_1 = require("./tools/image.js");
 const recaptcha_js_1 = require("./tools/recaptcha.js");
 const status_js_1 = require("./tools/status.js");
 const turnstile_js_1 = require("./tools/turnstile.js");
 exports.SERVER_NAME = 'capskip';
-exports.SERVER_VERSION = '1.1.0';
+exports.SERVER_VERSION = '1.2.0';
 /** Build a fully-registered MCP server. Does not connect a transport. */
 function createServer(config) {
     const server = new mcp_js_1.McpServer({ name: exports.SERVER_NAME, version: exports.SERVER_VERSION }, {
@@ -19,7 +22,8 @@ function createServer(config) {
             + 'tools when browser automation is blocked by a captcha: read the sitekey '
             + 'from the page, call the matching tool, then place the returned token in '
             + "the page's response field. CapSkip solves image captchas, reCAPTCHA v2 "
-            + 'and v3, Cloudflare Turnstile, GeeTest v3, and ALTCHA — it cannot solve hCaptcha '
+            + 'and v3, Cloudflare Turnstile, GeeTest v3, ALTCHA, Capy Puzzle, CaptchaFox '
+            + 'and Friendly Captcha — it cannot solve hCaptcha '
             + 'or FunCaptcha/Arkose, so do not call these tools for those. An hCaptcha '
             + 'widget renders as <div class="h-captcha" data-sitekey="…">, which is '
             + 'easy to mistake for reCAPTCHA when scanning the DOM for data-sitekey. '
@@ -33,6 +37,9 @@ function createServer(config) {
     (0, turnstile_js_1.registerTurnstileTool)(server, ctx);
     (0, geetest_js_1.registerGeetestTool)(server, ctx);
     (0, altcha_js_1.registerAltchaTool)(server, ctx);
+    (0, capy_js_1.registerCapyTool)(server, ctx);
+    (0, captchafox_js_1.registerCaptchaFoxTool)(server, ctx);
+    (0, friendlycaptcha_js_1.registerFriendlyCaptchaTool)(server, ctx);
     return server;
 }
 //# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":";;;AAeA,oCA4BC;AA3CD,oEAAoE;AAGpE,2CAA4C;AAC5C,iDAAuD;AACvD,mDAAyD;AACzD,+CAAqD;AACrD,uDAA6D;AAC7D,iDAAuD;AACvD,uDAA6D;AAEhD,QAAA,WAAW,GAAG,SAAS,CAAC;AACxB,QAAA,cAAc,GAAG,OAAO,CAAC;AAEtC,yEAAyE;AACzE,SAAgB,YAAY,CAAC,MAAqB;IAChD,MAAM,MAAM,GAAG,IAAI,kBAAS,CAC1B,EAAE,IAAI,EAAE,mBAAW,EAAE,OAAO,EAAE,sBAAc,EAAE,EAC9C;QACE,YAAY,EACV,0EAA0E;cACxE,0EAA0E;cAC1E,0EAA0E;cAC1E,yEAAyE;cACzE,kFAAkF;cAClF,0EAA0E;cAC1E,uEAAuE;cACvE,wEAAwE;cACxE,yEAAyE;cACzE,UAAU;KACf,CACF,CAAC;IAEF,MAAM,GAAG,GAAG,IAAA,yBAAa,EAAC,MAAM,CAAC,CAAC;IAElC,IAAA,8BAAkB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAChC,IAAA,4BAAiB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC/B,IAAA,oCAAqB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnC,IAAA,oCAAqB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnC,IAAA,gCAAmB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACjC,IAAA,8BAAkB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAEhC,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';\n\nimport type { CapSkipConfig } from './config.js';\nimport { createContext } from './solver.js';\nimport { registerAltchaTool } from './tools/altcha.js';\nimport { registerGeetestTool } from './tools/geetest.js';\nimport { registerImageTool } from './tools/image.js';\nimport { registerRecaptchaTool } from './tools/recaptcha.js';\nimport { registerStatusTool } from './tools/status.js';\nimport { registerTurnstileTool } from './tools/turnstile.js';\n\nexport const SERVER_NAME = 'capskip';\nexport const SERVER_VERSION = '1.1.0';\n\n/** Build a fully-registered MCP server. Does not connect a transport. */\nexport function createServer(config: CapSkipConfig): McpServer {\n  const server = new McpServer(\n    { name: SERVER_NAME, version: SERVER_VERSION },\n    {\n      instructions:\n        'Solve captchas through a locally-running CapSkip desktop app. Use these '\n        + 'tools when browser automation is blocked by a captcha: read the sitekey '\n        + 'from the page, call the matching tool, then place the returned token in '\n        + \"the page's response field. CapSkip solves image captchas, reCAPTCHA v2 \"\n        + 'and v3, Cloudflare Turnstile, GeeTest v3, and ALTCHA — it cannot solve hCaptcha '\n        + 'or FunCaptcha/Arkose, so do not call these tools for those. An hCaptcha '\n        + 'widget renders as <div class=\"h-captcha\" data-sitekey=\"…\">, which is '\n        + 'easy to mistake for reCAPTCHA when scanning the DOM for data-sitekey. '\n        + 'If a solve fails unexpectedly, call capskip_status to check CapSkip is '\n        + 'running.',\n    },\n  );\n\n  const ctx = createContext(config);\n\n  registerStatusTool(server, ctx);\n  registerImageTool(server, ctx);\n  registerRecaptchaTool(server, ctx);\n  registerTurnstileTool(server, ctx);\n  registerGeetestTool(server, ctx);\n  registerAltchaTool(server, ctx);\n\n  return server;\n}\n"]}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":";;;AAkBA,oCAgCC;AAlDD,oEAAoE;AAGpE,2CAA4C;AAC5C,iDAAuD;AACvD,yDAA+D;AAC/D,6CAAmD;AACnD,mEAAyE;AACzE,mDAAyD;AACzD,+CAAqD;AACrD,uDAA6D;AAC7D,iDAAuD;AACvD,uDAA6D;AAEhD,QAAA,WAAW,GAAG,SAAS,CAAC;AACxB,QAAA,cAAc,GAAG,OAAO,CAAC;AAEtC,yEAAyE;AACzE,SAAgB,YAAY,CAAC,MAAqB;IAChD,MAAM,MAAM,GAAG,IAAI,kBAAS,CAC1B,EAAE,IAAI,EAAE,mBAAW,EAAE,OAAO,EAAE,sBAAc,EAAE,EAC9C;QACE,YAAY,EACV,0EAA0E;cACxE,0EAA0E;cAC1E,0EAA0E;cAC1E,yEAAyE;cACzE,4EAA4E;cAC5E,kDAAkD;cAClD,0EAA0E;cAC1E,uEAAuE;cACvE,wEAAwE;cACxE,yEAAyE;cACzE,UAAU;KACf,CACF,CAAC;IAEF,MAAM,GAAG,GAAG,IAAA,yBAAa,EAAC,MAAM,CAAC,CAAC;IAElC,IAAA,8BAAkB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAChC,IAAA,4BAAiB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC/B,IAAA,oCAAqB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnC,IAAA,oCAAqB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnC,IAAA,gCAAmB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACjC,IAAA,8BAAkB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAChC,IAAA,0BAAgB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9B,IAAA,sCAAsB,EAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACpC,IAAA,gDAA2B,EAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAEzC,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';\n\nimport type { CapSkipConfig } from './config.js';\nimport { createContext } from './solver.js';\nimport { registerAltchaTool } from './tools/altcha.js';\nimport { registerCaptchaFoxTool } from './tools/captchafox.js';\nimport { registerCapyTool } from './tools/capy.js';\nimport { registerFriendlyCaptchaTool } from './tools/friendlycaptcha.js';\nimport { registerGeetestTool } from './tools/geetest.js';\nimport { registerImageTool } from './tools/image.js';\nimport { registerRecaptchaTool } from './tools/recaptcha.js';\nimport { registerStatusTool } from './tools/status.js';\nimport { registerTurnstileTool } from './tools/turnstile.js';\n\nexport const SERVER_NAME = 'capskip';\nexport const SERVER_VERSION = '1.2.0';\n\n/** Build a fully-registered MCP server. Does not connect a transport. */\nexport function createServer(config: CapSkipConfig): McpServer {\n  const server = new McpServer(\n    { name: SERVER_NAME, version: SERVER_VERSION },\n    {\n      instructions:\n        'Solve captchas through a locally-running CapSkip desktop app. Use these '\n        + 'tools when browser automation is blocked by a captcha: read the sitekey '\n        + 'from the page, call the matching tool, then place the returned token in '\n        + \"the page's response field. CapSkip solves image captchas, reCAPTCHA v2 \"\n        + 'and v3, Cloudflare Turnstile, GeeTest v3, ALTCHA, Capy Puzzle, CaptchaFox '\n        + 'and Friendly Captcha — it cannot solve hCaptcha '\n        + 'or FunCaptcha/Arkose, so do not call these tools for those. An hCaptcha '\n        + 'widget renders as <div class=\"h-captcha\" data-sitekey=\"…\">, which is '\n        + 'easy to mistake for reCAPTCHA when scanning the DOM for data-sitekey. '\n        + 'If a solve fails unexpectedly, call capskip_status to check CapSkip is '\n        + 'running.',\n    },\n  );\n\n  const ctx = createContext(config);\n\n  registerStatusTool(server, ctx);\n  registerImageTool(server, ctx);\n  registerRecaptchaTool(server, ctx);\n  registerTurnstileTool(server, ctx);\n  registerGeetestTool(server, ctx);\n  registerAltchaTool(server, ctx);\n  registerCapyTool(server, ctx);\n  registerCaptchaFoxTool(server, ctx);\n  registerFriendlyCaptchaTool(server, ctx);\n\n  return server;\n}\n"]}

package/dist/tools/captchafox.js

@@ -0,0 +1,89 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerCaptchaFoxTool = registerCaptchaFoxTool;
+const zod_1 = require("zod");
+const schemas_js_1 = require("../schemas.js");
+const solve_js_1 = require("../solve.js");
+const inputSchema = zod_1.z.strictObject({
+    sitekey: zod_1.z
+        .string()
+        .min(1)
+        .describe("The public key the widget renders with, conventionally prefixed 'sk_'. "
+        + "Read it from data-sitekey on the widget container, from the "
+        + 'captchafox.render(...) call, or — if the page builds the widget at '
+        + 'runtime — from the path segment after /captcha/ in the request to '
+        + 'api.captchafox.com.'),
+    url: schemas_js_1.pageUrlSchema,
+    api_server: zod_1.z
+        .string()
+        .min(1)
+        .optional()
+        .describe('The widget entry point the target page loads. Defaults to '
+        + "'https://cdn.captchafox.com/'. Send the MAM package path instead when "
+        + 'the page loads that build — it returns a MAM_ prefixed token, and the '
+        + 'two are not interchangeable.'),
+    proxy: schemas_js_1.proxySchema
+        .optional()
+        .describe('Solve from this network. CaptchaFox scores the address a widget runs on '
+        + 'as well as the browser, so repeated solves from one address drift '
+        + 'toward interactive challenges and then refusals.'),
+    timeout: schemas_js_1.timeoutSchema,
+});
+function registerCaptchaFoxTool(server, ctx) {
+    server.registerTool('capskip_solve_captchafox', {
+        title: 'Solve CaptchaFox',
+        description: 'Solve a CaptchaFox challenge. CaptchaFox scores the browser itself '
+            + 'rather than asking the visitor to read anything, so most solves draw '
+            + 'no puzzle at all. Returns a token to put in the form field named '
+            + "'cf-captcha-response', verbatim — it is verified server side against "
+            + 'the session that produced it, so any edit invalidates it. IMPORTANT: '
+            + 'the url must be the page the widget actually runs on. CaptchaFox '
+            + 'checks it against the domains the key is registered for and refuses a '
+            + 'mismatch permanently, not intermittently — so a sitekey that fails '
+            + 'immediately and consistently usually means the wrong page URL, not a '
+            + 'bad key. The result also carries the User-Agent the token was minted '
+            + 'under; submit under that one, not your own.',
+        inputSchema,
+        outputSchema: schemas_js_1.captchaFoxOutput,
+        // destructiveHint defaults to *true* whenever readOnlyHint is false, so
+        // omitting it would advertise this tool as potentially destructive and cost
+        // it auto-approval in clients that read the hint. Solving a captcha
+        // destroys nothing. idempotentHint is deliberately left at its false
+        // default: each call mints a new, short-lived token.
+        annotations: { readOnlyHint: false, destructiveHint: false, openWorldHint: true },
+    }, async (args, extra) => {
+        // A real browser session, like reCAPTCHA and GeeTest, and longer again when
+        // an interactive challenge is drawn — so it takes the browser timeout.
+        const timeout = args.timeout ?? ctx.config.recaptchaTimeout;
+        const options = {};
+        if (args.api_server !== undefined)
+            options.api_server = args.api_server;
+        if (args.proxy !== undefined)
+            options.proxy = args.proxy;
+        return (0, solve_js_1.runSolve)(ctx, extra, { label: 'Solving CaptchaFox', timeoutSeconds: timeout }, (client) => client.captchafox(args.sitekey, args.url, options), (result, seconds) => {
+            const token = result.token ?? String(result.code ?? '');
+            const userAgent = result.userAgent;
+            const structured = {
+                captchaId: String(result.captchaId ?? ''),
+                code: String(result.code ?? ''),
+                solveSeconds: Number(seconds.toFixed(2)),
+                token,
+                ...(userAgent !== undefined ? { userAgent } : {}),
+            };
+            return {
+                structured,
+                text: `Solved CaptchaFox in ${structured.solveSeconds}s.\n`
+                    + 'Submit this verbatim in the form field the widget uses, named '
+                    + '`cf-captcha-response` — treat it as opaque, since it is '
+                    + 'verified against the session that produced it:\n'
+                    + `cf-captcha-response: ${token}\n`
+                    + (userAgent !== undefined
+                        ? `Submit it under this User-Agent, which is the one that minted `
+                            + `it (not any you sent): ${userAgent}\n`
+                        : '')
+                    + `Tokens are short lived — submit promptly. (CapSkip captcha id ${structured.captchaId})`,
+            };
+        });
+    });
+}
+//# sourceMappingURL=captchafox.js.map

package/dist/tools/captchafox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"captchafox.js","sourceRoot":"","sources":["../../src/tools/captchafox.ts"],"names":[],"mappings":";;AAuCA,wDAsEC;AA5GD,6BAAwB;AAExB,8CAA4F;AAC5F,0CAAuC;AAGvC,MAAM,WAAW,GAAG,OAAC,CAAC,YAAY,CAAC;IACjC,OAAO,EAAE,OAAC;SACP,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACP,yEAAyE;UACvE,8DAA8D;UAC9D,qEAAqE;UACrE,oEAAoE;UACpE,qBAAqB,CACxB;IACH,GAAG,EAAE,0BAAa;IAClB,UAAU,EAAE,OAAC;SACV,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,4DAA4D;UAC1D,wEAAwE;UACxE,wEAAwE;UACxE,8BAA8B,CACjC;IACH,KAAK,EAAE,wBAAW;SACf,QAAQ,EAAE;SACV,QAAQ,CACP,0EAA0E;UACxE,oEAAoE;UACpE,kDAAkD,CACrD;IACH,OAAO,EAAE,0BAAa;CACvB,CAAC,CAAC;AAEH,SAAgB,sBAAsB,CAAC,MAAiB,EAAE,GAAgB;IACxE,MAAM,CAAC,YAAY,CACjB,0BAA0B,EAC1B;QACE,KAAK,EAAE,kBAAkB;QACzB,WAAW,EACT,qEAAqE;cACnE,uEAAuE;cACvE,mEAAmE;cACnE,uEAAuE;cACvE,uEAAuE;cACvE,mEAAmE;cACnE,wEAAwE;cACxE,qEAAqE;cACrE,uEAAuE;cACvE,uEAAuE;cACvE,6CAA6C;QACjD,WAAW;QACX,YAAY,EAAE,6BAAgB;QAC9B,wEAAwE;QACxE,4EAA4E;QAC5E,oEAAoE;QACpE,qEAAqE;QACrE,qDAAqD;QACrD,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE;KAClF,EACD,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACpB,4EAA4E;QAC5E,uEAAuE;QACvE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAE5D,MAAM,OAAO,GAA4B,EAAE,CAAC;QAC5C,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACxE,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QAEzD,OAAO,IAAA,mBAAQ,EACb,GAAG,EACH,KAAK,EACL,EAAE,KAAK,EAAE,oBAAoB,EAAE,cAAc,EAAE,OAAO,EAAE,EACxD,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,OAAgB,CAAC,EACvE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;YAClB,MAAM,KAAK,GAAI,MAAM,CAAC,KAA4B,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YAChF,MAAM,SAAS,GAAG,MAAM,CAAC,SAA+B,CAAC;YAEzD,MAAM,UAAU,GAAG;gBACjB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;gBACzC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;gBAC/B,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBACxC,KAAK;gBACL,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClD,CAAC;YAEF,OAAO;gBACL,UAAU;gBACV,IAAI,EACF,wBAAwB,UAAU,CAAC,YAAY,MAAM;sBACnD,gEAAgE;sBAChE,0DAA0D;sBAC1D,kDAAkD;sBAClD,wBAAwB,KAAK,IAAI;sBACjC,CAAC,SAAS,KAAK,SAAS;wBACxB,CAAC,CAAC,gEAAgE;8BAC9D,0BAA0B,SAAS,IAAI;wBAC3C,CAAC,CAAC,EAAE,CAAC;sBACL,iEAAiE,UAAU,CAAC,SAAS,GAAG;aAC7F,CAAC;QACJ,CAAC,CACF,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC","sourcesContent":["import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';\nimport { z } from 'zod';\n\nimport { captchaFoxOutput, pageUrlSchema, proxySchema, timeoutSchema } from '../schemas.js';\nimport { runSolve } from '../solve.js';\nimport type { ToolContext } from '../solver.js';\n\nconst inputSchema = z.strictObject({\n  sitekey: z\n    .string()\n    .min(1)\n    .describe(\n      \"The public key the widget renders with, conventionally prefixed 'sk_'. \"\n      + \"Read it from data-sitekey on the widget container, from the \"\n      + 'captchafox.render(...) call, or — if the page builds the widget at '\n      + 'runtime — from the path segment after /captcha/ in the request to '\n      + 'api.captchafox.com.',\n    ),\n  url: pageUrlSchema,\n  api_server: z\n    .string()\n    .min(1)\n    .optional()\n    .describe(\n      'The widget entry point the target page loads. Defaults to '\n      + \"'https://cdn.captchafox.com/'. Send the MAM package path instead when \"\n      + 'the page loads that build — it returns a MAM_ prefixed token, and the '\n      + 'two are not interchangeable.',\n    ),\n  proxy: proxySchema\n    .optional()\n    .describe(\n      'Solve from this network. CaptchaFox scores the address a widget runs on '\n      + 'as well as the browser, so repeated solves from one address drift '\n      + 'toward interactive challenges and then refusals.',\n    ),\n  timeout: timeoutSchema,\n});\n\nexport function registerCaptchaFoxTool(server: McpServer, ctx: ToolContext): void {\n  server.registerTool(\n    'capskip_solve_captchafox',\n    {\n      title: 'Solve CaptchaFox',\n      description:\n        'Solve a CaptchaFox challenge. CaptchaFox scores the browser itself '\n        + 'rather than asking the visitor to read anything, so most solves draw '\n        + 'no puzzle at all. Returns a token to put in the form field named '\n        + \"'cf-captcha-response', verbatim — it is verified server side against \"\n        + 'the session that produced it, so any edit invalidates it. IMPORTANT: '\n        + 'the url must be the page the widget actually runs on. CaptchaFox '\n        + 'checks it against the domains the key is registered for and refuses a '\n        + 'mismatch permanently, not intermittently — so a sitekey that fails '\n        + 'immediately and consistently usually means the wrong page URL, not a '\n        + 'bad key. The result also carries the User-Agent the token was minted '\n        + 'under; submit under that one, not your own.',\n      inputSchema,\n      outputSchema: captchaFoxOutput,\n      // destructiveHint defaults to *true* whenever readOnlyHint is false, so\n      // omitting it would advertise this tool as potentially destructive and cost\n      // it auto-approval in clients that read the hint. Solving a captcha\n      // destroys nothing. idempotentHint is deliberately left at its false\n      // default: each call mints a new, short-lived token.\n      annotations: { readOnlyHint: false, destructiveHint: false, openWorldHint: true },\n    },\n    async (args, extra) => {\n      // A real browser session, like reCAPTCHA and GeeTest, and longer again when\n      // an interactive challenge is drawn — so it takes the browser timeout.\n      const timeout = args.timeout ?? ctx.config.recaptchaTimeout;\n\n      const options: Record<string, unknown> = {};\n      if (args.api_server !== undefined) options.api_server = args.api_server;\n      if (args.proxy !== undefined) options.proxy = args.proxy;\n\n      return runSolve(\n        ctx,\n        extra,\n        { label: 'Solving CaptchaFox', timeoutSeconds: timeout },\n        (client) => client.captchafox(args.sitekey, args.url, options as never),\n        (result, seconds) => {\n          const token = (result.token as string | undefined) ?? String(result.code ?? '');\n          const userAgent = result.userAgent as string | undefined;\n\n          const structured = {\n            captchaId: String(result.captchaId ?? ''),\n            code: String(result.code ?? ''),\n            solveSeconds: Number(seconds.toFixed(2)),\n            token,\n            ...(userAgent !== undefined ? { userAgent } : {}),\n          };\n\n          return {\n            structured,\n            text:\n              `Solved CaptchaFox in ${structured.solveSeconds}s.\\n`\n              + 'Submit this verbatim in the form field the widget uses, named '\n              + '`cf-captcha-response` — treat it as opaque, since it is '\n              + 'verified against the session that produced it:\\n'\n              + `cf-captcha-response: ${token}\\n`\n              + (userAgent !== undefined\n                ? `Submit it under this User-Agent, which is the one that minted `\n                  + `it (not any you sent): ${userAgent}\\n`\n                : '')\n              + `Tokens are short lived — submit promptly. (CapSkip captcha id ${structured.captchaId})`,\n          };\n        },\n      );\n    },\n  );\n}\n"]}

package/dist/tools/capy.js

@@ -0,0 +1,94 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerCapyTool = registerCapyTool;
+const zod_1 = require("zod");
+const schemas_js_1 = require("../schemas.js");
+const solve_js_1 = require("../solve.js");
+const inputSchema = zod_1.z.strictObject({
+    sitekey: zod_1.z
+        .string()
+        .min(1)
+        .describe("The site's public Capy key, conventionally prefixed 'PUZZLE_'. Read it "
+        + "from 'capy_captchakey' in the page source, or from the widget script "
+        + "URL: <script src='https://jp.api.capy.me/puzzle/get_js/?k=PUZZLE_XXXX'>."),
+    url: schemas_js_1.pageUrlSchema,
+    api_server: zod_1.z
+        .string()
+        .min(1)
+        .optional()
+        .describe('The root of the Capy API the key lives behind, taken from the widget '
+        + "script URL. Defaults to 'https://jp.api.capy.me'. Note that "
+        + "'api.capy.me' no longer resolves, although several solver services "
+        + 'still document it.'),
+    proxy: schemas_js_1.proxySchema
+        .optional()
+        .describe('Draw the puzzle image through this proxy. That fetch is the only request '
+        + 'a Capy solve makes.'),
+    timeout: schemas_js_1.timeoutSchema,
+});
+function registerCapyTool(server, ctx) {
+    server.registerTool('capskip_solve_capy', {
+        title: 'Solve Capy Puzzle',
+        description: 'Solve a Capy Puzzle captcha — a slide puzzle where a piece is dragged '
+            + 'into a hole cut out of a photograph. IMPORTANT: unlike every other '
+            + 'captcha tool here, the answer is NOT a single token. It is three '
+            + 'values — captchakey, challengekey and answer — which all go into the '
+            + "target form, in fields named 'capy_captchakey', 'capy_challengekey' "
+            + "and 'capy_answer'. Submit the answer verbatim: it is the drag path "
+            + 'the widget would have recorded, so trimming or re-encoding it '
+            + 'invalidates the solve. The challenge key is single-use and '
+            + 'short-lived, so submit promptly rather than caching the three values. '
+            + 'A solve takes about two seconds — Capy refuses answers that arrive '
+            + 'faster than a human could have produced them, so CapSkip holds the '
+            + 'result back deliberately.',
+        inputSchema,
+        outputSchema: schemas_js_1.capyOutput,
+        // destructiveHint defaults to *true* whenever readOnlyHint is false, so
+        // omitting it would advertise this tool as potentially destructive and cost
+        // it auto-approval in clients that read the hint. Solving a captcha
+        // destroys nothing. idempotentHint is deliberately left at its false
+        // default: each call draws a fresh puzzle bound to a new challenge key.
+        annotations: { readOnlyHint: false, destructiveHint: false, openWorldHint: true },
+    }, async (args, extra) => {
+        // Capy is one HTTP fetch plus pixel math, not a browser solve, so it takes
+        // the default timeout rather than the longer browser one.
+        const timeout = args.timeout ?? ctx.config.defaultTimeout;
+        const options = {};
+        if (args.api_server !== undefined)
+            options.api_server = args.api_server;
+        if (args.proxy !== undefined)
+            options.proxy = args.proxy;
+        return (0, solve_js_1.runSolve)(ctx, extra, { label: 'Solving Capy Puzzle', timeoutSeconds: timeout }, (client) => client.capy(args.sitekey, args.url, options), (result, seconds) => {
+            const captchakey = result.captchakey;
+            const challengekey = result.challengekey;
+            const answer = result.answer;
+            const respKey = result.respKey;
+            const structured = {
+                captchaId: String(result.captchaId ?? ''),
+                // Capy's `code` is the raw answer object, which the Node SDK leaves
+                // as-is. Stringify it so the declared string output holds the same
+                // JSON a plain-text poll would have delivered.
+                code: typeof result.code === 'string'
+                    ? result.code
+                    : JSON.stringify(result.code ?? ''),
+                solveSeconds: Number(seconds.toFixed(2)),
+                ...(captchakey !== undefined ? { captchakey } : {}),
+                ...(challengekey !== undefined ? { challengekey } : {}),
+                ...(answer !== undefined ? { answer } : {}),
+                ...(respKey !== undefined ? { respKey } : {}),
+            };
+            return {
+                structured,
+                text: `Solved Capy Puzzle in ${structured.solveSeconds}s.\n`
+                    + 'This is NOT a token — put all three values in the form, '
+                    + 'verbatim, and submit promptly (the challenge key is '
+                    + 'single-use and short-lived):\n'
+                    + `capy_captchakey: ${captchakey ?? '(missing)'}\n`
+                    + `capy_challengekey: ${challengekey ?? '(missing)'}\n`
+                    + `capy_answer: ${answer ?? '(missing)'}\n`
+                    + `(CapSkip captcha id ${structured.captchaId})`,
+            };
+        });
+    });
+}
+//# sourceMappingURL=capy.js.map

package/dist/tools/capy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capy.js","sourceRoot":"","sources":["../../src/tools/capy.ts"],"names":[],"mappings":";;AAoCA,4CA8EC;AAjHD,6BAAwB;AAExB,8CAAsF;AACtF,0CAAuC;AAGvC,MAAM,WAAW,GAAG,OAAC,CAAC,YAAY,CAAC;IACjC,OAAO,EAAE,OAAC;SACP,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACP,yEAAyE;UACvE,uEAAuE;UACvE,0EAA0E,CAC7E;IACH,GAAG,EAAE,0BAAa;IAClB,UAAU,EAAE,OAAC;SACV,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,uEAAuE;UACrE,8DAA8D;UAC9D,qEAAqE;UACrE,oBAAoB,CACvB;IACH,KAAK,EAAE,wBAAW;SACf,QAAQ,EAAE;SACV,QAAQ,CACP,2EAA2E;UACzE,qBAAqB,CACxB;IACH,OAAO,EAAE,0BAAa;CACvB,CAAC,CAAC;AAEH,SAAgB,gBAAgB,CAAC,MAAiB,EAAE,GAAgB;IAClE,MAAM,CAAC,YAAY,CACjB,oBAAoB,EACpB;QACE,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EACT,wEAAwE;cACtE,qEAAqE;cACrE,mEAAmE;cACnE,uEAAuE;cACvE,sEAAsE;cACtE,qEAAqE;cACrE,gEAAgE;cAChE,6DAA6D;cAC7D,wEAAwE;cACxE,qEAAqE;cACrE,qEAAqE;cACrE,2BAA2B;QAC/B,WAAW;QACX,YAAY,EAAE,uBAAU;QACxB,wEAAwE;QACxE,4EAA4E;QAC5E,oEAAoE;QACpE,qEAAqE;QACrE,wEAAwE;QACxE,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE;KAClF,EACD,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACpB,2EAA2E;QAC3E,0DAA0D;QAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC;QAE1D,MAAM,OAAO,GAA4B,EAAE,CAAC;QAC5C,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACxE,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QAEzD,OAAO,IAAA,mBAAQ,EACb,GAAG,EACH,KAAK,EACL,EAAE,KAAK,EAAE,qBAAqB,EAAE,cAAc,EAAE,OAAO,EAAE,EACzD,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,OAAgB,CAAC,EACjE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;YAClB,MAAM,UAAU,GAAG,MAAM,CAAC,UAAgC,CAAC;YAC3D,MAAM,YAAY,GAAG,MAAM,CAAC,YAAkC,CAAC;YAC/D,MAAM,MAAM,GAAG,MAAM,CAAC,MAA4B,CAAC;YACnD,MAAM,OAAO,GAAG,MAAM,CAAC,OAA6B,CAAC;YAErD,MAAM,UAAU,GAAG;gBACjB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;gBACzC,oEAAoE;gBACpE,mEAAmE;gBACnE,+CAA+C;gBAC/C,IAAI,EAAE,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;oBACnC,CAAC,CAAC,MAAM,CAAC,IAAI;oBACb,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;gBACrC,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBACxC,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnD,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3C,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9C,CAAC;YAEF,OAAO;gBACL,UAAU;gBACV,IAAI,EACF,yBAAyB,UAAU,CAAC,YAAY,MAAM;sBACpD,0DAA0D;sBAC1D,sDAAsD;sBACtD,gCAAgC;sBAChC,oBAAoB,UAAU,IAAI,WAAW,IAAI;sBACjD,sBAAsB,YAAY,IAAI,WAAW,IAAI;sBACrD,gBAAgB,MAAM,IAAI,WAAW,IAAI;sBACzC,uBAAuB,UAAU,CAAC,SAAS,GAAG;aACnD,CAAC;QACJ,CAAC,CACF,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC","sourcesContent":["import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';\nimport { z } from 'zod';\n\nimport { capyOutput, pageUrlSchema, proxySchema, timeoutSchema } from '../schemas.js';\nimport { runSolve } from '../solve.js';\nimport type { ToolContext } from '../solver.js';\n\nconst inputSchema = z.strictObject({\n  sitekey: z\n    .string()\n    .min(1)\n    .describe(\n      \"The site's public Capy key, conventionally prefixed 'PUZZLE_'. Read it \"\n      + \"from 'capy_captchakey' in the page source, or from the widget script \"\n      + \"URL: <script src='https://jp.api.capy.me/puzzle/get_js/?k=PUZZLE_XXXX'>.\",\n    ),\n  url: pageUrlSchema,\n  api_server: z\n    .string()\n    .min(1)\n    .optional()\n    .describe(\n      'The root of the Capy API the key lives behind, taken from the widget '\n      + \"script URL. Defaults to 'https://jp.api.capy.me'. Note that \"\n      + \"'api.capy.me' no longer resolves, although several solver services \"\n      + 'still document it.',\n    ),\n  proxy: proxySchema\n    .optional()\n    .describe(\n      'Draw the puzzle image through this proxy. That fetch is the only request '\n      + 'a Capy solve makes.',\n    ),\n  timeout: timeoutSchema,\n});\n\nexport function registerCapyTool(server: McpServer, ctx: ToolContext): void {\n  server.registerTool(\n    'capskip_solve_capy',\n    {\n      title: 'Solve Capy Puzzle',\n      description:\n        'Solve a Capy Puzzle captcha — a slide puzzle where a piece is dragged '\n        + 'into a hole cut out of a photograph. IMPORTANT: unlike every other '\n        + 'captcha tool here, the answer is NOT a single token. It is three '\n        + 'values — captchakey, challengekey and answer — which all go into the '\n        + \"target form, in fields named 'capy_captchakey', 'capy_challengekey' \"\n        + \"and 'capy_answer'. Submit the answer verbatim: it is the drag path \"\n        + 'the widget would have recorded, so trimming or re-encoding it '\n        + 'invalidates the solve. The challenge key is single-use and '\n        + 'short-lived, so submit promptly rather than caching the three values. '\n        + 'A solve takes about two seconds — Capy refuses answers that arrive '\n        + 'faster than a human could have produced them, so CapSkip holds the '\n        + 'result back deliberately.',\n      inputSchema,\n      outputSchema: capyOutput,\n      // destructiveHint defaults to *true* whenever readOnlyHint is false, so\n      // omitting it would advertise this tool as potentially destructive and cost\n      // it auto-approval in clients that read the hint. Solving a captcha\n      // destroys nothing. idempotentHint is deliberately left at its false\n      // default: each call draws a fresh puzzle bound to a new challenge key.\n      annotations: { readOnlyHint: false, destructiveHint: false, openWorldHint: true },\n    },\n    async (args, extra) => {\n      // Capy is one HTTP fetch plus pixel math, not a browser solve, so it takes\n      // the default timeout rather than the longer browser one.\n      const timeout = args.timeout ?? ctx.config.defaultTimeout;\n\n      const options: Record<string, unknown> = {};\n      if (args.api_server !== undefined) options.api_server = args.api_server;\n      if (args.proxy !== undefined) options.proxy = args.proxy;\n\n      return runSolve(\n        ctx,\n        extra,\n        { label: 'Solving Capy Puzzle', timeoutSeconds: timeout },\n        (client) => client.capy(args.sitekey, args.url, options as never),\n        (result, seconds) => {\n          const captchakey = result.captchakey as string | undefined;\n          const challengekey = result.challengekey as string | undefined;\n          const answer = result.answer as string | undefined;\n          const respKey = result.respKey as string | undefined;\n\n          const structured = {\n            captchaId: String(result.captchaId ?? ''),\n            // Capy's `code` is the raw answer object, which the Node SDK leaves\n            // as-is. Stringify it so the declared string output holds the same\n            // JSON a plain-text poll would have delivered.\n            code: typeof result.code === 'string'\n              ? result.code\n              : JSON.stringify(result.code ?? ''),\n            solveSeconds: Number(seconds.toFixed(2)),\n            ...(captchakey !== undefined ? { captchakey } : {}),\n            ...(challengekey !== undefined ? { challengekey } : {}),\n            ...(answer !== undefined ? { answer } : {}),\n            ...(respKey !== undefined ? { respKey } : {}),\n          };\n\n          return {\n            structured,\n            text:\n              `Solved Capy Puzzle in ${structured.solveSeconds}s.\\n`\n              + 'This is NOT a token — put all three values in the form, '\n              + 'verbatim, and submit promptly (the challenge key is '\n              + 'single-use and short-lived):\\n'\n              + `capy_captchakey: ${captchakey ?? '(missing)'}\\n`\n              + `capy_challengekey: ${challengekey ?? '(missing)'}\\n`\n              + `capy_answer: ${answer ?? '(missing)'}\\n`\n              + `(CapSkip captcha id ${structured.captchaId})`,\n          };\n        },\n      );\n    },\n  );\n}\n"]}

package/dist/tools/friendlycaptcha.js

@@ -0,0 +1,113 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerFriendlyCaptchaTool = registerFriendlyCaptchaTool;
+const zod_1 = require("zod");
+const schemas_js_1 = require("../schemas.js");
+const solve_js_1 = require("../solve.js");
+const inputSchema = zod_1.z.strictObject({
+    sitekey: zod_1.z
+        .string()
+        .min(1)
+        .describe("The data-sitekey attribute of the widget element — the one carrying "
+        + "class='frc-captcha'."),
+    url: schemas_js_1.pageUrlSchema,
+    version: zod_1.z
+        .enum(['v1', 'v2'])
+        .optional()
+        .describe('The protocol version the site uses. Two entirely different protocols '
+        + 'ship under this one name and a sitekey does not say which, so send '
+        + 'this or module_script. Defaults to v1 when neither is given.'),
+    module_script: zod_1.z
+        .string()
+        .min(1)
+        .optional()
+        .describe("The src of the widget script tag carrying type='module'. The most "
+        + 'reliable version signal there is, because it is the build the site '
+        + "actually loads: 'widget.module.min.js' means v1, 'site.min.js' v2."),
+    nomodule_script: zod_1.z
+        .string()
+        .min(1)
+        .optional()
+        .describe("The src of the widget script tag carrying 'nomodule'. Read for the same reason."),
+    api_server: zod_1.z
+        .string()
+        .min(1)
+        .optional()
+        .describe("The data-residency tenant the sitekey belongs to: 'global' (the "
+        + "default), 'eu', or a full URL. Both tenants mint a token for the same "
+        + "sitekey, so the wrong one is only caught by the site's own check."),
+    proxy: schemas_js_1.proxySchema
+        .optional()
+        .describe('Solve from this network. Worth setting sooner here than almost anywhere '
+        + 'else: the service raises the difficulty for addresses it has already '
+        + 'seen a lot of.'),
+    timeout: schemas_js_1.timeoutSchema,
+});
+function registerFriendlyCaptchaTool(server, ctx) {
+    server.registerTool('capskip_solve_friendly_captcha', {
+        title: 'Solve Friendly Captcha',
+        description: 'Solve a Friendly Captcha proof-of-work challenge. Nothing is shown on '
+            + 'screen — the widget does arithmetic instead of asking the visitor to '
+            + 'do anything. IMPORTANT: two entirely different protocols ship under '
+            + 'this one name, sharing a brand and a sitekey namespace and nothing '
+            + 'else, and a sitekey does not tell you which a site uses. Send version '
+            + '(v1 or v2), or send module_script and let CapSkip read the version off '
+            + 'the build the site loads. Solving the wrong one returns a well-formed '
+            + 'token the site rejects, with nothing to indicate the version was the '
+            + 'problem. The form field also differs by version: v1 uses '
+            + "'frc-captcha-solution', v2 uses 'frc-captcha-response'. Solve time is "
+            + 'not a constant — the service sets the difficulty per request — so '
+            + 'budget for that rather than assuming a fixed duration.',
+        inputSchema,
+        outputSchema: schemas_js_1.friendlyCaptchaOutput,
+        // destructiveHint defaults to *true* whenever readOnlyHint is false, so
+        // omitting it would advertise this tool as potentially destructive and cost
+        // it auto-approval in clients that read the hint. Solving a captcha
+        // destroys nothing. idempotentHint is deliberately left at its false
+        // default: each call mints a new token against fresh work.
+        annotations: { readOnlyHint: false, destructiveHint: false, openWorldHint: true },
+    }, async (args, extra) => {
+        // Proof-of-work, but not the millisecond kind ALTCHA does: the difficulty
+        // is set per request, and v2 always solves in a browser. Both make solve
+        // time variable enough to want the longer timeout.
+        const timeout = args.timeout ?? ctx.config.recaptchaTimeout;
+        const options = {};
+        if (args.version !== undefined)
+            options.version = args.version;
+        if (args.module_script !== undefined)
+            options.module_script = args.module_script;
+        if (args.nomodule_script !== undefined)
+            options.nomodule_script = args.nomodule_script;
+        if (args.api_server !== undefined)
+            options.api_server = args.api_server;
+        if (args.proxy !== undefined)
+            options.proxy = args.proxy;
+        return (0, solve_js_1.runSolve)(ctx, extra, { label: 'Solving Friendly Captcha', timeoutSeconds: timeout }, (client) => client.friendlyCaptcha(args.sitekey, args.url, options), (result, seconds) => {
+            const token = result.token ?? String(result.code ?? '');
+            const structured = {
+                captchaId: String(result.captchaId ?? ''),
+                code: String(result.code ?? ''),
+                solveSeconds: Number(seconds.toFixed(2)),
+                token,
+            };
+            // The field the token goes into differs per version, and getting it
+            // wrong is the single most common way a working v1 integration breaks
+            // on a v2 site — so name the right one rather than leaving it implied.
+            // A v2 token is a single opaque string beginning AQQA.; a v1 token is
+            // four dot-separated parts. Fall back to the token's own shape when no
+            // explicit version was sent.
+            const isV2 = args.version === 'v2'
+                || (args.version === undefined && token.startsWith('AQQA.'));
+            const field = isV2 ? 'frc-captcha-response' : 'frc-captcha-solution';
+            return {
+                structured,
+                text: `Solved Friendly Captcha in ${structured.solveSeconds}s.\n`
+                    + `Submit this verbatim in the form field named \`${field}\` `
+                    + `(${isV2 ? 'v2' : 'v1'}) — do not trim or re-encode it:\n`
+                    + `${field}: ${token}\n`
+                    + `(${token.length} characters; CapSkip captcha id ${structured.captchaId})`,
+            };
+        });
+    });
+}
+//# sourceMappingURL=friendlycaptcha.js.map

package/dist/tools/friendlycaptcha.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"friendlycaptcha.js","sourceRoot":"","sources":["../../src/tools/friendlycaptcha.ts"],"names":[],"mappings":";;AA2DA,kEA8EC;AAxID,6BAAwB;AAExB,8CAEuB;AACvB,0CAAuC;AAGvC,MAAM,WAAW,GAAG,OAAC,CAAC,YAAY,CAAC;IACjC,OAAO,EAAE,OAAC;SACP,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACP,sEAAsE;UACpE,sBAAsB,CACzB;IACH,GAAG,EAAE,0BAAa;IAClB,OAAO,EAAE,OAAC;SACP,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;SAClB,QAAQ,EAAE;SACV,QAAQ,CACP,uEAAuE;UACrE,qEAAqE;UACrE,8DAA8D,CACjE;IACH,aAAa,EAAE,OAAC;SACb,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,oEAAoE;UAClE,qEAAqE;UACrE,oEAAoE,CACvE;IACH,eAAe,EAAE,OAAC;SACf,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CAAC,iFAAiF,CAAC;IAC9F,UAAU,EAAE,OAAC;SACV,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,kEAAkE;UAChE,wEAAwE;UACxE,mEAAmE,CACtE;IACH,KAAK,EAAE,wBAAW;SACf,QAAQ,EAAE;SACV,QAAQ,CACP,0EAA0E;UACxE,uEAAuE;UACvE,gBAAgB,CACnB;IACH,OAAO,EAAE,0BAAa;CACvB,CAAC,CAAC;AAEH,SAAgB,2BAA2B,CAAC,MAAiB,EAAE,GAAgB;IAC7E,MAAM,CAAC,YAAY,CACjB,gCAAgC,EAChC;QACE,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EACT,wEAAwE;cACtE,uEAAuE;cACvE,sEAAsE;cACtE,qEAAqE;cACrE,wEAAwE;cACxE,yEAAyE;cACzE,wEAAwE;cACxE,uEAAuE;cACvE,2DAA2D;cAC3D,wEAAwE;cACxE,oEAAoE;cACpE,wDAAwD;QAC5D,WAAW;QACX,YAAY,EAAE,kCAAqB;QACnC,wEAAwE;QACxE,4EAA4E;QAC5E,oEAAoE;QACpE,qEAAqE;QACrE,2DAA2D;QAC3D,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE;KAClF,EACD,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACpB,0EAA0E;QAC1E,yEAAyE;QACzE,mDAAmD;QACnD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAE5D,MAAM,OAAO,GAA4B,EAAE,CAAC;QAC5C,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC/D,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS;YAAE,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;QACjF,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS;YAAE,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;QACvF,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACxE,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QAEzD,OAAO,IAAA,mBAAQ,EACb,GAAG,EACH,KAAK,EACL,EAAE,KAAK,EAAE,0BAA0B,EAAE,cAAc,EAAE,OAAO,EAAE,EAC9D,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,OAAgB,CAAC,EAC5E,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;YAClB,MAAM,KAAK,GAAI,MAAM,CAAC,KAA4B,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YAEhF,MAAM,UAAU,GAAG;gBACjB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;gBACzC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;gBAC/B,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBACxC,KAAK;aACN,CAAC;YAEF,oEAAoE;YACpE,sEAAsE;YACtE,uEAAuE;YACvE,sEAAsE;YACtE,uEAAuE;YACvE,6BAA6B;YAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,KAAK,IAAI;mBAC7B,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;YAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,sBAAsB,CAAC;YAErE,OAAO;gBACL,UAAU;gBACV,IAAI,EACF,8BAA8B,UAAU,CAAC,YAAY,MAAM;sBACzD,kDAAkD,KAAK,KAAK;sBAC5D,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,oCAAoC;sBAC1D,GAAG,KAAK,KAAK,KAAK,IAAI;sBACtB,IAAI,KAAK,CAAC,MAAM,mCAAmC,UAAU,CAAC,SAAS,GAAG;aAC/E,CAAC;QACJ,CAAC,CACF,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC","sourcesContent":["import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';\nimport { z } from 'zod';\n\nimport {\n  friendlyCaptchaOutput, pageUrlSchema, proxySchema, timeoutSchema,\n} from '../schemas.js';\nimport { runSolve } from '../solve.js';\nimport type { ToolContext } from '../solver.js';\n\nconst inputSchema = z.strictObject({\n  sitekey: z\n    .string()\n    .min(1)\n    .describe(\n      \"The data-sitekey attribute of the widget element — the one carrying \"\n      + \"class='frc-captcha'.\",\n    ),\n  url: pageUrlSchema,\n  version: z\n    .enum(['v1', 'v2'])\n    .optional()\n    .describe(\n      'The protocol version the site uses. Two entirely different protocols '\n      + 'ship under this one name and a sitekey does not say which, so send '\n      + 'this or module_script. Defaults to v1 when neither is given.',\n    ),\n  module_script: z\n    .string()\n    .min(1)\n    .optional()\n    .describe(\n      \"The src of the widget script tag carrying type='module'. The most \"\n      + 'reliable version signal there is, because it is the build the site '\n      + \"actually loads: 'widget.module.min.js' means v1, 'site.min.js' v2.\",\n    ),\n  nomodule_script: z\n    .string()\n    .min(1)\n    .optional()\n    .describe(\"The src of the widget script tag carrying 'nomodule'. Read for the same reason.\"),\n  api_server: z\n    .string()\n    .min(1)\n    .optional()\n    .describe(\n      \"The data-residency tenant the sitekey belongs to: 'global' (the \"\n      + \"default), 'eu', or a full URL. Both tenants mint a token for the same \"\n      + \"sitekey, so the wrong one is only caught by the site's own check.\",\n    ),\n  proxy: proxySchema\n    .optional()\n    .describe(\n      'Solve from this network. Worth setting sooner here than almost anywhere '\n      + 'else: the service raises the difficulty for addresses it has already '\n      + 'seen a lot of.',\n    ),\n  timeout: timeoutSchema,\n});\n\nexport function registerFriendlyCaptchaTool(server: McpServer, ctx: ToolContext): void {\n  server.registerTool(\n    'capskip_solve_friendly_captcha',\n    {\n      title: 'Solve Friendly Captcha',\n      description:\n        'Solve a Friendly Captcha proof-of-work challenge. Nothing is shown on '\n        + 'screen — the widget does arithmetic instead of asking the visitor to '\n        + 'do anything. IMPORTANT: two entirely different protocols ship under '\n        + 'this one name, sharing a brand and a sitekey namespace and nothing '\n        + 'else, and a sitekey does not tell you which a site uses. Send version '\n        + '(v1 or v2), or send module_script and let CapSkip read the version off '\n        + 'the build the site loads. Solving the wrong one returns a well-formed '\n        + 'token the site rejects, with nothing to indicate the version was the '\n        + 'problem. The form field also differs by version: v1 uses '\n        + \"'frc-captcha-solution', v2 uses 'frc-captcha-response'. Solve time is \"\n        + 'not a constant — the service sets the difficulty per request — so '\n        + 'budget for that rather than assuming a fixed duration.',\n      inputSchema,\n      outputSchema: friendlyCaptchaOutput,\n      // destructiveHint defaults to *true* whenever readOnlyHint is false, so\n      // omitting it would advertise this tool as potentially destructive and cost\n      // it auto-approval in clients that read the hint. Solving a captcha\n      // destroys nothing. idempotentHint is deliberately left at its false\n      // default: each call mints a new token against fresh work.\n      annotations: { readOnlyHint: false, destructiveHint: false, openWorldHint: true },\n    },\n    async (args, extra) => {\n      // Proof-of-work, but not the millisecond kind ALTCHA does: the difficulty\n      // is set per request, and v2 always solves in a browser. Both make solve\n      // time variable enough to want the longer timeout.\n      const timeout = args.timeout ?? ctx.config.recaptchaTimeout;\n\n      const options: Record<string, unknown> = {};\n      if (args.version !== undefined) options.version = args.version;\n      if (args.module_script !== undefined) options.module_script = args.module_script;\n      if (args.nomodule_script !== undefined) options.nomodule_script = args.nomodule_script;\n      if (args.api_server !== undefined) options.api_server = args.api_server;\n      if (args.proxy !== undefined) options.proxy = args.proxy;\n\n      return runSolve(\n        ctx,\n        extra,\n        { label: 'Solving Friendly Captcha', timeoutSeconds: timeout },\n        (client) => client.friendlyCaptcha(args.sitekey, args.url, options as never),\n        (result, seconds) => {\n          const token = (result.token as string | undefined) ?? String(result.code ?? '');\n\n          const structured = {\n            captchaId: String(result.captchaId ?? ''),\n            code: String(result.code ?? ''),\n            solveSeconds: Number(seconds.toFixed(2)),\n            token,\n          };\n\n          // The field the token goes into differs per version, and getting it\n          // wrong is the single most common way a working v1 integration breaks\n          // on a v2 site — so name the right one rather than leaving it implied.\n          // A v2 token is a single opaque string beginning AQQA.; a v1 token is\n          // four dot-separated parts. Fall back to the token's own shape when no\n          // explicit version was sent.\n          const isV2 = args.version === 'v2'\n            || (args.version === undefined && token.startsWith('AQQA.'));\n          const field = isV2 ? 'frc-captcha-response' : 'frc-captcha-solution';\n\n          return {\n            structured,\n            text:\n              `Solved Friendly Captcha in ${structured.solveSeconds}s.\\n`\n              + `Submit this verbatim in the form field named \\`${field}\\` `\n              + `(${isV2 ? 'v2' : 'v1'}) — do not trim or re-encode it:\\n`\n              + `${field}: ${token}\\n`\n              + `(${token.length} characters; CapSkip captcha id ${structured.captchaId})`,\n          };\n        },\n      );\n    },\n  );\n}\n"]}

package/docs/API_REFERENCE.md

@@ -1,6 +1,6 @@
 # CapSkip MCP Server — API Reference
 
-Complete reference for all five tools `capskip-mcp` registers. Parameter descriptions below are copied verbatim from each tool's schema in `src/tools/` so this document cannot drift from what a client actually sees when it lists tools.
+Complete reference for all nine tools `capskip-mcp` registers. Parameter descriptions below are copied verbatim from each tool's schema in `src/tools/` so this document cannot drift from what a client actually sees when it lists tools.
 
 Every solve tool declares an `outputSchema` and returns MCP `structuredContent` matching it, plus a human-readable text block for clients that do not render structured output. Every tool schema rejects unknown keys — a misspelled or unsupported parameter is rejected by name rather than silently ignored.
 
@@ -16,6 +16,9 @@ Every solve tool declares an `outputSchema` and returns MCP `structuredContent`
 | `capskip_solve_turnstile` | Solve a Cloudflare Turnstile widget or challenge page | Yes |
 | `capskip_solve_geetest` | Solve a GeeTest v3 slide-puzzle captcha | Yes |
 | `capskip_solve_altcha` | Solve an ALTCHA proof-of-work challenge | Yes (challenge fetch only) |
+| `capskip_solve_capy` | Solve a Capy Puzzle captcha | Yes (puzzle-image fetch only) |
+| `capskip_solve_captchafox` | Solve a CaptchaFox challenge | Yes |
+| `capskip_solve_friendly_captcha` | Solve a Friendly Captcha proof-of-work challenge | Yes |
 
 ---
 
@@ -154,7 +157,7 @@ Solve a Google reCAPTCHA v2 or v3 widget, including invisible and Enterprise var
 | `proxy` | object | No | — | "Solve through this proxy so the token is issued against its IP." |
 | `timeout` | integer | No | `CAPSKIP_RECAPTCHA_TIMEOUT` (300) | "Seconds to wait before giving up. Maximum 600." |
 
-`proxy` shape (shared with `capskip_solve_turnstile`, `capskip_solve_geetest` and `capskip_solve_altcha`):
+`proxy` shape (shared with every solve tool except `capskip_solve_image_captcha`):
 
 | Field | Type | Required | Description |
 |---|---|---|---|
@@ -385,6 +388,218 @@ CapSkip solves the legacy scheme (SHA-1/256/384/512) and PoW v2 with PBKDF2 or S
 
 ---
 
+## `capskip_solve_capy`
+
+Solve a Capy Puzzle captcha — a slide puzzle where a piece is dragged into a hole cut out of a photograph. IMPORTANT: unlike every other captcha tool here, the answer is NOT a single token. It is three values — `captchakey`, `challengekey` and `answer` — which all go into the target form, in fields named `capy_captchakey`, `capy_challengekey` and `capy_answer`. Submit the answer verbatim: it is the drag path the widget would have recorded, so trimming or re-encoding it invalidates the solve. The challenge key is single-use and short-lived, so submit promptly rather than caching the three values.
+
+### Parameters
+
+| Name | Type | Required | Default | Description |
+|---|---|---|---|---|
+| `sitekey` | string | Yes | — | "The site's public Capy key, conventionally prefixed 'PUZZLE_'." |
+| `url` | string (URL) | Yes | — | "Full URL of the page the captcha appears on, including scheme." |
+| `api_server` | string | No | `https://jp.api.capy.me` | "The root of the Capy API the key lives behind, taken from the widget script URL." |
+| `proxy` | object | No | — | "Draw the puzzle image through this proxy. That fetch is the only request a Capy solve makes." |
+| `timeout` | integer | No | `CAPSKIP_TIMEOUT` (120) | "Seconds to wait before giving up. Maximum 600." |
+
+`proxy` has the same `{ type, uri }` shape documented under `capskip_solve_recaptcha` above.
+
+> `api.capy.me` no longer resolves, although several solver services still document it. The live host is `jp.api.capy.me`; if a site's widget points somewhere else, pass that as `api_server`.
+
+### Finding the captcha key
+
+It is in the page source as `capy_captchakey`, or in the widget script URL: `<script src="https://jp.api.capy.me/puzzle/get_js/?k=PUZZLE_XXXX">`.
+
+### Output shape
+
+| Field | Type | Always present | Description |
+|---|---|---|---|
+| `captchaId` | string | yes | CapSkip's internal id for this solve |
+| `code` | string | yes | The raw answer object, as a JSON string |
+| `solveSeconds` | number | yes | Wall-clock time the solve took |
+| `captchakey` | string | when the answer parsed | The value for the form's `capy_captchakey` field |
+| `challengekey` | string | when the answer parsed | The value for the form's `capy_challengekey` field. Single-use. |
+| `answer` | string | when the answer parsed | The value for the form's `capy_answer` field — the drag path |
+| `respKey` | string | when the answer parsed | Empty for a puzzle solve; present only for shape compatibility |
+
+### Example
+
+Request:
+
+```json
+{
+  "sitekey": "PUZZLE_Abc1dEFghIJKLM2no34P56q7rStu8v",
+  "url": "https://example.com/login"
+}
+```
+
+Response (`structuredContent`):
+
+```json
+{
+  "captchaId": "10433",
+  "code": "{\"captchakey\":\"PUZZLE_Abc1dEFghIJKLM2no34P56q7rStu8v\",\"challengekey\":\"BalY2gJaI8uA2SGVOZhqBQ3V0CYSNNGP\",\"answer\":\"0xax8ex0xax84x...\",\"respKey\":\"\"}",
+  "solveSeconds": 2.14,
+  "captchakey": "PUZZLE_Abc1dEFghIJKLM2no34P56q7rStu8v",
+  "challengekey": "BalY2gJaI8uA2SGVOZhqBQ3V0CYSNNGP",
+  "answer": "0xax8ex0xax84x0xkx7qx0x18x76x...",
+  "respKey": ""
+}
+```
+
+### Why a solve takes about two seconds
+
+Capy grades the wall-clock gap between issuing the puzzle and verifying the answer, and refuses anything superhuman with `CAPTCHA verification failed` — the same message a wrong answer gets. CapSkip therefore holds every result until two seconds have elapsed since it drew the puzzle. The detection itself takes about a tenth of a second; the rest is a deliberate wait. Nothing to configure.
+
+---
+
+## `capskip_solve_captchafox`
+
+Solve a CaptchaFox challenge. CaptchaFox scores the browser itself rather than asking the visitor to read anything, so most solves draw no puzzle at all. Returns a token to put in the form field named `cf-captcha-response`, verbatim — it is verified server side against the session that produced it, so any edit invalidates it.
+
+### Parameters
+
+| Name | Type | Required | Default | Description |
+|---|---|---|---|---|
+| `sitekey` | string | Yes | — | "The public key the widget renders with, conventionally prefixed 'sk_'." |
+| `url` | string (URL) | Yes | — | "Full URL of the page the captcha appears on, including scheme." |
+| `api_server` | string | No | `https://cdn.captchafox.com/` | "The widget entry point the target page loads." |
+| `proxy` | object | No | — | "Solve from this network." |
+| `timeout` | integer | No | `CAPSKIP_RECAPTCHA_TIMEOUT` (300) | "Seconds to wait before giving up. Maximum 600." |
+
+### The page URL has to match the key
+
+CaptchaFox keys are registered against a list of allowed domains and the service checks the host before it issues anything. A key that is correct but used on a page outside that list is refused permanently, not intermittently — so a sitekey that fails immediately and consistently usually means the wrong page URL, not a bad key. CapSkip reports that case rather than retrying it, because retrying cannot help.
+
+### Choosing the widget source
+
+| `api_server` | Token | Default |
+|---|---|---|
+| `https://cdn.captchafox.com/` | Plain | Yes |
+| `https://s.uicdn.com/mampkg/…` | `MAM_` prefixed | No |
+
+Read the value from the `<script>` tag that loads the widget. Sending the wrong one still succeeds, but returns a token in a format the target site will not accept — a silent verification failure rather than an error.
+
+### Challenge types
+
+| Challenge | Frequency | Supported |
+|---|---|---|
+| Invisible | Usually | Yes |
+| Slide | Sometimes | Yes |
+| Image select | Rarely | No |
+| Audio | Rarely | No |
+
+The two unsupported ones are uncommon and a retry usually draws a different challenge, so treat an unsolvable result as a signal to resubmit rather than a permanent failure of the key.
+
+### Output shape
+
+| Field | Type | Always present | Description |
+|---|---|---|---|
+| `captchaId` | string | yes | CapSkip's internal id for this solve |
+| `code` | string | yes | The token — the same string as `token` |
+| `solveSeconds` | number | yes | Wall-clock time the solve took |
+| `token` | string | yes | The value to submit in the `cf-captcha-response` field |
+| `userAgent` | string | when the solve reported one | The UA the token was minted under — the browser's own, not one you sent |
+
+### Example
+
+Request:
+
+```json
+{
+  "sitekey": "sk_xtNxpk6fCdFbxh1_xJeGflSdCE9tn99G",
+  "url": "https://example.com/signup"
+}
+```
+
+Response (`structuredContent`):
+
+```json
+{
+  "captchaId": "10434",
+  "code": "177f50c25b845601e5c779cdb51b040d...",
+  "solveSeconds": 6.31,
+  "token": "177f50c25b845601e5c779cdb51b040d...",
+  "userAgent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) ... Chrome/146.0.0.0 Safari/537.36"
+}
+```
+
+Submit the token under the reported `userAgent`, not your own: CapSkip solves in a real browser and the token is bound to that browser's identity.
+
+---
+
+## `capskip_solve_friendly_captcha`
+
+Solve a Friendly Captcha proof-of-work challenge. Nothing is shown on screen — the widget does arithmetic instead of asking the visitor to do anything.
+
+### Parameters
+
+| Name | Type | Required | Default | Description |
+|---|---|---|---|---|
+| `sitekey` | string | Yes | — | "The data-sitekey attribute of the widget element — the one carrying class='frc-captcha'." |
+| `url` | string (URL) | Yes | — | "Full URL of the page the captcha appears on, including scheme." |
+| `version` | `"v1"` \| `"v2"` | No | `v1` | "The protocol version the site uses. Send this or module_script." |
+| `module_script` | string | No | — | "The src of the widget script tag carrying type='module'." |
+| `nomodule_script` | string | No | — | "The src of the widget script tag carrying 'nomodule'." |
+| `api_server` | string | No | `global` | "The data-residency tenant the sitekey belongs to: 'global', 'eu', or a full URL." |
+| `proxy` | object | No | — | "Solve from this network." |
+| `timeout` | integer | No | `CAPSKIP_RECAPTCHA_TIMEOUT` (300) | "Seconds to wait before giving up. Maximum 600." |
+
+### Version 1 and version 2
+
+Two entirely different protocols ship under this one name, sharing a brand and a sitekey namespace and nothing else, and a sitekey does not tell you which a site uses. Both are live. Solve the wrong one and you get a well-formed token the target site rejects, with no indication that the version was the problem.
+
+| `version` | Widget package | Script | Form field |
+|---|---|---|---|
+| `v1` | `friendly-challenge` | `widget.module.min.js` / `widget.min.js` | `frc-captcha-solution` |
+| `v2` | `@friendlycaptcha/sdk` | `site.min.js` | `frc-captcha-response` |
+
+CapSkip decides in this order, stopping at the first answer: the `version` parameter; then the script URL from `module_script` or `nomodule_script`, which is the most reliable signal because it is the build the site actually loads; then v1. The tool's text reply names the form field matching the version that was actually solved, so an agent does not have to work it out.
+
+A `version` outside `v1`/`v2` is refused by the schema before the call reaches CapSkip.
+
+### Output shape
+
+| Field | Type | Always present | Description |
+|---|---|---|---|
+| `captchaId` | string | yes | CapSkip's internal id for this solve |
+| `code` | string | yes | The token — the same string as `token` |
+| `solveSeconds` | number | yes | Wall-clock time the solve took |
+| `token` | string | yes | The value to submit, in `frc-captcha-solution` (v1) or `frc-captcha-response` (v2) |
+
+### Example
+
+Request:
+
+```json
+{
+  "sitekey": "FCMGEMUD2M567T8G",
+  "url": "https://example.com/signup",
+  "version": "v2"
+}
+```
+
+Response (`structuredContent`):
+
+```json
+{
+  "captchaId": "10435",
+  "code": "AQQA.vW7kd3CujKT8PaQgEcW18QaH...",
+  "solveSeconds": 18.4,
+  "token": "AQQA.vW7kd3CujKT8PaQgEcW18QaH..."
+}
+```
+
+### Token sizes differ sharply between versions
+
+A v1 token is four dot-separated parts and runs to a few hundred characters. A v2 token is a single opaque string beginning `AQQA.` and is roughly six kilobytes, so make sure whatever carries it — a hidden field, a database column, a proxied request — is sized for that.
+
+### Solve time is not a constant
+
+The service decides how much work a request is worth at the moment it is made, and raises that figure for addresses it has already seen a lot of: the published range between a fresh address and a heavily used one is close to thirty times the work for the same token. Budget for that in your timeout rather than assuming a fixed duration, and use a proxy pool past casual volume.
+
+---
+
 ## Validation errors
 
 Every tool's schema is a strict object: any key it does not declare is rejected rather than ignored, and every required key must be present. These failures return `isError: true` before the call ever reaches CapSkip. Examples:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "capskip-mcp",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "description": "Captcha solver MCP server for AI agents: solve reCAPTCHA v2/v3, Cloudflare Turnstile, GeeTest and image captchas via CapSkip, a local unlimited captcha solver with no per-solve fees.",
   "main": "./dist/server.js",
   "exports": {
@@ -33,7 +33,7 @@
   "files": ["dist", "docs", "examples", "CHANGELOG.md", "SECURITY.md"],
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.30.0",
-    "capskip": "^1.2.0",
+    "capskip": "^1.3.0",
     "zod": "^4.4.3"
   },
   "devDependencies": {