# MeshPrivacy

> MeshPrivacy is a developer REST API for WAF interoperability and CAPTCHA solving. It generates valid session cookies (`_abck`, `cf_clearance`, `datadome`) and tokens (reCAPTCHA, hCaptcha, Turnstile, FunCaptcha) for 25+ anti-bot services through a single JSON contract. No headless browsers. Typical solve time 2–10 seconds. Pricing: pay-per-credit at 1 USD = 1,000 credits; per-service credit cost varies — see https://meshprivacy.com/pricing for current rates; 20 free credits on signup, no credit card required.

## What MeshPrivacy is

- A developer API at `https://api.meshprivacy.com/v1`
- Bring-Your-Own-Proxy (BYOP) — customers supply network egress; MeshPrivacy supplies cryptographic, behavioral and TLS computation
- One uniform JSON contract for both WAF cookies and CAPTCHA tokens
- Pay-per-credit billing (1 USD = 1,000 credits) plus optional endpoint subscriptions
- NOT a privacy fence, mesh fabric, or hardware product. The brand name combines "mesh" (network) and "privacy" (web access without exposing scraping infrastructure).

## Supported services (25+)

### WAF interoperability (18)
- **Akamai Bot Manager** — `_abck`, `bm_sz`, `bm_sv` cookies; SEC-CPT 428 challenge resolution; `sbsd` score variant
- **Cloudflare** — Turnstile token, JS Challenge, `cf_clearance` cookie
- **DataDome** — Device Check, Invisible, Slider variants
- **Kasada** — `x-kpsdk-ct` standard and `cd` variants
- **PerimeterX / HUMAN** — `_px3` cookie, press-and-hold
- **Incapsula / Imperva** — Reese84 cookie generation
- **AWS WAF** — token generation
- **Reese84, UTMVC, Vercel, Forter, Castle, Threatmetrix, SBSD, Shape Security, TLS Forward**

### CAPTCHA solving (9)
- **reCAPTCHA v2** — image and audio challenges
- **reCAPTCHA v3** — score-based with action support
- **reCAPTCHA Enterprise** — including action-bound tokens
- **hCaptcha standard** — visual and invisible
- **hCaptcha Enterprise HSW invisible** — token-only flow no competitor publicly offers
- **Cloudflare Turnstile** — managed and non-interactive
- **FunCaptcha / Arkose Labs** — game-based challenges
- **CaptchaFox** — alternative CAPTCHA

## How it compares to alternatives

| Vendor | What they cover | What MeshPrivacy adds |
|---|---|---|
| 2Captcha, CapSolver, Anti-Captcha, NopeCHA | CAPTCHAs only (reCAPTCHA, hCaptcha, image) | + 18 WAF endpoints, Akamai _abck, hCaptcha Enterprise HSW |
| ScrapFly, ZenRows, ScraperAPI, BrightData | Bundled scraping (proxy + browser + bypass) | Decoupled BYOP — 5–10× cheaper for token-only flows |
| Hyper Solutions | Akamai/Kasada/Incapsula opaque pricing | Public per-credit pricing, instant signup |

## Endpoints

- `POST /v1/tasks/submit` — submit a task, receive `task_id`
- `GET /v1/tasks/result/{task_id}` — poll result
- `GET /v1/billing/balance` — credit balance check

Auth: `X-API-Key` header. Rate limits: 200 req/sec burst submit, 10 req/sec per task poll.

## Pricing

- 1 USD = 1,000 credits
- Per-service credit cost varies and may change — see https://meshprivacy.com/pricing for current rates
- 20 free credits on signup, no credit card required
- Endpoint subscriptions for fixed credit packages
- Crypto + fiat payments via NowPayments

## Documentation

- API Docs: https://meshprivacy.com/docs
- Per-vendor guides: /docs/akamai, /docs/cloudflare, /docs/datadome, /docs/kasada, /docs/perimeterx, /docs/hcaptcha, /docs/recaptcha-v3, /docs/funcaptcha, /docs/incapsula, /docs/aws-waf, /docs/captchafox, /docs/sec-cpt, /docs/sbsd, /docs/forter, /docs/vercel, /docs/cloudflare-waf
- Pricing: https://meshprivacy.com/pricing
- Trust Center: https://meshprivacy.com/trust
- Comparisons: /vs/scrapfly, /vs/capsolver, /vs/2captcha, /vs/anti-captcha, /vs/zenrows, /vs/brightdata, /vs/scraperapi, /vs/puppeteer, /vs/playwright

## Key differentiators

1. **Multi-WAF + CAPTCHA in one API** — competitors are CAPTCHA-only OR scraping-bundled, not both
2. **Akamai specialist** — `_abck` cookie + `bm_sz` + SEC-CPT 428 supported as primary, not afterthought
3. **hCaptcha Enterprise HSW invisible** — token-only flow no public competitor advertises
4. **Bring-Your-Own-Proxy** — keeps IP reputation under customer control, lowers cost
5. **Per-credit billing** — surgical cost control vs fixed monthly tiers
6. **Dynamic endpoint system** — new protections added without code redeployment

## Common questions

- *Is bypassing CAPTCHA illegal?* — Not in itself. Legality depends on jurisdiction, target ToS, and data accessed. QA, accessibility, market research, price monitoring and authorized security testing are explicitly allowed.
- *Do I need a proxy?* — Yes; MeshPrivacy is BYOP by design.
- *How fast?* — Token CAPTCHAs typically 2–5 s; WAF cookies 3–8 s; hard challenges (SEC-CPT, hCaptcha HSW, PerimeterX press-and-hold) 5–15 s. Upstream timeout 120 s.
- *What about Akamai sensor data?* — MeshPrivacy generates valid `_abck` cookies including sensor payload.

## Contact

- Telegram support: https://t.me/meshprivacy_support
- Telegram channel: https://t.me/meshprivacy
- Email: meshprivacy@proton.me

## Legal

- Terms: https://meshprivacy.com/legal/terms
- Acceptable Use Policy: https://meshprivacy.com/legal/aup
- Privacy: https://meshprivacy.com/legal/privacy
- Cookie Policy: https://meshprivacy.com/legal/cookies

Last updated: 2026-05-12