Autopass API

Autopass returns a valid token for your requests. Send us the challenge page, get a token back, and attach it to your request. This page explains how to set it up, what it returns, and what each returned value is.

Quick start

Every request needs your API key. Grab it from your dashboard after signing up. The flow is: request a token from Autopass, then attach it as the SG_SS cookie on your own request.

curl -X POST "https://solve.autopia.top/token" \
  -H "x-api-key: AUT_abc..." \
  -H "content-type: application/json" \
  -d '{ 
    "html": "<base64 of the challenge page>", 
    "took": "how long it took to fetch challenge page (ms)", 
    "zone": "The timezone of your IP" 
  }'

Authentication

Authenticate every request with your API key in the x-api-key header. Requests without a valid key return 401 Unauthorized.

x-api-key: AUT_abc...

Get a solution

POST /token

Submits a challenge page and returns a valid token. Send a JSON body:

Field	Type	Description
html required	string	The challenge page, Base64-encoded.
took	number	Optional. Milliseconds your first request took, used to tune timing.
zone	string	Optional. Your exit timezone (e.g. `America/New_York`) when routing through a proxy.

POST /token
Content-Type: application/json
x-api-key: AUT_abc...

{
  "html": "PGh0bWw+…"
}

Response

A 200 OK returns the token plus metadata to pair with your next request:

Field	Type	Description
token	string	The value to set as the `SG_SS` cookie.
sei	string	The sei parameter for the second request.
connection	object	`{ downlink, rtt }` hints for your client.
accept-language	string	The accept-language header in your request

{
  "accept-language": "en-US,en;q=0.9",
  "connection": {
        "downlink": 1.4,
        "effectiveType": "4g",
        "rtt": 100
  },
  "sei": QtLCar30FavRkPIPz...
  "token": *mKSapMDyAAbOW0Se7lt9EjKjJ7vFj...
}

Errors

Errors return a non-200 status and a JSON body with an error message.

Status	Description
400	Missing required fields such as `html`.
401	Missing or invalid API key.
402	Plan has ended, check dashboard to renew.
429	Exceeded 10,000 RPM.
5xx	Server issue, contact support if persistent.

{ "error": "quota exceeded" }

Rate limits & RPM

Autopass sustains 10,000+ tokens per minute (TPM, inline with RPM). There is no maximum requests; only a maximum RPM (unless you require more). If you hit 429, simply tone down the concurrency.

Quota & billing

The free trial includes 50 solutions. Each successful token is one solution; failed tokens don't count. Autopass Unlimited is a flat $2,500/week with no per-request metering and no overage fees. Manage your plan and get your key in the dashboard.

Best practices

Capture the NID cookie of a successful request, you can re-use it for a few searches before requiring a new token.
Send the challenge page exactly as received, Base64-encoded, without modifying it.
Retry 5xx and 429 with lowered concurrency; don't retry 400/401.
Don't leak your API key, your RPM will be affected, slowing your productivity.

Support

Questions or higher volume needs? Contact us on Telegram or Discord.