HeyTap
HeyTap Captcha is a security system that protects websites from automated actions. It analyzes user behavior and generates a token to confirm legitimate activity.
Request parameters
type<string>requiredCustomTask
class<string>requiredheytap
websiteURL<string>requiredThe address of the main page where the captcha is located.
websiteKey<string>requiredThe value of the siteKey parameter found on the page.
apiServer (inside metadata)<string>optionalSubdomain of the HeyTap API server. Specify only the domain without the https:// prefix. If different from the default captcha-sec.heytapmobi.com, you must specify it.
userAgent<string>optionalBrowser User-Agent. Use the current value supported by CapMonster Cloud: userAgentPlaceholder
You can get the latest value at: https://capmonster.cloud/api/useragent/actual.
Create task method
https://api.capmonster.cloud/createTask
Request example
{
"clientKey": "API_KEY",
"task": {
"type": "CustomTask",
"class": "heytap",
"websiteURL": "https://yourwebsite.com/",
"websiteKey": "your-website-key",
"userAgent": "userAgentPlaceholder",
"metadata": {
"apiServer": "captcha-sec.heytapmobi.com"
}
}
}
Response example
{
"errorId": 0,
"taskId": 407533072
}
Get task result method
Use the method getTaskResult to obtain the HeyTap solution.
https://api.capmonster.cloud/getTaskResult
Request example
{
"clientKey":"API_KEY",
"taskId": 407533072
}
Response example
{
"errorId": 0,
"cost": 0.0007,
"status": "ready",
"solution": {
"data": {
"token": "1A183F8CFC7631B08855D824....."
}
}
}
How to find the websiteKey
- Open the page with HeyTap Captcha.
- Open Developer Tools (F12 or right-click → Inspect).
- Go to the Network tab and reload the page.
- Look for a request to a URL containing HeyTap captcha API (usually to
heytapmobi.com). - The
akparameter in the URL is thewebsiteKey.
Alternatively, search the page source code for initialization parameters or configuration objects related to HeyTap.
How to find the apiServer
- In Developer Tools, go to the Network tab.
- Look for requests to domains ending with
heytapmobi.com. - Copy the subdomain (for example,
captcha-sec.heytapmobi.com). - Pass this value in the
metadata.apiServerfield without thehttps://prefix.
