Tokens today
13,449
Generate valid Castle tokens for X/Twitter and Android apps like DailyPay. One request, ~50 ms.
Buy credit once, spend it per token. No subscription, no monthly bill — your balance only drops when you generate.
Prepaid credit, billed per token. Unused balance never expires.
Send one request, Castle Solver computes a valid token, and you attach it to your request to the Castle-protected site or app.
/generate/web or /generate/android with the target site or app identity. Full bodies live in the API reference.curl -X POST https://castle.botwitter.com/generate/web \
-H "Content-Type: application/json" \
-H "Authorization: Bearer YOUR_API_KEY" \
-d '{
"user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)",
"domain": "x.com"
}'
Authorization: Bearer YOUR_API_KEY with every request — get one from the plan above.Short answers to the questions developers ask most before wiring Castle Solver in.
Authorization: Bearer YOUR_API_KEY. A key is required./generate/web returns a browser Castle token; /generate/android returns a native Android app token as X-Castle-Request-Token + X-Castle-Client-Id. Both endpoints are live.public_key, app_label, app_version, app_version_code) plus a signed session_id. Reuse the returned session_id to keep the same device, or omit it to mint a fresh one. DailyPay is our example app; for your specific app or any other, contact us to add or confirm support.domain field to target a Castle-protected site — x.com and signin.rockstargames.com are supported out of the box (keys listed in the API reference). Other sites are supported too — contact us for ones we haven't tuned yet, or for other apps and custom needs.