Castle Solver API
Generate valid Castle tokens for X/Twitter and Android apps like DailyPay. One request, ~50 ms.
Only pay for what you use
Buy credit once, spend it per token. No subscription, no monthly bill — your balance only drops when you generate.
- $0.00055 per token — $0.55 per 1,000 requests
- Credits never expire, no minimums
- 100 req/sec · live balance and usage dashboard
Metered usage
Prepaid credit, billed per token. Unused balance never expires.
- Web & Android token generation, live now
- Bearer-key auth · per-key usage stats
- Real-time balance + usage dashboard
- No minimums, no expiring credits
How it works
Send one request, Castle Solver computes a valid token, and you attach it to your request to the Castle-protected site or app.
- Send a requestPOST
/generate/webor/generate/androidwith the target site or app identity. Full bodies live in the API reference. - We generate the tokenA fresh, valid Castle token is computed server-side in ~50 ms — no browser farm, no manual challenges.
- Use the tokenAttach the returned token and headers to your request to the target site or app.
curl -X POST https://castle.botwitter.com/generate/web \
-H "Content-Type: application/json" \
-H "Authorization: Bearer YOUR_API_KEY" \
-d '{
"user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)",
"domain": "x.com"
}'Authorization: Bearer YOUR_API_KEY with every request — get one from the plan above.Frequently asked
Short answers to the questions developers ask most before wiring Castle Solver in.
Authorization: Bearer YOUR_API_KEY. A key is required./generate/web returns a browser Castle token; /generate/android returns a native Android app token as X-Castle-Request-Token + X-Castle-Client-Id. Both endpoints are live.public_key, app_label, app_version, app_version_code) plus a signed session_id. Reuse the returned session_id to keep the same device, or omit it to mint a fresh one. DailyPay is our example app; for your specific app or any other, contact us to add or confirm support.domain field to target a Castle-protected site — x.com and signin.rockstargames.com are supported out of the box (keys listed in the API reference). Other sites are supported too — contact us for ones we haven't tuned yet, or for other apps and custom needs.