Autopass API

Autopass returns a valid Search Guard SG_SS token for your requests. Send us the challenge page, get a token back, attach it to your request. This page explains how to set it up, what it returns, & what each returned value is.

Quick start

Every request needs your API key. Grab it from your dashboard after signing up. The flow is: request a token from Autopass, then attach it as the SG_SS cookie on your own request.

curl -X POST "https://solve.autopia.top/token" \
  -H "x-api-key: AUT_abc..." \
  -H "content-type: application/json" \
  -d '{ 
    "html": "<base64 of the challenge page>", 
    "took": "how long it took to fetch challenge page (ms)", 
    "zone": "The timezone of your IP" 
  }'

Authentication

Authenticate every request with your API key in the x-api-key header. Requests without a valid key return 401 Unauthorized.

x-api-key: AUT_abc...

Get a solution

POST /token

Submits a challenge page & returns a valid token. Send a JSON body:

Field	Type	Description
html required	string	The challenge page, Base64-encoded.
took	number	Optional. Milliseconds your first request took, used to tune timing.
zone	string	Optional. Your exit timezone (e.g. `America/New_York`) when routing through a proxy.

POST /token
Content-Type: application/json
x-api-key: AUT_abc...

{
  "html": "PGh0bWw+…"
}

Response

A 200 OK returns the token plus metadata to pair with your next request:

Field	Type	Description
token	string	The value to set as the `SG_SS` cookie.
sei	string	The sei parameter for the second request.
connection	object	`{ downlink, rtt }` hints for your client.
accept-language	string	The accept-language header in your request

{
  "accept-language": "en-US,en;q=0.9",
  "connection": {
        "downlink": 1.4,
        "effectiveType": "4g",
        "rtt": 100
  },
  "sei": QtLCar30FavRkPIPz...
  "token": *mKSapMDyAAbOW0Se7lt9EjKjJ7vFj...
}

Errors

Errors return a non-200 status and a JSON body with an error message.

Status	Description
400	Missing required fields such as `html`.
401	Missing or invalid API key.
402	Plan has ended, check dashboard to renew.
429	Exceeded 10,000 RPM.
5xx	Server issue, contact support if persistent.

{ "error": "quota exceeded" }

Rate limits & RPM

Autopass sustains 10,000+ tokens per minute (TPM, inline with RPM). There is no maximum requests; only a maximum RPM (unless you require more). If you hit 429, simply tone down the concurrency.

Quota & billing

The free trial includes 50 solutions. Each successful token is one solution; failed tokens don't count. Autopass Unlimited is a flat $2,500/week with no per-request metering and no overage fees. Manage your plan and get your key in the dashboard.

Best practices

Capture the NID cookie of a successful request, you can re-use it for a few searches before requiring a new token.
Send the challenge page exactly as received, Base64-encoded, without modifying it.
Retry 5xx and 429 with lowered concurrency; don't retry 400/401.
Don't leak your API key, your RPM will be affected, slowing your productivity.

Support

Questions or higher volume needs? Contact us on Telegram or Discord.