DeviousSolver API

Base URLs

Solver API: https://api.devioussolver.com
Key API: https://key.devioussolver.com

Authentication

Pass your API key as JSON field apiKey in the /solve request body.

To check balance, call the Key API with your key in the URL.

Want to verify everything fast? Use Testing the API.

Check key balance

GET https://key.devioussolver.com/key/{api_key}

Response

{
  "api_key": "YOUR_API_KEY",
  "max_solves": 50000,
  "remaining_solves": 0,
  "solves": 50000,
  "ttl": "no_expiration",
  "unlimited": false
}

Fields

max_solves: solve limit for the key.
solves: total solves used.
remaining_solves: remaining quota. Can be negative if you exceeded.
ttl: time-to-live. Example: no_expiration.
unlimited: if true, ignore max_solves.

Examples

curl -sS "https://key.devioussolver.com/key/YOUR_API_KEY"

Solve

POST https://api.devioussolver.com/solve

Send a JSON body with apiKey, fingerprintData, and requestData.

Fields

Field

Type

Required

Description

apiKey

string

Yes

Your DeviousSolver API key.

fingerprintData

object

Fingerprint hints. Recommended if you can capture them.

fingerprintData.challengeUrl

string

Arkose challenge domain. Example: https://arkoselabs.roblox.com.

fingerprintData.documentReferrer

string

Referrer URL (the page you came from). Use "" if none.

fingerprintData.targetLocation

string

Target URL where the challenge is shown.

fingerprintData.titleTab

string

Browser tab title for the target page.

fingerprintData.windowAncestorOrigins

array

Window ancestry origins (if you have them).

fingerprintData.windowTreeIndex

array

Window tree index (if you have it).

fingerprintData.windowTreeStructure

string

Window tree structure. Example: "[[]]".

requestData

object

Yes

Solver request parameters.

requestData.blobExchange

string

Yes

The Arkose “blob” / exchange payload you captured.

requestData.proxy

string

Yes

Authenticated proxy in user:pass@host:port format.

requestData.publicKey

string

Yes

Arkose public key for the site.

requestData.siteUrl

string

Yes

Site base URL. Example: https://www.roblox.com.

requestData.cookies

string

Cookie header string (separated by "; ").

requestData.capiMode

string

UI mode hint. Common: lightbox.

requestData.styleTheme

string

UI style hint. Common: modal.

Formatting rules that break most requests:

requestData.cookies is one string separated by "; ". No commas.
requestData.proxy must include auth: user:pass@host:port.
If you build the payload as JSON, JSON can’t include comments.

Full example payload (all fields)

This includes every field listed in the table above.

{
  "apiKey": "YOUR_API_KEY",
  "fingerprintData": {
    "challengeUrl": "https://arkoselabs.roblox.com",
    "documentReferrer": "",
    "targetLocation": "https://www.roblox.com/login",
    "titleTab": "Log in to Roblox",
    "windowAncestorOrigins": [],
    "windowTreeIndex": [],
    "windowTreeStructure": "[[]]"
  },
  "requestData": {
    "blobExchange": "BLOB_HERE",
    "proxy": "user:pass@ip:port",
    "publicKey": "476068BF-9607-4799-B53D-966BE98E2B81",
    "siteUrl": "https://www.roblox.com",
    "cookies": "cookie1=value1; cookie2=value2; cookie3=value3",
    "capiMode": "lightbox",
    "styleTheme": "modal"
  }
}

Full request example (cURL)

curl -sS "https://api.devioussolver.com/solve" \
  -H "content-type: application/json" \
  -d '{
    "apiKey": "YOUR_API_KEY",
    "fingerprintData": {
      "challengeUrl": "https://arkoselabs.roblox.com",
      "documentReferrer": "",
      "targetLocation": "https://www.roblox.com/login",
      "titleTab": "Log in to Roblox",
      "windowAncestorOrigins": [],
      "windowTreeIndex": [],
      "windowTreeStructure": "[[]]"
    },
    "requestData": {
      "blobExchange": "BLOB_HERE",
      "proxy": "user:pass@ip:port",
      "publicKey": "476068BF-9607-4799-B53D-966BE98E2B81",
      "siteUrl": "https://www.roblox.com",
      "cookies": "cookie1=value1; cookie2=value2; cookie3=value3",
      "capiMode": "lightbox",
      "styleTheme": "modal"
    }
  }'

Proxy requirements (important)

requestData.proxy is required.
Use an authenticated proxy format: user:pass@host:port.
Avoid rotating proxies if you get Do not use rotating.
If you get Low quality IP score, switch proxy pool/provider.
voltproxy is blocked.

Examples

curl -sS "https://api.devioussolver.com/solve" \
  -H "content-type: application/json" \
  -d '{
    "apiKey": "YOUR_API_KEY",
    "fingerprintData": {
      "challengeUrl": "https://arkoselabs.roblox.com",
      "documentReferrer": "",
      "targetLocation": "https://www.roblox.com/login",
      "titleTab": "Log in to Roblox",
      "windowAncestorOrigins": [],
      "windowTreeIndex": [],
      "windowTreeStructure": "[[]]"
    },
    "requestData": {
      "blobExchange": "BLOB_HERE",
      "proxy": "user:pass@ip:port",
      "publicKey": "476068BF-9607-4799-B53D-966BE98E2B81",
      "siteUrl": "https://www.roblox.com",
      "cookies": "cookie1=value1; cookie2=value2; cookie3=value3",
      "capiMode": "lightbox",
      "styleTheme": "modal"
    }
  }'

import requests
import uuid

# Base cookies from your session (optional).
cookies = "cookie1=value1; cookie2=value2"

payload = {
  "apiKey": "YOUR_API_KEY",
  "fingerprintData": {
    "challengeUrl": "https://arkoselabs.roblox.com",
    "documentReferrer": "",
    "targetLocation": "https://www.roblox.com/login",
    "titleTab": "Log in to Roblox",
    "windowAncestorOrigins": [],
    "windowTreeIndex": [],
    "windowTreeStructure": "[[]]"
  },
  "requestData": {
    "blobExchange": "BLOB_HERE",
    "capiMode": "lightbox",
    "cookies": (
      cookies
      + f"; RBXPaymentsFlowContext={uuid.uuid4()}"
      + "; RBXcb=RBXViralAcquisition%3Dtrue%26RBXSource%3Dtrue%26GoogleAnalytics%3Dtrue"
    ),
    "proxy": "user:pass@ip:port",
    "publicKey": "476068BF-9607-4799-B53D-966BE98E2B81",
    "siteUrl": "https://www.roblox.com",
    "styleTheme": "modal"
  }
}

r = requests.post("https://api.devioussolver.com/solve", json=payload, timeout=120)
r.raise_for_status()
data = r.json()
print(data)
print("token:", data.get("token"))

const payload = {
  apiKey: "YOUR_API_KEY",
  fingerprintData: {
    challengeUrl: "https://arkoselabs.roblox.com",
    documentReferrer: "",
    targetLocation: "https://www.roblox.com/login",
    titleTab: "Log in to Roblox",
    windowAncestorOrigins: [],
    windowTreeIndex: [],
    windowTreeStructure: "[[]]",
  },
  requestData: {
    blobExchange: "BLOB_HERE",
    proxy: "user:pass@ip:port",
    publicKey: "476068BF-9607-4799-B53D-966BE98E2B81",
    siteUrl: "https://www.roblox.com",
    cookies:
      "cookie1=value1; cookie2=value2; RBXPaymentsFlowContext=UUID_HERE; RBXcb=RBXViralAcquisition%3Dtrue%26RBXSource%3Dtrue%26GoogleAnalytics%3Dtrue",
    capiMode: "lightbox",
    styleTheme: "modal",
  },
};

const r = await fetch("https://api.devioussolver.com/solve", {
  method: "POST",
  headers: { "content-type": "application/json" },
  body: JSON.stringify(payload),
});

const data = await r.json();
if (!r.ok) throw new Error(`${data?.error ?? "HTTP error"} (${r.status})`);
console.log(data);

Success response

When solved: true, token is present.

{
  "processTime": 14.51,
  "solved": true,
  "token": "782188bef82436ca5.2918562704|r=ap-southeast-1|meta=3|...",
  "variant": "Silent Pass",
  "waves": 0
}

Failed solve response

When solved: false, token may be missing.

{
  "processTime": 14.51,
  "solved": false,
  "variant": "POW",
  "waves": 0
}

Errors

Each error is returned as JSON. processTime varies.

401 — Invalid API key

{
  "error": "Invalid API key",
  "status": 401,
  "processTime": 0.42
}

400 — PUBLIC_KEY_DOESNT_EXIST

{
  "error": "PUBLIC_KEY_DOESNT_EXIST",
  "status": 400,
  "processTime": 0.42
}

400 — PUBLIC_KEY_IS_NOT_VALID

{
  "error": "PUBLIC_KEY_IS_NOT_VALID",
  "status": 400,
  "processTime": 0.42
}

400 — Low quality IP score

{
  "error": "Low quality IP score",
  "status": 400,
  "processTime": 0.42
}

400 — Do not use rotating

{
  "error": "Do not use rotating",
  "status": 400,
  "processTime": 0.42
}

400 — Add Proxy

{
  "error": "Add Proxy",
  "status": 400,
  "processTime": 0.42
}

400 — Add Public Key

{
  "error": "Add Public Key",
  "status": 400,
  "processTime": 0.42
}

400 — Currently not supported!

{
  "error": "Currently not supported!",
  "status": 400,
  "processTime": 0.42
}

401 — Invalid API key

{
  "error": "Invalid API key",
  "status": 401,
  "processTime": 0.42
}

403 — Max solves reached

{
  "error": "Max solves reached",
  "status": 403,
  "processTime": 0.42
}

403 — IP has been blocked

{
  "error": "IP has been blocked",
  "status": 403,
  "processTime": 0.42
}

408 — Request timeout

{
  "error": "Request timeout",
  "status": 408,
  "processTime": 0.42
}

503 — Error Proxy: Couldn't respond after 30s

{
  "error": "Error Proxy: Couldn't respond after 30s",
  "status": 503,
  "processTime": 0.42
}

500 — Server Error

{
  "error": "Server Error",
  "status": 500,
  "processTime": 0.42
}

If you rely on string matching, match the status and core message. Provider-specific wording may change.

PreviousQuickstart NextTesting the API

Last updated 20 minutes ago

Good night

hashtagBase URLs

hashtagAuthentication

hashtagCheck key balance

hashtagResponse

hashtagFields

hashtagExamples

hashtagSolve

hashtagFields

hashtagFull example payload (all fields)

hashtagFull request example (cURL)

hashtagProxy requirements (important)

hashtagExamples

hashtagSuccess response

hashtagFailed solve response

hashtagErrors

Base URLs

Authentication

Check key balance

Response

Fields

Examples

Solve

Fields

Full example payload (all fields)

Full request example (cURL)

Proxy requirements (important)

Examples

Success response

Failed solve response

Errors