reCAPTCHA Enterprise API
reCAPTCHA Enterprise API
Google reCAPTCHA Enterprise API is advanced bot/abuse protection — behavioral scoring, adaptive risk assessment, no friction for real users.
Fully invisible verification (v3 has no CAPTCHA UI)
Paid product (v3 is free but Enterprise charges per call)
Enable reCAPTCHA Enterprise in GCP Console, create a site key (web/iOS/Android distinct). Frontend SDK integration; backend calls createAssessment to verify token and get score.
Uptime · 30-day window
About this API
reCAPTCHA Enterprise is the flagship version of Google's anti-bot service. Regular reCAPTCHA v2 (click "I'm not a robot") and v3 (invisible scoring) are free with limited functionality — only binary bot vs human classification. Enterprise is a paid product, differentiated by risk-control depth: analyzes dozens of behavioral signals (mouse trajectories, keyboard cadence, device fingerprint, IP history, Google web-wide behavioral correlation), outputs precise 0.0-1.0 risk scores; apps customize response by score (0.9+ pass through, 0.3-0.9 step-up, < 0.3 reject). Specialized Account Defender for account takeover (ATO) detection, Password Defender for credential stuffing. Not recommended for mainland China due to Google network reachability issues — use hCaptcha, NetEase Yidun, Alibaba Captcha instead.
What you can build
- 1Login/signup bot defense
- 2E-commerce blocking automated fake orders
- 3Content sites blocking scraping
- 4Step-up verification for high-risk actions (password reset, payment)
Strengths & limitations
Strengths
- Fully invisible verification (v3 has no CAPTCHA UI)
- Risk scoring based on Google's web-wide behavioral data
- Fine-grained risk scores (0.0-1.0) enable custom response strategies
Limitations
- Paid product (v3 is free but Enterprise charges per call)
- Network reachability issues for mainland China users
Example request
curl https://google.com/<endpoint>Getting started
Enable reCAPTCHA Enterprise in GCP Console, create a site key (web/iOS/Android distinct). Frontend SDK integration; backend calls createAssessment to verify token and get score.
FAQ
How much more expensive than v3?+
First 1M assessments/month free; beyond that $1 / 1000. Mid-traffic sites: hundreds per month.
Does it work in mainland China?+
Technically Google API access is unstable in mainland China. Use hCaptcha or domestic solutions.
Technical details
- Auth type
- unknown
- Pricing
- unknown
- Protocols
- REST
- SDKs
- javascript, ios, android, go, java, python
- Response time
- 43 ms
- Last health check
- 5/12/2026, 7:37:36 AM
More from Google
Google Workspace Admin SDK API programmatically manages Workspace organizations — users, groups, devices, domains, audit logs, organizational units.
Retrieve AdMob accounts, apps, ad units, ad sources, and generate mediation or network reports.
Work with AdSense Host accounts, ad clients, ad units, reports, and ad code generation from one API surface.
Programmatically manage Apigee organizations, API proxy deployments, attributes, certificates, and hybrid operations.
Google BigQuery API is the REST interface to GCP's flagship data warehouse — execute SQL queries, manage datasets/tables, stream inserts, and use built-in ML.
Control Binary Authorization attestors and policy checks for container images deployed to GKE and Anthos.
Fetch Business Profile location metrics, daily time series, and monthly search keyword impressions.
Google Calendar API lets apps create, read, and update calendar events programmatically — the go-to integration for scheduling apps.