Captcha MCP server
Which MCP servers are Captcha's own, from the official registry and from asking its own domain, whether they answer, and what they offer. A program checked each of these, nobody copied them from a product page.
read 2026-10-23
- Registry namecc.captcha/captchaccverified in the MCP registry
The registry name sits under captcha.cc. The registry only lets a publisher use that namespace after proving control of the domain through DNS or HTTP.
- Stateanswerschecked 2026-10-23
- Tools3
- Server calls itselfcaptcha-cc-mcp
- Server version1.0.0
- Protocol version2025-06-18
On 2026-10-23 the server answered initialize and tools/list without a sign-in. First answer in 50 ms.
- Whether its tools do the product's job has not been judged yet.
- Checked on 5 of the 7 days it takes to judge reliability.
Once connected
- For "verify form submissions on the server", the likely first call is make_siteverify_request.
- create_challenge change data without a sign-in: anyone with the address can call them.
- Parameters are untyped or undescribed in 1 of 3 tools: check arguments before calling.
Said by rules from the measurements above. The likely first call is a model's pick from the tool list; read its description before relying on it.
- INITE MCP scoreafter a weeka score needs 7 daily checks: 5 so far
- Answeredmeasuring5 of the 7 daily checks it takes to print a share
- Median first answer287 ms
- Space in an agent's context≈ 423 tokensthe definitions of all its tools (3), which an agent carries on every turn
- Tool definitionsA · 94 of 100
- Typed results0 of 3 toolsdeclared outputSchema: results come typed, read once
- Parameters without a description: in 1 of 3
What an agent can do with it
- not sure · block bots from contact and signup forms
- can do · verify form submissions on the server
- not sure · add a captcha to a WordPress site
Each of the product's use cases, put to Jev against this server's tool list: can an agent do it with these tools?
Worth a look
- Tools that change data, on a server that answers without a sign-in: create_challenge
A program checks the server once a day: initialize and tools/list, no model. Tokens are the definitions' length at about four characters a token. The grade averages six checks of every tool's name, description, schema and annotations; it says how well the tools are described, not whether they work. The score weighs what was measured and nothing else: answering (25%), doing the product's job (25%), definitions (20%), context (10%), use (10%) and how readily a client connects (10%). A part that was not measured is left out, and a hidden instruction caps the score at 40. The state of vendors' MCP servers: method and numbers →
make_widget_snippetReturn a minimal browser SDK snippet for mounting captcha.cc and submitting the proof token to an application endpoint.
make_siteverify_requestReturn a server-side fetch example for redeeming a captcha.cc proof token exactly once.
create_challengeCreate a live captcha.cc challenge for a site key and allowed hostname. Useful for smoke tests and integration checks.
How to connect
Add the server to your MCP client config. Claude Desktop, Cursor and most other clients read this shape:
{
"mcpServers": {
"captchacc": {
"type": "http",
"url": "https://captcha.cc/mcp"
}
}
}Add it
Claude Code, in a terminal
claude mcp add --transport http captcha https://captcha.cc/mcpclaude.ai, ChatGPT and other clients: add https://captcha.cc/mcp as a custom connector in the settings.
Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.
Cookies
Before we count this visit
Analytics and ad measurement tell us which pages and which of our ads do their job: Google Analytics and Google Ads, the Meta pixel, Yandex Metrica, and one first-party id of our own. Nothing is stored until you answer, and declining changes nothing about the site.