# hCaptcha (hcaptcha.com)

Detects bots and fraud in web, app and server traffic, and serves challenges that block automated abuse and account takeovers.

- Atlas card: https://inite.ai/en/atlas/hcaptcha.com
- Site: https://hcaptcha.com
- For: security teams protecting websites and apps from bots, fraud and account abuse
- Categories: security
- Use not measured/100 · alive 100/100

## Used for

- block account takeover attempts on login
- stop abuse across multiple accounts
- prevent fraudulent payment transactions

## Price

- from 99 USD/month, free plan (read 2026-10-30 on https://hcaptcha.com/pricing)

## For developers

- MCP server: https://mcp.hcaptcha.com/mcp (not in the official registry; auth on 2026-10-30)
- Read 2026-10-30

## MCP server, measured daily

Server: https://mcp.hcaptcha.com/mcp, checked every day since 2026-10-30 (3 checks).

- Answered: measuring, 3 daily checks so far
- Median first answer: 136 ms
- Sign-in: OAuth (the client signs the user in)
- Method: https://inite.ai/en/atlas/mcp/report

## Your data

- Certifications stated: iso27001, iso27701, soc2, pci, gdpr, ccpa
- Read 2026-10-30

---

Source: INITE Atlas, https://inite.ai/en/atlas/hcaptcha.com. JSON: https://inite.ai/api/atlas/hcaptcha.com. MCP: https://inite.ai/api/mcp (atlas_lookup).