Castle
This documentation provides detailed information on generating the Castle x-castle-request-token.
Last updated
This documentation provides detailed information on generating the Castle x-castle-request-token.
Last updated
Castle is an anti-bot service designed to prevent automated attacks such as account takeovers, fake account creation, and policy-violating behaviors. It monitors browser characteristics, user behavior, and request patterns to detect malicious activity.
When interacting with Castle-protected endpoints, you must include a valid x-castle-request-token
. This token is generated using various browser-specific factors, including the __cuid
cookie and other session details. Our API generates this token, making it easy to integrate with Castle-protected websites, which often include site keys beginning with pk_
.