Bypass Solution

The PerimeterX web bypass endpoint. You POST the website details, and Takion returns the PerimeterX web needed cookies that the protected website expects.

How the Solution Works

To bypass PerimeterX protection:

1. Provide our API with the website details

2. Parse the returned cookies and use them for requests to the protected website.

Endpoint

The endpoint lives on the px-web subdomain:

https://px-web.takionapi.tech/generate

Generate a PX web session (_px3 cookie)

post

Solves PerimeterX for the given app and page and returns a session that carries the _px3 cookie plus a Takion x-px-session-id. Attach _px3 to your own requests, or keep sending through /tls with the session id.

Authorizations

ApiKeyHeaderApiKeyQuery

x-api-keystringRequired

Body

application/json

proxystringRequired

Proxy in ip:port or ip:port:user:pass format.

Example: 1.2.3.4:8000:user:pass

user_agentstringRequired

The browser User-Agent to emulate (match it on your own requests).

Example: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36

app_idstringOptional

The PX app id (_pxAppId) of the target.

Example: PXu6b0qd2S

page_urlstring · uriOptional

The page the session is for.

Example: https://www.walmart.com/

fast_modebooleanOptional

Quicker solve with a slightly weaker PX score.

Example: true

Other propertiesanyOptional

Responses

200

The PX session. On a bad request the API returns an error field instead — check for error before reading cookies / extra.

application/json

or

401

Authentication or quota failure — HTTP 401 with an error message.

application/json

500

Unexpected server error (HTTP 500).

application/json

post/generate

HTTPcURLJavaScriptPython

POST /generate HTTP/1.1
Host: px-web.takionapi.tech
x-api-key: YOUR_API_KEY
Content-Type: application/json
Accept: */*
Content-Length: 281

{
  "proxy": "1.2.3.4:8000:user:pass",
  "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36",
  "app_id": "PXu6b0qd2S",
  "page_url": "https://www.walmart.com/",
  "fast_mode": true,
  "ANY_ADDITIONAL_PROPERTY": "anything"
}

{
  "cookies": {
    "_px3": "0a3f…c1",
    "ANY_ADDITIONAL_PROPERTY": "text"
  },
  "extra": {
    "x-px-session-id": "sess_9f2c…",
    "ANY_ADDITIONAL_PROPERTY": "anything"
  },
  "ANY_ADDITIONAL_PROPERTY": "anything"
}

Send a session-bound TLS request (optional)

post

Sends an HTTP request from Takion with a realistic browser TLS fingerprint, bound to the session_id from /generate so the PX cookies stay valid across the flow.

(Important) This endpoint is optional. If your own client already reproduces the TLS + header fingerprint matching your User-Agent, just attach the _px3 cookie from /generate to your own requests and skip /tls. Use it only when you can't match the fingerprint yourself — it is always kept up to date with a large bank of fingerprints.

Authorizations

ApiKeyHeaderApiKeyQuery

x-api-keystringRequired

Body

application/json

proxystringRequiredExample: 1.2.3.4:8000:user:pass

session_idstring · nullableOptional

The x-px-session-id from /generate (keeps PX state hot).

methodstring · enumRequiredExample: GETPossible values:

urlstring · uriRequiredExample: https://www.walmart.com/

datastring · nullableOptional

Other propertiesanyOptional

Responses

200

The upstream response (or an error field).

application/json

or

401

Authentication or quota failure — HTTP 401 with an error message.

application/json

500

Unexpected server error (HTTP 500).

application/json

post/tls

HTTPcURLJavaScriptPython

POST /tls HTTP/1.1
Host: px-web.takionapi.tech
x-api-key: YOUR_API_KEY
Content-Type: application/json
Accept: */*
Content-Length: 244

{
  "proxy": "1.2.3.4:8000:user:pass",
  "session_id": "text",
  "method": "GET",
  "url": "https://www.walmart.com/",
  "headers": {
    "ANY_ADDITIONAL_PROPERTY": "text"
  },
  "json": {
    "ANY_ADDITIONAL_PROPERTY": "anything"
  },
  "data": "text",
  "ANY_ADDITIONAL_PROPERTY": "anything"
}

{
  "status_code": 200,
  "body": "text",
  "headers": {
    "ANY_ADDITIONAL_PROPERTY": "text"
  },
  "ANY_ADDITIONAL_PROPERTY": "anything"
}