Skip to main content
POST
Use a full request to create a new solve session, or provide an active session_id to generate a follow-up header set from cached challenge state. If the target page is a Shape interstitial, Evade discovers its embedded one-time challenge automatically; omit shape_js_url and supply the browser session’s current cookies.
Replay the returned headers and user_agent unchanged through the same proxy. Generate a new header set whenever the destination URL or method changes.
Interstitial responses contain "one_time": true instead of a session_id. Replay them once as the same method and URL used in target_url.

Body

application/json

Complete context required to start a reusable solve or solve a one-time interstitial.

​
task_type
string
required

Task discriminator. Must be shape.

Allowed value: "shape"
​
proxy
string<uri>
required

Absolute proxy URL used for challenge generation and replay. Supported schemes are http, https, socks4, and socks5.

Example:

"http://username:password@proxy.example:8080"

​
target_url
string<uri>
required

Absolute URL of the protected page that loads the challenge.

​
target_api
string<uri>
required

Absolute destination URL of the protected API request.

​
ua
string
required

Exact browser user agent used for fingerprint selection, challenge execution, and replay. It must have a complete stored Evade fingerprint.

Minimum string length: 1
​
shape_js_url
string<uri>

Absolute URL of the Shape loader JavaScript. Optional when target_url returns an embedded Shape interstitial; required when the page has no embedded challenge.

​
target_api_method
enum<string>
default:GET

HTTP method of the protected destination request.

Available options:
GET,
POST
​
referer
string<uri>

Optional absolute referrer URL used while loading the page.

​
title
string

Optional page title. Evade extracts it from the target page when omitted.

​
cookies
object

Optional current browser cookies installed before the target page is fetched. Interstitials that require authentication need these values. Cookies are accepted only on a fresh solve and are scoped to target_url.

​
debug
boolean
default:false

Include session, challenge, generation, and timing diagnostics.

Response

Headers generated successfully.

​
headers
object
required

Complete header set to apply to the protected request.

​
user_agent
string
required

Exact browser user agent to use for the protected request.

​
session_id
string

Short-lived session ID for follow-up solves. Omitted for one-time interstitial challenges.

Pattern: ^[A-Za-z0-9_-]{32}$
​
one_time
boolean

True when the embedded challenge and returned headers can be replayed only once. Such responses have no session_id.

​
session_reused
boolean

Whether cached session state generated this result. Returned only in debug mode when true.

​
loader_url
string<uri>

Resolved Shape loader URL. Returned only in debug mode.

​
vm_url
string<uri>

Resolved Shape VM URL. Returned only in debug mode.

​
generation_mode
string

Header generation strategy. Returned only in debug mode.

​
timing
object

Solve timing diagnostics. Returned only in debug mode.