CloudFlare WAF

Bypass the CloudFlare 5-second "Please Wait" browser verification challenge. Returns session cookies, attributes, and headers for authenticated requests.

Endpoint

POSThttps://api.peak.fo/solve

Request

Field	Type	Required
task_type	string	Yes
url	string	Yes
proxy	string	Yes

JSON Request Body

{
  "task_type": "cloudflare5stask",
  "url": "https://example.com/",
  "proxy": "http://user:pass@ip:port"
}

Response

{
  "success": true,
  "data": {
    "cookies": {
      "cf_clearance": "xxxxx...",
      "__cf_bm": "xxxxx..."
    },
    "headers": {
      "User-Agent": "Mozilla/5.0 ..."
    },
    "attributes": {
      "md": "...",
      "r": "..."
    },
    "cf_rt": "xxxxx"
  }
}

Field	Description
cookies	Session cookies to set (cf_clearance, __cf_bm)
headers	Headers to use (User-Agent)
attributes	Form data to POST back to complete challenge
cf_rt	Challenge token for Referer header

How to Use the Response

Set the cookies (cf_clearance, __cf_bm) on your session
POST to the target URL with attributes as form-urlencoded body
Set the Referer header to: {url}?__cf_chl_tk={cf_rt}
Use Content-Type: application/x-www-form-urlencoded
Use the exact User-Agent from response headers

Code Examples

peak-api-example.python

1import requests
2
3TARGET_URL = "https://example.com/"
4PROXY = "http://user:pass@1.2.3.4:8080"  # Sticky session proxy
5
6# Step 1: Get WAF solution from Peak API
7response = requests.post(
8    "https://api.peak.fo/solve",
9    headers={
10        "X-API-Key": "pk_your_api_key",
11        "Content-Type": "application/json"
12    },
13    json={
14        "task_type": "cloudflare5stask",
15        "url": TARGET_URL,
16        "proxy": PROXY
17    }
18)
19
20data = response.json()
21if not data["success"]:
22    raise Exception(f"Solve failed: {data['error']}")
23
24solution = data["data"]
25clearance = solution["cookies"]["cf_clearance"]
26cf_bm = solution["cookies"].get("__cf_bm", "")
27cf_rt = solution["cf_rt"]
28attributes = solution["attributes"]
29user_agent = solution["headers"]["User-Agent"]
30
31# Step 2: Build attributes as form data
32form_data = "&".join([f"{k}={v}" for k, v in attributes.items()])
33
34# Step 3: Create session with cookies
35session = requests.Session()
36session.cookies.set("cf_clearance", clearance, domain="example.com")
37if cf_bm:
38    session.cookies.set("__cf_bm", cf_bm, domain="example.com")
39
40# Step 4: POST to complete the challenge
41resp = session.post(
42    TARGET_URL,
43    data=form_data,
44    headers={
45        "User-Agent": user_agent,
46        "Referer": f"{TARGET_URL}?__cf_chl_tk={cf_rt}",
47        "Content-Type": "application/x-www-form-urlencoded",
48    },
49    proxies={"http": PROXY, "https": PROXY}
50)
51
52print(f"Status: {resp.status_code}")
53# Now you can make requests with the session cookies

import requests

TARGET_URL = "https://example.com/"
PROXY = "http://user:pass@1.2.3.4:8080"  # Sticky session proxy

# Step 1: Get WAF solution from Peak API
response = requests.post(
    "https://api.peak.fo/solve",
    headers={
        "X-API-Key": "pk_your_api_key",
        "Content-Type": "application/json"
    },
    json={
        "task_type": "cloudflare5stask",
        "url": TARGET_URL,
        "proxy": PROXY
    }
)

data = response.json()
if not data["success"]:
    raise Exception(f"Solve failed: {data['error']}")

solution = data["data"]
clearance = solution["cookies"]["cf_clearance"]
cf_bm = solution["cookies"].get("__cf_bm", "")
cf_rt = solution["cf_rt"]
attributes = solution["attributes"]
user_agent = solution["headers"]["User-Agent"]

# Step 2: Build attributes as form data
form_data = "&".join([f"{k}={v}" for k, v in attributes.items()])

# Step 3: Create session with cookies
session = requests.Session()
session.cookies.set("cf_clearance", clearance, domain="example.com")
if cf_bm:
    session.cookies.set("__cf_bm", cf_bm, domain="example.com")

# Step 4: POST to complete the challenge
resp = session.post(
    TARGET_URL,
    data=form_data,
    headers={
        "User-Agent": user_agent,
        "Referer": f"{TARGET_URL}?__cf_chl_tk={cf_rt}",
        "Content-Type": "application/x-www-form-urlencoded",
    },
    proxies={"http": PROXY, "https": PROXY}
)

print(f"Status: {resp.status_code}")
# Now you can make requests with the session cookies

Python53 lines • editable

Important: Proxy Requirements

You must use sticky/session proxies. CloudFlare tracks the IP address throughout the session. Using rotating proxies or different IPs will invalidate the session cookies.

• Use sticky session proxies - same IP for the entire session
• Use the exact User-Agent from the response - this is required
• POST the attributes as form data - not JSON
• Set the Referer header with cf_rt token
• URL must end with a trailing slash (e.g., https://example.com/)
• Only Windows Chrome user agents are supported
• Rotate to a new proxy session only when starting a completely new session