Retrieving statistics¶

The figures that the dashboard shows in the Dashboard and Challenges views come from the API of the dashboard. Through the same endpoints, you retrieve the values for your own analyses.

The base URL is:

https://api-app.eu-captcha.eu/myra-auto-app-api

All calls use the GET method and require a token according to JSON Web Token in the Authorization header. See Managing sitekeys.

Warning

This interface serves the dashboard and is not part of version 1.1 of the public API. It has no assurance of stability and no description that can be called up in the browser.

Endpoints¶

The following endpoints are available:

Endpoint	Contents
`/captcha-stats-user`	Actions across all sitekeys to which you have access.
`/captcha-stats-sitekey`	Actions of a single sitekey.
`/captcha-challenges-per-user`	Number of the challenges across all accessible sitekeys.
`/recent-captcha-challenges-for-sitekey`	The most recent challenges of a sitekey as a list.
`/captcha-difficulty-distribution`	Distribution of the levels of difficulty of a sitekey.
`/captcha-threats-blocked`	Number of the blocked accesses of a sitekey.

A sitekey to which you have no access returns the response {"success": false}. The same applies if the sitekey parameter is missing, provided that the endpoint requires it.

Selecting the period¶

The endpoints on the actions and the challenges use the same parameters for the period:

Parameter	Default	Description
`sitekey`	empty	UUID of the sitekey. If the value remains empty, all accessible sitekeys apply.
`max_days`	`5`	Length of the period in days.
`start_date`	empty	First day of the period in the `YYYY-MM-DD` format. Without an entry, the period ends on the current day.
`per_day`	`0`	With `per_day=1`, `/captcha-stats-user` returns the values per day instead of as a total.

curl "https://api-app.eu-captcha.eu/myra-auto-app-api/captcha-stats-user?max_days=30&per_day=1" \
  -H "Authorization: Bearer <token>"

The response contains the type of the action, the number and — for per_day=1 — the date per line:

[
  { "action_type": "ACC", "date_at": "2026-08-01", "count": 1284 },
  { "action_type": "BIT", "date_at": "2026-08-01", "count": 37 }
]

Types of actions¶

The action_type field distinguishes the following values:

Value	Meaning
`VFC`	A challenge was delivered.
`ASC`	A challenge was solved.
`VSC`	The client has reported the challenge without success. The value counts as neutral, not as a block.
`ACC`	The verification of the token was successful, the access is permitted.
`BCI`	The proof for the challenge was wrong.
`BIC`	The client has submitted a challenge other than the one assigned to it.
`BCR`	The token was already used or had expired.
`BIT`	The request did not contain a token that could be evaluated.

All values that begin with B are blocked accesses.

The dashboard summarises the values as follows:

Key figure	Included actions
Verified	all `ACC` actions
Blocked	all actions whose value begins with `B`
Challenges solved	the `ASC` and `VSC` actions
Block rate	Share of the blocked accesses in the total of the blocked and the permitted accesses, as a percentage

See Dashboard.

Most recent challenges¶

GET /recent-captcha-challenges-for-sitekey

The endpoint uses the following parameters:

Parameter	Default	Description
`sitekey`	—	UUID of the sitekey. The parameter is required.
`max_results`	`30`	Number of entries per page.
`page`	`0`	Page of the result list.

The response contains the entries in the member field, the total number in the totalItems field as well as the domain and the label of the sitekey.

The created_ai_result field gives the assessment of the request. It has the values browser, bot, and unknown. See Challenges.

Distribution of the difficulty¶

GET /captcha-difficulty-distribution

The endpoint uses the following parameters:

Parameter	Default	Description
`sitekey`	—	UUID of the sitekey. The parameter is required.
`days`	`1`	Period in days, 1 to 7. Higher values count as 7.

The response gives the number of the challenges for each level of difficulty. The levels of the display go further than the initial value of a sitekey, because the Myra EU CAPTCHA raises the difficulty automatically on suspicion. See Configuring a sitekey.

Blocked accesses¶

GET /captcha-threats-blocked

The endpoint uses the same parameters as the distribution of the difficulty and responds with a single number:

{ "count": 214 }