autoreg-skills-max: initial public release (restored, redacted, hardened)

skills/atxp-autoreg/references/2captcha-keys.md

@@ -0,0 +1,39 @@
+# 2captcha Keys — ATXP Registration
+
+| Key | Balance | Provider | Status |
+|-----|---------|----------|--------|
+| `[REDACTED-KEY]` | $10.62 | 2captcha.com | ✅ Active (2026-06-24) |
+| `[REDACTED-KEY]` | depleted | rucaptcha.com | ❌ Replaced |
+
+## API Usage
+
+```python
+import requests, time
+
+KEY = "[REDACTED-KEY]"
+SITEKEY = "0x4AAAAAAAM8ceq5KhP1uJBt"
+PAGEURL = "https://accounts.atxp.ai"
+
+# Upload
+resp = requests.post("https://2captcha.com/in.php", data={
+    "key": KEY, "method": "turnstile",
+    "sitekey": SITEKEY, "pageurl": PAGEURL, "json": 1
+})
+task_id = resp.json()["request"]
+
+# Poll (5s intervals, ~10s avg)
+for i in range(60):
+    time.sleep(5)
+    result = requests.post("https://2captcha.com/res.php", data={
+        "key": KEY, "action": "get", "id": task_id, "json": 1
+    })
+    if result.json().get("status") == 1:
+        token = [REDACTED])["request"]
+        break
+```
+
+## Notes
+- Turnstile token is valid but Privy API returns 401 without iframe session
+- Token works ONLY when injected into real browser (not headless)
+- Headless browser → Turnstile Error 600010 (Cloudflare detects automation)
+- DuckDuckGo browser + VPN + real browser fingerprint → Turnstile passes