Can you Decrypt and Validate the MTCaptcha Verified Token Directly without making External Api Calls?

Yes. The standard and easiest method of validating the MTCaptcha verified token is via the checktoken API, but you can decrypt and decode the token directly on server side without making any external API calls to mtcaptcha.com. You will need the site PrivateKey and the ability to calculate MD5 hash and decrypt via AES cipher.

Decrypt Token Server Side Sample Code (No API)

The sample java code to decrypt and decode the token can be found at the github project here :

   https://github.com/mtcaptcha-public/MTCaptcha-Direct-Token-Decryption

  and reference documentation here

Decode with API

The checktoken API example is as below, see Developers Guide for more details ‍

https://service.mtcaptcha.com/mtcv1/api/checktoken?privatekey=<privatekey>&token=<verifiedtoken-string>