HttpService previously did not allow direct access to any Roblox domains (apis.roblox.com, www.roblox.com, etc.). This has caused many Creators to have to rely on proxies to access the necessary Roblox resources. However, this is not a recommended practice for various security concerns (see this unofficial resource by a community member for an excellent explanation).
We are happy to announce the beta release of using Open Cloud via HttpService! This feature lets you more conveniently call various Open Cloud APIs from within your experiences directly with Open Cloud credentials, without needing a proxy. Some highlight use cases this unlocks are changing a group member’s rank in-experience and writing to datastores of another experience!
Note: This will not affect any existing Engine APIs with similar features. We are simply allowing certain, existing Open Cloud HTTP endpoints to also be callable via HttpService.
We currently support the following endpoints:
Groups (Enables Changing a Group Member's Rank In-Experience)
Datastores (Enables Cross-Experience Data Store Access Which is Not Available via DataStoreService)
Note: Due to current restrictions on HttpService, only alphanumeric characters and the - character are allowed in URL path parameters to Roblox domains. This means Data Stores/entries with other special characters are currently inaccessible from HttpService. We may adjust this constraint in the future.
We will continue to add Open Cloud APIs to HttpService and improve documentation. Our ultimate goal is to make as many endpoints that support API key available via HttpService as possible.
Finally, check out the HttpService documentation page to get started (specifically the “Calling Roblox domains” section)! We also have rate limiting information and a code example for your reference (in the “Rate Limiting” and “Open Cloud via HttpService” sections respectively). We can’t wait to see how creators use Open Cloud within their experiences!
Feel free to share any feedback you may have and please post below if there are any endpoints you would like to see enabled for your use case.
right when I made a proxy server
seriously though, thank you for this update, it’s very useful for auto ranking and pulling game passes in groups like Splashy Waterpark (self promotion )
I just am wondering what accepted ip addresses we should put for api keys, or should we stick to using Roblox cookies for now?
This is great! Does this mean that games hosted under a group can use MessagingService now using a group API key? There was a bug where it would return an error previously.
One of the most common use-cases for proxy services are gamepass-related queries to be used in donation systems, are these endpoints eventually going to be supported?
Funny how this comes out the 3rd day of me trying to set up a proxy using Vercel. I guess I can’t use it yet, as I need https://games.roblox.com/v1/games/placeID/servers to work. This is still super awesome, though!
I’m glad roblox has been putting in effort on improving the platform especially with all the new studio updates but i do hope more endpoints will be added
We have a custom decal system in our game where players can use their uploaded images. This new API could be super useful!
However, most players keep their inventories private these days. It seems like there’s no way to request access to a player’s inventory unless they create the API key themselves or use an OAuth2 token, which isn’t really doable in game.
Would it be possible to introduce new methods, just like PromptAllowInventoryReadAccess, to let an API key get permission to access their inventory?
Gone are the days of needing to use a proxy to use Roblox Web APIs through HttpService! This has been a long time coming. Pls Donate style games which display your owned items should be easier to create now. Thank you Roblox!
FANTASTIC step. Lots of experiences have matchmaking systems, server list systems, or other functionalities that require the need to fetch all current servers under an experience.
Would be great to make that process proxy-free in the future as well.
Since the requests will be made from Roblox game servers, the ip addresses will be variable. For now, you would need to put 0.0.0.0/0. In the future, there may be an option on the API key creation page to restrict an API key to only be used via HttpService - we will take note of this
)