Roblox Open Cloud: REST APIs, keys, in-experience calls is a Roblox Suite skill — Open Cloud REST APIs: API keys/OAuth2, data stores, assets, universes, webhooks, in-experience calling. It belongs to the Systems domain. What it covers: REST APIs for data stores, assets, universes, and more — from outside the engine or in-experience via HttpService.. API keys, OAuth2, least-privilege scopes, and the 60-day key auto-expiry rule.. Secrets Store + `HttpService:GetSecret` so keys never sit in scripts.. Current-vs-deprecated guidance: Stop: Hardcoded Open Cloud keys in scripts. Use: Secrets Store + HttpService:GetSecret with least-privilege API keys (60-day key auto-expiry; rotate on a schedule).. The official sources for this skill are taken verbatim from its SKILL.md and point to the Roblox Engine API Reference and related create.roblox.com documentation. The full reference set is available in the references/ directory on GitHub (https://github.com/nonlooped/roblox-suite/tree/main/roblox-open-cloud/references).
Roblox Open Cloud: REST APIs, keys, in-experience calls
Complete coverage of Roblox Open Cloud — the REST API surface for data stores, assets, universes, places, users, groups, subscriptions, notifications, bans, and Luau execution, accessed from outside the engine or in-experience via HttpService. Covers authentication (API keys, OAuth 2.0, the 60-day key auto-expiry rule), least-privilege scopes, IP allowlists, the Secrets Store for in-experience key storage, webhooks, and the decision tree for in-engine versus Open Cloud.
What it covers
- REST APIs for data stores, assets, universes, and more — from outside the engine or in-experience via HttpService.
- API keys, OAuth2, least-privilege scopes, and the 60-day key auto-expiry rule.
- Secrets Store +
HttpService:GetSecretso keys never sit in scripts.
What you stop doing
-
Hardcoded Open Cloud keys in scripts
Secrets Store + HttpService:GetSecret with least-privilege API keys
60-day key auto-expiry; rotate on a schedule
Key sources
Taken verbatim from this skill's "Official sources" block. The full reference set lives in references/ on GitHub .