/

/Roblox API

Changes Docs Sign in

APIs
Generators
Stacks
Projects

Docs
History
Schema

Updated on 2026-09-23

Filter operations

Accounts173

getGet metadata for adding auth methods.
getGets the account pin status.
postRequest to create the account pin.
deleteRequest for deletes the account pin from the account.
patchRequest made to update the account pin on the account.
postRequest to locks the account which has an account pin enabled.
postRequests to unlock the account pin.
getGet a user's current account country setting.
postUpdates the user's account country.
getReturns metadata used by the account settings page
getMigrate from RobloxWebsite project, return news notification for Private Message page
get
getGets Auth meta data
getGet the user's birthdate
postUpdate the user's birthdate
getGet the user's birthdate
getCreates a client assertion to be used when generating an auth ticket.
getGet the user's description
postUpdate the user's description
getGet the user's description
postUpdate the user's description
getGets the authenticated user's email address and verified status
postUpdates the authenticated user's email address
patchUpdates the authenticated user's email address
postVerify the user's email address from token
postSend verify email to the authenticated user's email address
getGets the authenticated user's verified email and pending (unverified) email if one exists
postSigns a user up for Roblox and links the account to the authenticated external provider ID.
postLogs in a user to Roblox based on the user's authenticated external provider session
postDeprecated endpoint Logins in a user to Roblox, then links the Roblox account to the external provider ID
postSigns a user up for Roblox and links the account to the authenticated external provider ID
postUnlink the logged in Roblox account from the current external provider ID
getOAuth callback for identity providers that return the authorization code on a GET redirect (Okta, Google).
getSigns a user up for Roblox and links the account to the authenticated external provider ID via OAuth.
getGets a list of universe playability statuses for the authenticated user
getGet the user's gender
postUpdate the user's gender
getGet the user's gender
postUpdate the user's gender
postEndpoint for login with identity verification
postInitiates identifier-first login flow by returning a list of login methods for user(s).
postAuthenticates a user.
postEndpoint for logging in a user, specifically for linked authentication on PCGDK
postDestroys the current authentication session.
postLogs out user from all other sessions.
getGets a user's messages.
postArchives a batch of messages.
postMarks a batch of messages as read.
postMarks a batch of messages as unread.
postUnarchives a batch of messages.
getGets unread messages for the authenticated user.
getGets a message's details.
getGet the metadata
getGet the metadata
getGets two step verification system metadata.
postDisables a batch of credentials for the specified user.
postComplete Passkey registration by providing credential creation options.
postList a user's registered passkeys.
postProvides a challenge for the Passkey to authenticate.
postInitiates Passkey registration by providing credential creation options.
postFinishes account recovery pre-auth passkey registration by validating the recovery session, deactivating the user's password, and completing passkey registration.
post/v1/passkey/finish-preauth-registration
postInitializes passkey authentication for the user(s) corresponding to the identifier provided.
postInitiates Passkey preauthenticated registration by providing credential creation options.
getChecks whether the authenticated user is eligible for silent passkey upgrade. Route and response are intentionally obfuscated ("su-eligibility" = "silent-upgrade-eligibility").
getEndpoint for checking if a password is valid.
postEndpoint for checking if a password is valid.
getGet Verified Phone Number
postSet Phone Number
postDelete Phone
postResend Phone code
postVerify Phone
getGet the user's promotion channels
postUpdate the user's promotion channels
getGet metadata for forgot endpoints
getGet Revert Account ticket info
postSubmit Revert Account Request
postInvalidates all account security tickets for the authenticated user. This endpoint should be called before enrolling in EPP to ensure old revert links cannot be used.
postLogs out user from the current session and create a new one.
postEndpoint for signing up a new user
postEndpoint for signing up a new user, specifically for linked authentication on PCGDK
getGet social network user information if the given social auth method is connected to current user.
postRemoves the given social authentication method from current Roblox user if it is connected.
getreturns all the enabled theme types.
getreturns the theme type for a specific consumer.
patchModify the theme type for consumer.
getGet a user's trade privacy setting
postUpdates a user's trade privacy setting
getGet a user's trade quality filter setting
postUpdates a user's trade quality filter setting
postChanges the password for the authenticated user.
postChange the user's username
getGet the current price for a username change
getGets a list of existing usernames on Roblox based on the query parameters
postSends an email of all accounts belonging to an email
getChecks if a username is valid.
postChecks if a username is valid.
getGets the minimal authenticated user.
getGets the age bracket of the authenticated user.
getGets the country code of the authenticated user.
getGets the (public) roles of the authenticated user, such as `"Soothsayer"` and `"BetaTester"`.
getGets whether the specified user's inventory can be viewed.
postVerifies a two step verification challenge code via authenticator app.
postReverts a user's dialog state from ACTIVE to PENDING.
postRetry a Cross Device two step verification approval.
postVerifies a two step verification approval via Cross Device. Cross Device approval does not use a verification code.
postSends a two step verification challenge code via email.
postVerifies a two step verification challenge with a code sent via email.
postValidates the assertion data returned by the passkey.
postProvides a challenge for the passkey to authenticate.
postVerifies a two step verification challenge with a password (code).
postVerifies a two step verification challenge via a recovery code.
postValidates the assertion data returned by the security key.
postProvides a challenge for the security key to authenticate.
postSends a two step verification code via SMS for the specified user.
postVerifies a two step verification challenge with a code sent via SMS.
getGets two step verification configuration for the specified user.
postDisables two step verification via authenticator for the specified user.
postInitiates enabling authenticator-based two step verification for the specified user.
postFinishes enabling authenticator-based two step verification for the specified user.
postDisables two step verification via email for the specified user.
postEnables two step verification via email for the specified user.
postDisables a batch of credentials for the specified user.
postInitiates security key registration by providing credential creation options.
postFinishes security key registration and stores credential. Enables security key as a 2sv media type if it is a user's first key.
postList a user's registered security keys.
postDisables two step verification via SMS for the specified user.
postEnables two step verification via SMS for the specified user.
getGet promotion channels for a given user ID
getGets the current status of recovery codes for a user.
postClears any existing recovery codes for the user.
postClears any existing recovery codes and generates a new batch of recovery codes.
getReturns a list of Roblox badges belonging to a user.
getTries to check if an email is valid
getValidates the given display name, and if valid, will convert it to a valid username and return suggested username(s) if available.
postValidates the given display name, and if valid, will convert it to a valid username and return suggested username(s) if available. This is a POST request and explicitly does not receive the parameter values from the query
getTries to get a valid username if the current username is taken
postTries to get a valid username if the current username is taken This is a POST request and explicitly does not receive the parameter values from the query
getCheck if the current user has an Xbox connected. Also returns the gamertag of the Xbox account if connected.
postUnlink the current ROBLOX account from the Xbox live account.
getGet the consecutive days the xbox user has been logged in.
postTranslate the xbox user to roblox user.
getGets Auth meta data
postEndpoint for login with identity verification
postAuthenticates a user.
postEndpoint for logging in a user, specifically for linked authentication on PCGDK
postDestroys the current authentication session.
postLogs out user from all other sessions.
getGet the metadata
getReturns password status for current user, asynchronously.
getGets metadata needed for the password reset view.
postResets a password for a user that belongs to the password reset ticket.
postSends a password reset email or challenge to the specified target.
postVerifies a password reset challenge solution.
getEndpoint for checking if a password is valid.
postEndpoint for checking if a password is valid.
getGets valid destinations associated with the signed user
getGet metadata for forgot endpoints
getGet Revert Account ticket info
postSubmit Revert Account Request
postInvalidates all account security tickets for the authenticated user. This endpoint should be called before enrolling in EPP to ensure old revert links cannot be used.
postLogs out user from the current session and create a new one.
postEndpoint for signing up a new user
postEndpoint for signing up a new user, specifically for linked authentication on PCGDK
postChanges the password for the authenticated user.
postChange the user's username
getGet the current price for a username change
getGets a list of existing usernames on Roblox based on the query parameters
postSends an email of all accounts belonging to an email
getChecks if a username is valid.
postChecks if a username is valid.
postDestroys the current authentication session while reporting metrics like url and reason for logout.
postAuthenticates as a user given a two step verification verification token.

Advertising20

Analytics4

Assets53

Avatars35

Badges26

Bans and blocks15

Configs9

Connections19

Creator Store8

Data and memory stores48

Developer products21

Experiments11

Game Events5

Game passes21

Generative AI1

Groups102

Interactions26

Inventories9

Localization89

Luau Execution5

Matchmaking29

Metadata14

Notifications11

Observability6

Places20

Private servers2

Team Create8

Thumbnail Personalization7

Thumbnails11

Trades16

Universes37

User profiles5

Users14

postReserves a nonce for a native SSO sign-in attempt.
postOAuth callback for identity providers that POST the authorization code as form fields (Apple form_post). Extra form fields such as Apple's first-auth `id_token` and `user` are ignored; web login exchanges code via PKCE and does not treat a form id_token as proof.
postSAML Assertion Consumer Service endpoint that external identity provider calls post user authentication.
getGets a page of asset (image) entries for the specified table, along with the table's per-locale asset translations.
postRename a credential for the specified user.

Accounts

Get a user's trade privacy setting

get/v1/trade-privacy

Response

OK

tradePrivacystring

The current trade privacy setting for the current user

Changes