Roblox cloud
Give your AI coding agent a Roblox brain. Curated skills for Roblox Studio development.
npx -y skills add TabooHarmony/roblox-brain --skill roblox-cloudAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- 18 stars18 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
What its author says it does
Copied from the file, not written here
Use when working with Roblox Open Cloud REST APIs, API keys, webhooks, or HttpService calls to cloud endpoints.
SKILL.md
2.4 KB, as published. Nobody here has run it
roblox-cloud
When to Load
Load this skill when the task involves Roblox Open Cloud REST APIs, API-key authentication, webhook setup, or HttpService calls to Open Cloud endpoints. Skip it for OAuth flows (use roblox-oauth), persistent data design (use roblox-data), gameplay networking (use roblox-networking), or pure engine API lookups (use roblox-studio-mcp).
Quick Reference
Open Cloud REST APIs
- Base:
https://apis.roblox.com/cloud/v2/…(v1 for legacy) - Auth:
x-api-key: <API_KEY>header for server-to-server - Content-Type:
application/jsonfor bodies - Pagination: read
nextPageToken, pass it back aspageTokenquery param - Update masks: use
updateMaskquery param for partial PATCH - Long-running ops: poll the returned Operation resource with exponential backoff
- Error codes:
INVALID_ARGUMENT(bad input),PERMISSION_DENIED/INSUFFICIENT_SCOPE(auth),RESOURCE_EXHAUSTED/429 (rate limit → backoff),UNAVAILABLE(transient → retry)
API Keys
- Use for: CI jobs, bots, web backends, in-experience automation (non-user)
- Each key has scoped permissions—confirm required scopes before coding
- Creator permissions AND key scopes must both allow the action
- Never store keys as plain text in experiences—use Secrets
Webhooks
- Requires public HTTPS POST endpoint
- Return 2XX within 5 seconds; process event async
- Verify
roblox-signatureheader when secret is configured - Deduplicate by
NotificationId—deliveries may repeat - Reject stale timestamps
HttpService Constraints (in-experience)
- Only certain Open Cloud endpoints are supported
- Allowed headers:
x-api-key,Content-TypeONLY - API key must come from a Secret (not plain string)
- HTTPS only; path params cannot contain
.. - Check endpoint support before coding
Handoffs
- OAuth / user consent →
roblox-oauth - Data schema / DataStore design →
roblox-data - Remotes / networking →
roblox-networking - Engine API lookup only →
roblox-studio-mcp
References
references/full.md— complete instructions, decision rules, checklist, common mistakes, and examples. Use the official Creator Hub guides in frontmatter for current endpoint details.