Scope Access
Scope Requests
All creators and third party developers and platforms are expected to only request the minimal amount of data access as needed to provide your service and function:
- Be sure to only request access to specific scopes required for your app’s functionality
- Do not request any additional scopes outside the ones needed for your app’s primary function
- Do not request API keys from other Roblox Users
Roblox Review and Enforcement
We review API access requests and may make appropriate changes to your app’s access to data or enforce specific rate limits to ensure that we maintain a trusted, secure, private, useful, and safe platform. These adjustments are to ensure that third party platforms and applications do not request or utilize more data than necessary or abuse our APIs in any way.
Prohibited app actions and functionalities
In addition to our Roblox Community Standards, Creator Third Party App Terms, third party apps are strictly prohibited from the following actions and functionalities on behalf of Roblox Users:
Communication and Social
Modification of a user’s friends
- Adding or Removing friends between Roblox users
- Sending friend requests between Roblox users
- Adding or removing verified parent accounts
- Changes to any existing friends
Initiation of communication
- Creating direct or group messages from a user’s account to another Roblox User
- Initiating voice chat from a user’s account to another Roblox User
Experience interactions
Controlling experience / in game interactions
- Automatically joining an experience without user consent
- Executing automated in game actions such as movements
- Exceptions may be made for specific AFK-style game experiences where a substantial and explicit purpose of the game incorporates time away from the game itself
- Casting a vote or poll response on behalf of a user
Economy
- Claiming of game rewards, coupons, or currency
- Automating trade processes without user consent
Platform abuse
- Automation of the following functions:
- Repeated log in attempts
- Captcha solves
- Account creation at scale
- Simulating user actions such as clicks, scrolls, views
- Likes or shares
- Abuse of abuse reporting
Prohibited Practices
-
Do not track Roblox users across experiences: Regardless of where the data or information is sourced, we do not allow the tracking of Roblox users for any reason other than to specifically moderate and improve your own experience(s) related to gameplay. Sharing users’ identifying information with other Creators or third parties is strictly prohibited. Exceptions may be made for the following scenarios:
- User consent is provided via official Roblox user, privacy, and/or parental settings where appropriate
- You are utilizing official native Roblox creator moderation features
- You are utilizing official native Roblox reporting systems
- Do not share Roblox users’ identifying information with third parties: Regardless of where the data or information is sourced, do not share users’ identifying information with third parties.
- Do not purchase or utilize third party tracking services: Do not purchase or use third party services or products that engage in any form of user tracking or profiling of Roblox users - including the prohibition to combine data obtained on Roblox with data obtained from sources outside of Roblox.
- Do not use unsupported tools or means to identify Roblox users: Users are only allowed to be identified by their user id; Creators’ use of their own or third party services to identify users using other means is prohibited. Do not use other user data in order to fingerprint users. Do not use supplemental data outside of Roblox or other measures unsupported through Roblox APIs to identify users.
Data use policy
In addition to the Data Collection and Use section of our Creator Third Party App Terms, we hold all third party creators to the following:
- You must notify Roblox of any sales or transfers of ownership of your app or platform
- You must expunge all data obtained through Roblox APIs if your app or platform has lost access to our APIs for any reason
- You may not sell any data obtained through Roblox APIs
- You may not utilize any user data for the training of AI or language learning models
- You may not use geolocation data for prolonged and active tracking of users
App Categories and Scope Details
|
Account Linking Tools Tools that help facilitate account linking between Roblox and an external app for the purposes of mapping user profiles.
|
Allowed scopes:
|
|
Creation & Productivity Tools Digital services or products primarily used for the creation & editing of content, and managing experience lifecycle. |
Allowed scopes:
|
|
Analytics & Insights Tools Tools that enable developers to analyze data about their apps, experiences, assets, or users
|
Allowed scopes:
|
|
User Tools Tools that enhance the UI, accessibility, or overall experience of using Roblox |
Allowed scopes:
|
Change Log
| Announcement Date | Change Summary |
| 10/8/2026 |
Effective Date: 10/8/2026 — Updated App Categories and Scope Details:
|
| 9/21/2026 |
Effective Date: 9/21/2026 — Updated App Categories and Scope Details:
|
| 8/13/2026 |
Effective Date: 08/13/2026 Expanded privacy protections under Prohibited Practices covering unsupported tools for user tracking, and user identification methods |
| 7/13/2026 |
Effective Date: 06/10/2026 Removed scopes from Creation and Productivity Tools:
Added Scopes to Creations And Productivity Tools & Analytics and Insight Tools
|
| 3/12/2026 |
Effective Date: 3/12/2026 Removed |
| 2/26/2026 |
Effective Date: 2/26/2026 Added additional scopes to the following App Categories: Creation & Productivity Tools:
Analytics & Insight Tools:
User Tools:
|
| 1/22/2026 |
Effective Date: 2/22/2026
|