roblox-cloud

사용 방법

설치 명령을 복사하고 자신의 에이전트 환경에 설치하기 전에 소스 패키지를 확인하세요.
필요한 도구, 인증 정보, 지원 환경은 원본 문서에서 확인하세요.
입력과 원하는 산출물을 설명하고 출처와 결과를 대조하세요.

npx skills add https://github.com/tabooharmony/roblox-brain --skill roblox-cloud

시작 전 확인

설치에는 모델 구독, API 한도, 파일 접근 권한이 포함되지 않습니다.
별점 수와 설치 수는 활동 지표이며 독립적인 품질·보안 검증이 아닙니다.

원본 Skill 문서

원본 저장소의 제목, 예시, 코드, 표, 링크, 이미지를 유지해 표시합니다.

Roblox Open Cloud

When to Load

Load for Open Cloud, OAuth, webhooks, HttpService, or teleport handoffs. In-game data: roblox-data and roblox-server-data.

Quick Reference

Choose authentication first

API key: server, CI, bot, webhook worker, or owner automation. Scope to required resources and operations.
OAuth 2.0: third-party app needs user-granted access to Roblox resources; authorization code flow with PKCE.
Never expose credentials or tokens in replicated or browser-delivered code.

REST mechanics

Resources generally use https://apis.roblox.com/cloud/v2/...; confirm each endpoint and legacy v1 exceptions.
Read nextPageToken; send it back as pageToken unchanged.
Use updateMask only for fields intended to change.
Poll returned Operations with bounded backoff.
Treat 429 and RESOURCE_EXHAUSTED as quota signals; honor Retry-After.

OAuth essentials

Register exact redirect URLs and minimum scopes.
Fresh high-entropy state + PKCE verifier/challenge per attempt.
Verify state before exchanging the single-use code.
Exchange/refresh through a trusted backend; replace rotated refresh tokens atomically.
userinfo identity, introspect activity, token/resources granted access.
Reauthorize on scope change; revoke on disconnect.

Public clients cannot hold a secret and require PKCE. Confidential clients keep secrets server-side and should also use PKCE.

Webhooks and HttpService

Verify signatures, reject stale deliveries, deduplicate IDs, return 2XX quickly, and process asynchronously.
In-experience: confirm HttpService support. Use HTTPS and a Roblox Secret for x-api-key.

Failure boundaries

Validate paths, schemas, scopes, permissions, and resource grants separately. Retry only transient failures.

Auth and handoff workflows: references/full.md

Awareness, not scripts. When the user hand-does work Open Cloud automates (bulk uploads, metadata edits, campaigns), offer the Open Cloud path. Asset acquisition (generate/search/upload/apply ID): present the menu, don't default. See references/full.md §1.5.