Roblox Account Manager

WARNING: Malicious Scripts may be able to abuse this API and possibly cause a ban to your account. In order to prevent this FULLY, you should probably change the port, add a password, and set EveryRequestRequiresPassword to true.

Passwords cannot contain symbols, letters and numbers only.

Found an error or a bug? Report it to the discord or github.

Roblox Account Manager Settings

Requires Password *

These settings can be edited by opening the settings window by clicking the gear button on the top right of the Account Manager.

DevMode: Enables Developer Mode for RAM allowing extra settings such as Copy Cookie

EnableWebServer: When RAM is launched, a local web server is opened allowing for using the RAM API

WebServerPort: The Web Server's Port (You should probably change this)

AllowGetCookie*: Allow usage of the GetCookie request (DANGEROUS)

AllowGetAccounts*: Allow usage of the GetAccounts request (DANGEROUS)

AllowLaunchAccount*: Allow usage of the LaunchAccount request (DANGEROUS)

AllowAccountEditing: Allows the account alias, description, and fields to be edited.

Password: Requires 6+ letters in order to use methods that require it. CANNOT BE EDITED WHILE ACCOUNT MANAGER IS RUNNING

EveryRequestRequiresPassword: Every request will require you to attach your password.

Example Code for the given RAMAccount class

https://raw.githubusercontent.com/ic3w0lf22/Roblox-Account-Manager/master/RAMAccount.lua

local RAMAccount = loadstring(game:HttpGet'https://raw.githubusercontent.com/ic3w0lf22/Roblox-Account-Manager/master/RAMAccount.lua')()

local MyAccount = RAMAccount.new(game:GetService'Players'.LocalPlayer.Name)

if MyAccount then
    print('My Alias: ' .. MyAccount:GetAlias())
    print('My Description: ' .. MyAccount:GetDescription())
end

LaunchAccount

GET http://localhost:port/LaunchAccount?Account=ROBLOX&PlaceId=1818&JobId=exam-plej-obid&Password=Whatever

Launches an account from account manager using the given PlaceId Requires AllowLaunchAccount setting to be set to true

Query Parameters

Name	Type	Description
Password	string
Account*	string
PlaceId*	number
JobId	string
FollowUser	boolean
JoinVip	boolean

200 Launched ROBLOX to 1818

Launched ROBLOX to 1818

401: Unauthorized Invalid Password / Method not allowed

{
    // Response
}

FollowUser

GET http://localhost:port/FollowUser?Account=ROBLOX&Userrname=Shedletsky&Password=Whatever

Follow a user into their game (if they're online)

Query Parameters

Name	Type	Description
Account*	string
Username*	string
Password	string

200: OK Joining Shedletsky's game on ROBLOX

{
    // Response
}

401: Unauthorized Invalid Password / Method not allowed

{
    // Response
}

400: Bad Request Invalid Username Parameter

{
    // Response
}

400: Bad Request Failed to get UserId

{
    // Response
}

SetServer

GET http://localhost:port/SetServer?Account=ROBLOX&PlaceId=1818&JobId=exam-plej-obid&Password=Whatever

Sets the next server roblox matchmaking will put you in.

Query Parameters

Name	Type	Description
Password	string
Account*	string
PlaceId*	number
JobId	string

200 Success

Launched ROBLOX to 1818

400: Bad Request <Response from ROBLOX API>

{
    // Response
}

SetRecommendedServer

GET http://localhost:port/SetRecommendedServer?Account=ROBLOX&PlaceId=1818&Password=Whatever

Sets the next server roblox matchmaking will put you in. Roblox Account Manager will choose the next smallest server depending on what servers are loaded.

Query Parameters

Name	Type	Description
Password	string
Account*	string
PlaceId*	number

200 Success

Launched ROBLOX to 1818

400: Bad Request <Response from ROBLOX API>

{
    // Response
}

BlockUser

GET http://localhost:port/BlockUser?Account=ROBLOX&UserId=63700903

Blocks a user by their UserId

Query Parameters

Name	Type	Description
Account*	string
UserId*	number

200 <Response from ROBLOX API>

Success

UnblockUser

GET http://localhost:port/UnblockUser?Account=ROBLOX&UserId=63700903

​Unblocks a user by their UserId

Query Parameters

Name	Type	Description
Account*	string
UserId*	number

200 <Response from ROBLOX API>

Success4

UnblockEveryone

GET http://localhost:port/UnblockEveryone?Account=ROBLOX

Will unblock everyone.

Query Parameters

Name	Type	Description
Account*	string

200 Unblocking Everyone

Unblocking everyone

400 Failed to unblock everyone

Failed to unblock everyone

401: Unauthorized Pin is Locked / Other

{
    // Response
}

GetField

GET http://localhost:port/GetField?Account=ROBLOX&Field=PhantomForcesXP

Get a specific field of an account.

Query Parameters

Name	Type	Description
Account*	string
Field*	string

200 The field's value. (for example, this would be PhantomForcesXP: 2388)

5515

SetField

GET http://localhost:port/SetField?Account=ROBLOX&Field=PhantomForcesXP&Value=2388

​Set an account's field.

Query Parameters

Name	Type	Description
Account*	string
Field*	string
Value*	string

200 Set Field PhantomForcesXP to 2388 for ROBLOX

Set Field PhantomForcesXP to 2388

401: Unauthorized Invalid Password / Method not allowed

{
    // Response
}

RemoveField

GET http://localhost:port/RemoveField?Account=ROBLOX&Field=PhantomForcesXP

Removes an account's field.

Query Parameters

Name	Type	Description
Account*	string
Field*	string

200 Removed Field PhantomForcesXP from ROBLOX

Remove Field PhantomForcesXP

401: Unauthorized Invalid Password / Method not allowed

{
    // Response
}

SetAlias

POST http://localhost:port/SetAlias?Account=ROBLOX

Set an account's alias

Query Parameters

Name	Type	Description
Account*	string

Request Body

Name	Type	Description
Alias*	string

200 Set Alias of ROBLOX to ...

Set Alias of ROBLOX to not roblox

401: Unauthorized Invalid Password / Method not allowed

{
    // Response
}

SetDescription

POST http://localhost:port/SetDescription?Account=ROBLOX

Set an account's description

Query Parameters

Name	Type	Description
Account*	string

Request Body

Name	Type	Description
Description*	string

200 Set Description of ROBLOX to ...

Set Description of ROBLOX to Hello,
this can be
​

401: Unauthorized Invalid Password / Method not allowed

{
    // Response
}

SetAvatar

POST http://localhost:port/SetAvatar?Account=ROBLOX

Set an account Avatar with JSON

Request Body

Name	Type	Description
Avatar JSON*	string	JSON Containing avatar data

200: OK Attempting to set avatar of ROBLOX to ...

{
    // Response
}

401: Unauthorized Invalid Password / Method not allowed

{
    // Response
}

AppendDescription

POST http://localhost:port/AppendDescription?Account=ROBLOX

Append something to an account's description

Query Parameters

Name	Type	Description
Account*	string

Request Body

Name	Type	Description
Description*	string

200 Appended Description of ROBLOX with ...

Appended Description of ROBLOX with totally not roblox

401: Unauthorized Invalid Password / Method not allowed

{
    // Response
}

GetAlias

GET http://localhost:port/GetAlias?Account=ROBLOX

Get an account's alias

Query Parameters

Name	Type	Description
Account*	string

200

totally not roblox

GetDescription

GET http://localhost:port/GetDescription?Account=ROBLOX

Query Parameters

Name	Type	Description
Account*	string

200

not roblox,
or maybe it is

GetCookie (DANGEROUS)

GET http://localhost:port/GetCookie?Account=ROBLOX&Password=Whatever

Get an account's cookie (DANGEROUS, USE A SECURE PASSWORD IF YOU'RE USING THIS) Requires AllowGetCookie setting to be set to true

Query Parameters

Name	Type	Description
Account*	string
Password*	string

200 _|WARNING...

_|WARNING:-DO-NOT-SHARE-THIS.--Sharing-this-will-allow-someone-to-log-in-as-you-and-to-steal-your-ROBUX-and-items.|

401 Invalid Password / Method not allowed

Method not allowed

400: Bad Request Invalid Account / Other

{
    // Response
}

GetAccounts (DANGEROUS)

GET http://localhost:port/GetAccounts?Password=Whatever

Gets the account names in account manager and returns a list separated by commas. Requires AllowGetAccounts setting to be set to true

Query Parameters

Name	Type	Description
Password*	string
Group*	string	Filter the list by a specific group

200 ROBLOX,Shedletsky,Telamon

ROBLOX,Shedletsky,Telamon

401 Invalid Password / Method not allowed

Method not allowed

400: Bad Request Invalid Account / Other

{
    // Response
}

GetAccountsJson (DANGEROUS)

GET http://localhost:port/GetAccountsJson?Password=Whatever&IncludeCookies=true&Group=Default

Retrieve a list of accounts in the accounts in the account manager including most of the data

LastUse value will be in roblox's tick format

Query Parameters

Name	Type	Description
IncludeCookies	boolean
Group	string	Filter the list by a specific group

200: OK [{"Username":"ROBLOX","UserId":1,"Alias":"","Description":"","Group":"Default","CurrentCSRFToken":null,"LastUsed":-62135596800.0,"Cookie":null,"Fields":{}}]

{
    // Response
}

401: Unauthorized Invalid Password / Method not allowed

{
    // Response
}

GetCSRFToken

GET http://localhost:port/GetCSRFToken?Account=ROBLOX&Password=Whatever

Returns the X-CSRF-Token assigned to the account

Query Parameters

Name	Type	Description
Account*	string

200: OK Example response: ffOxo/3G7ecR

{
    // Response
}

401: Unauthorized Invalid Password / Method not allowed

{
    // Response
}

400: Bad Request Invalid Account / Other

{
    // Response
}

GetBlockedList

GET http://localhost:port/GetBlockedList?Account=ROBLOX&Password=Whatever

Get the list of people the account has blocked

Query Parameters

Name	Type	Description
Account*	string

200: OK {"success":true,"userList":[5,12,3245],"total":3}

{
    // Response
}

400: Bad Request Invalid Account / Other

{
    // Response
}

ImportCookie

GET http://localhost:port/ImportCookie?Cookie=.ROBLOSEC...&Password=Whatever

Imports an account using a cookie

Query Parameters

Name	Type	Description
Cookie*	string

200: OK true

{
    // Response
}

400: Bad Request false

{
    // Response
}