# Roblox Account Manager

## **WARNING**: Malicious Scripts may be able to abuse this API and possibly cause a ban to your account. In order to prevent this FULLY, you should probably change the port, add a password, and set EveryRequestRequiresPassword to true.

Passwords **cannot** contain symbols, letters and numbers only.

Found an error or a bug? Report it to the [discord](https://discord.gg/MsEH7smXY8) or [github](https://github.com/ic3w0lf22/Roblox-Account-Manager/issues).

## Roblox Account Manager Settings

**Requires Password \***

**These settings can be edited by opening the settings window by clicking the gear button on the top right of the Account Manager.**

DevMode: Enables Developer Mode for RAM allowing extra settings such as Copy Cookie

EnableWebServer: When RAM is launched, a local web server is opened allowing for using the RAM API

WebServerPort: The Web Server's Port (You should probably change this)

AllowGetCookie\*: Allow usage of the GetCookie request (DANGEROUS)

AllowGetAccounts\*: Allow usage of the GetAccounts request (DANGEROUS)

AllowLaunchAccount\*: Allow usage of the LaunchAccount request (DANGEROUS)

AllowAccountEditing: Allows the account alias, description, and fields to be edited.

Password: Requires 6+ letters in order to use methods that require it. CANNOT BE EDITED WHILE ACCOUNT MANAGER IS RUNNING

EveryRequestRequiresPassword: Every request will require you to attach your password.

## Example Code for the given RAMAccount class

#### <https://raw.githubusercontent.com/ic3w0lf22/Roblox-Account-Manager/master/RAMAccount.lua>

```
local RAMAccount = loadstring(game:HttpGet'https://raw.githubusercontent.com/ic3w0lf22/Roblox-Account-Manager/master/RAMAccount.lua')()

local MyAccount = RAMAccount.new(game:GetService'Players'.LocalPlayer.Name)

if MyAccount then
    print('My Alias: ' .. MyAccount:GetAlias())
    print('My Description: ' .. MyAccount:GetDescription())
end
```

## LaunchAccount

<mark style="color:blue;">`GET`</mark> `http://localhost:port/LaunchAccount?Account=ROBLOX&PlaceId=1818&JobId=exam-plej-obid&Password=Whatever`

Launches an account from account manager using the given PlaceId\
Requires AllowLaunchAccount setting to be set to true

#### Query Parameters

| Name                                      | Type    | Description |
| ----------------------------------------- | ------- | ----------- |
| Password                                  | string  |             |
| Account<mark style="color:red;">\*</mark> | string  |             |
| PlaceId<mark style="color:red;">\*</mark> | number  |             |
| JobId                                     | string  |             |
| FollowUser                                | boolean |             |
| JoinVip                                   | boolean |             |

{% tabs %}
{% tab title="200 Launched ROBLOX to 1818" %}

```
Launched ROBLOX to 1818
```

{% endtab %}

{% tab title="401: Unauthorized Invalid Password / Method not allowed" %}

```javascript
{
    // Response
}
```

{% endtab %}
{% endtabs %}

## FollowUser

<mark style="color:blue;">`GET`</mark> `http://localhost:port/FollowUser?Account=ROBLOX&Userrname=Shedletsky&Password=Whatever`

Follow a user into their game (if they're online)

#### Query Parameters

| Name                                       | Type   | Description |
| ------------------------------------------ | ------ | ----------- |
| Account<mark style="color:red;">\*</mark>  | string |             |
| Username<mark style="color:red;">\*</mark> | string |             |
| Password                                   | string |             |

{% tabs %}
{% tab title="200: OK Joining Shedletsky's game on ROBLOX" %}

```javascript
{
    // Response
}
```

{% endtab %}

{% tab title="401: Unauthorized Invalid Password / Method not allowed" %}

```javascript
{
    // Response
}
```

{% endtab %}

{% tab title="400: Bad Request Invalid Username Parameter" %}

```javascript
{
    // Response
}
```

{% endtab %}

{% tab title="400: Bad Request Failed to get UserId" %}

```javascript
{
    // Response
}
```

{% endtab %}
{% endtabs %}

## SetServer

<mark style="color:blue;">`GET`</mark> `http://localhost:port/SetServer?Account=ROBLOX&PlaceId=1818&JobId=exam-plej-obid&Password=Whatever`

Sets the next server roblox matchmaking will put you in.

#### Query Parameters

| Name                                      | Type   | Description |
| ----------------------------------------- | ------ | ----------- |
| Password                                  | string |             |
| Account<mark style="color:red;">\*</mark> | string |             |
| PlaceId<mark style="color:red;">\*</mark> | number |             |
| JobId                                     | string |             |

{% tabs %}
{% tab title="200 Success" %}

```
Launched ROBLOX to 1818
```

{% endtab %}

{% tab title="400: Bad Request <Response from ROBLOX API>" %}

```javascript
{
    // Response
}
```

{% endtab %}
{% endtabs %}

## SetRecommendedServer

<mark style="color:blue;">`GET`</mark> `http://localhost:port/SetRecommendedServer?Account=ROBLOX&PlaceId=1818&Password=Whatever`

Sets the next server roblox matchmaking will put you in. Roblox Account Manager will choose the next smallest server depending on what servers are loaded.

#### Query Parameters

| Name                                      | Type   | Description |
| ----------------------------------------- | ------ | ----------- |
| Password                                  | string |             |
| Account<mark style="color:red;">\*</mark> | string |             |
| PlaceId<mark style="color:red;">\*</mark> | number |             |

{% tabs %}
{% tab title="200 Success" %}

```
Launched ROBLOX to 1818
```

{% endtab %}

{% tab title="400: Bad Request <Response from ROBLOX API>" %}

```javascript
{
    // Response
}
```

{% endtab %}
{% endtabs %}

## BlockUser

<mark style="color:blue;">`GET`</mark> `http://localhost:port/BlockUser?Account=ROBLOX&UserId=63700903`

Blocks a user by their UserId

#### Query Parameters

| Name                                      | Type   | Description |
| ----------------------------------------- | ------ | ----------- |
| Account<mark style="color:red;">\*</mark> | string |             |
| UserId<mark style="color:red;">\*</mark>  | number |             |

{% tabs %}
{% tab title="200 <Response from ROBLOX API>" %}

```
Success
```

{% endtab %}
{% endtabs %}

## UnblockUser

<mark style="color:blue;">`GET`</mark> `http://localhost:port/UnblockUser?Account=ROBLOX&UserId=63700903`

​Unblocks a user by their UserId

#### Query Parameters

| Name                                      | Type   | Description |
| ----------------------------------------- | ------ | ----------- |
| Account<mark style="color:red;">\*</mark> | string |             |
| UserId<mark style="color:red;">\*</mark>  | number |             |

{% tabs %}
{% tab title="200 <Response from ROBLOX API>" %}

```
Success4
```

{% endtab %}
{% endtabs %}

## UnblockEveryone

<mark style="color:blue;">`GET`</mark> `http://localhost:port/UnblockEveryone?Account=ROBLOX`

Will unblock everyone.

#### Query Parameters

| Name                                      | Type   | Description |
| ----------------------------------------- | ------ | ----------- |
| Account<mark style="color:red;">\*</mark> | string |             |

{% tabs %}
{% tab title="200 Unblocking Everyone" %}

```
Unblocking everyone
```

{% endtab %}

{% tab title="400 Failed to unblock everyone" %}

```
Failed to unblock everyone
```

{% endtab %}

{% tab title="401: Unauthorized Pin is Locked / Other" %}

```javascript
{
    // Response
}
```

{% endtab %}
{% endtabs %}

&#x20;

## GetField

<mark style="color:blue;">`GET`</mark> `http://localhost:port/GetField?Account=ROBLOX&Field=PhantomForcesXP`

Get a specific field of an account.

#### Query Parameters

| Name                                      | Type   | Description |
| ----------------------------------------- | ------ | ----------- |
| Account<mark style="color:red;">\*</mark> | string |             |
| Field<mark style="color:red;">\*</mark>   | string |             |

{% tabs %}
{% tab title="200 The field's value. (for example, this would be PhantomForcesXP: 2388)" %}

```
5515
```

{% endtab %}
{% endtabs %}

## SetField

<mark style="color:blue;">`GET`</mark> `http://localhost:port/SetField?Account=ROBLOX&Field=PhantomForcesXP&Value=2388`

​Set an account's field.

#### Query Parameters

| Name                                      | Type   | Description |
| ----------------------------------------- | ------ | ----------- |
| Account<mark style="color:red;">\*</mark> | string |             |
| Field<mark style="color:red;">\*</mark>   | string |             |
| Value<mark style="color:red;">\*</mark>   | string |             |

{% tabs %}
{% tab title="200 Set Field PhantomForcesXP to 2388 for ROBLOX" %}

```
Set Field PhantomForcesXP to 2388
```

{% endtab %}

{% tab title="401: Unauthorized Invalid Password / Method not allowed" %}

```javascript
{
    // Response
}
```

{% endtab %}
{% endtabs %}

## RemoveField

<mark style="color:blue;">`GET`</mark> `http://localhost:port/RemoveField?Account=ROBLOX&Field=PhantomForcesXP`

Removes an account's field.

#### Query Parameters

| Name                                      | Type   | Description |
| ----------------------------------------- | ------ | ----------- |
| Account<mark style="color:red;">\*</mark> | string |             |
| Field<mark style="color:red;">\*</mark>   | string |             |

{% tabs %}
{% tab title="200 Removed Field PhantomForcesXP from ROBLOX" %}

```
Remove Field PhantomForcesXP
```

{% endtab %}

{% tab title="401: Unauthorized Invalid Password / Method not allowed" %}

```javascript
{
    // Response
}
```

{% endtab %}
{% endtabs %}

## SetAlias

<mark style="color:green;">`POST`</mark> `http://localhost:port/SetAlias?Account=ROBLOX`

Set an account's alias

#### Query Parameters

| Name                                      | Type   | Description |
| ----------------------------------------- | ------ | ----------- |
| Account<mark style="color:red;">\*</mark> | string |             |

#### Request Body

| Name                                    | Type   | Description |
| --------------------------------------- | ------ | ----------- |
| Alias<mark style="color:red;">\*</mark> | string |             |

{% tabs %}
{% tab title="200 Set Alias of ROBLOX to ..." %}

```
Set Alias of ROBLOX to not roblox
```

{% endtab %}

{% tab title="401: Unauthorized Invalid Password / Method not allowed" %}

```javascript
{
    // Response
}
```

{% endtab %}
{% endtabs %}

## SetDescription

<mark style="color:green;">`POST`</mark> `http://localhost:port/SetDescription?Account=ROBLOX`

Set an account's description

#### Query Parameters

| Name                                      | Type   | Description |
| ----------------------------------------- | ------ | ----------- |
| Account<mark style="color:red;">\*</mark> | string |             |

#### Request Body

| Name                                          | Type   | Description |
| --------------------------------------------- | ------ | ----------- |
| Description<mark style="color:red;">\*</mark> | string |             |

{% tabs %}
{% tab title="200 Set Description of ROBLOX to ..." %}

```
Set Description of ROBLOX to Hello,
this can be
​
```

{% endtab %}

{% tab title="401: Unauthorized Invalid Password / Method not allowed" %}

```javascript
{
    // Response
}
```

{% endtab %}
{% endtabs %}

## SetAvatar

<mark style="color:green;">`POST`</mark> `http://localhost:port/SetAvatar?Account=ROBLOX`

Set an account Avatar with JSON

#### Request Body

| Name                                          | Type   | Description                 |
| --------------------------------------------- | ------ | --------------------------- |
| Avatar JSON<mark style="color:red;">\*</mark> | string | JSON Containing avatar data |

{% tabs %}
{% tab title="200: OK Attempting to set avatar of ROBLOX to ..." %}

```javascript
{
    // Response
}
```

{% endtab %}

{% tab title="401: Unauthorized Invalid Password / Method not allowed" %}

```javascript
{
    // Response
}
```

{% endtab %}
{% endtabs %}

## AppendDescription

<mark style="color:green;">`POST`</mark> `http://localhost:port/AppendDescription?Account=ROBLOX`

Append something to an account's description

#### Query Parameters

| Name                                      | Type   | Description |
| ----------------------------------------- | ------ | ----------- |
| Account<mark style="color:red;">\*</mark> | string |             |

#### Request Body

| Name                                          | Type   | Description |
| --------------------------------------------- | ------ | ----------- |
| Description<mark style="color:red;">\*</mark> | string |             |

{% tabs %}
{% tab title="200 Appended Description of ROBLOX with ..." %}

```
Appended Description of ROBLOX with totally not roblox
```

{% endtab %}

{% tab title="401: Unauthorized Invalid Password / Method not allowed" %}

```javascript
{
    // Response
}
```

{% endtab %}
{% endtabs %}

## GetAlias

<mark style="color:blue;">`GET`</mark> `http://localhost:port/GetAlias?Account=ROBLOX`

Get an account's alias

#### Query Parameters

| Name                                      | Type   | Description |
| ----------------------------------------- | ------ | ----------- |
| Account<mark style="color:red;">\*</mark> | string |             |

{% tabs %}
{% tab title="200 " %}

```
totally not roblox
```

{% endtab %}
{% endtabs %}

## GetDescription

<mark style="color:blue;">`GET`</mark> `http://localhost:port/GetDescription?Account=ROBLOX`

#### Query Parameters

| Name                                      | Type   | Description |
| ----------------------------------------- | ------ | ----------- |
| Account<mark style="color:red;">\*</mark> | string |             |

{% tabs %}
{% tab title="200 " %}

```
not roblox,
or maybe it is
```

{% endtab %}
{% endtabs %}

## GetCookie (DANGEROUS)

<mark style="color:blue;">`GET`</mark> `http://localhost:port/GetCookie?Account=ROBLOX&Password=Whatever`

Get an account's cookie (DANGEROUS, USE A SECURE PASSWORD IF YOU'RE USING THIS)\
Requires AllowGetCookie setting to be set to true

#### Query Parameters

| Name                                       | Type   | Description |
| ------------------------------------------ | ------ | ----------- |
| Account<mark style="color:red;">\*</mark>  | string |             |
| Password<mark style="color:red;">\*</mark> | string |             |

{% tabs %}
{% tab title="200 \_|WARNING..." %}

```
_|WARNING:-DO-NOT-SHARE-THIS.--Sharing-this-will-allow-someone-to-log-in-as-you-and-to-steal-your-ROBUX-and-items.|
```

{% endtab %}

{% tab title="401 Invalid Password / Method not allowed" %}

```
Method not allowed
```

{% endtab %}

{% tab title="400: Bad Request Invalid Account / Other" %}

```javascript
{
    // Response
}
```

{% endtab %}
{% endtabs %}

## GetAccounts (DANGEROUS)

<mark style="color:blue;">`GET`</mark> `http://localhost:port/GetAccounts?Password=Whatever`

Gets the account names in account manager and returns a list separated by commas.\
Requires AllowGetAccounts setting to be set to true

#### Query Parameters

| Name                                       | Type   | Description                         |
| ------------------------------------------ | ------ | ----------------------------------- |
| Password<mark style="color:red;">\*</mark> | string |                                     |
| Group<mark style="color:red;">\*</mark>    | string | Filter the list by a specific group |

{% tabs %}
{% tab title="200 ROBLOX,Shedletsky,Telamon" %}

```
ROBLOX,Shedletsky,Telamon
```

{% endtab %}

{% tab title="401 Invalid Password / Method not allowed" %}

```
Method not allowed
```

{% endtab %}

{% tab title="400: Bad Request Invalid Account / Other" %}

```javascript
{
    // Response
}
```

{% endtab %}
{% endtabs %}

## GetAccountsJson (DANGEROUS)

<mark style="color:blue;">`GET`</mark> `http://localhost:port/GetAccountsJson?Password=Whatever&IncludeCookies=true&Group=Default`

Retrieve a list of accounts in the accounts in the account manager including most of the data

LastUse value will be in roblox's tick format

#### Query Parameters

| Name           | Type    | Description                         |
| -------------- | ------- | ----------------------------------- |
| IncludeCookies | boolean |                                     |
| Group          | string  | Filter the list by a specific group |

{% tabs %}
{% tab title="200: OK \[{"Username":"ROBLOX","UserId":1,"Alias":"","Description":"","Group":"Default","CurrentCSRFToken":null,"LastUsed":-62135596800.0,"Cookie":null,"Fields":{}}]" %}

```javascript
{
    // Response
}
```

{% endtab %}

{% tab title="401: Unauthorized Invalid Password / Method not allowed" %}

```javascript
{
    // Response
}
```

{% endtab %}
{% endtabs %}

## GetCSRFToken

<mark style="color:blue;">`GET`</mark> `http://localhost:port/GetCSRFToken?Account=ROBLOX&Password=Whatever`

Returns the X-CSRF-Token assigned to the account

#### Query Parameters

| Name                                      | Type   | Description |
| ----------------------------------------- | ------ | ----------- |
| Account<mark style="color:red;">\*</mark> | string |             |

{% tabs %}
{% tab title="200: OK Example response: ffOxo/3G7ecR" %}

```javascript
{
    // Response
}
```

{% endtab %}

{% tab title="401: Unauthorized Invalid Password / Method not allowed" %}

```javascript
{
    // Response
}
```

{% endtab %}

{% tab title="400: Bad Request Invalid Account / Other" %}

```javascript
{
    // Response
}
```

{% endtab %}
{% endtabs %}

## GetBlockedList

<mark style="color:blue;">`GET`</mark> `http://localhost:port/GetBlockedList?Account=ROBLOX&Password=Whatever`

Get the list of people the account has blocked

#### Query Parameters

| Name                                      | Type   | Description |
| ----------------------------------------- | ------ | ----------- |
| Account<mark style="color:red;">\*</mark> | string |             |

{% tabs %}
{% tab title="200: OK {"success":true,"userList":\[5,12,3245],"total":3}" %}

```javascript
{
    // Response
}
```

{% endtab %}

{% tab title="400: Bad Request Invalid Account / Other" %}

```javascript
{
    // Response
}
```

{% endtab %}
{% endtabs %}

## ImportCookie

<mark style="color:blue;">`GET`</mark> `http://localhost:port/ImportCookie?Cookie=.ROBLOSEC...&Password=Whatever`

Imports an account using a cookie

#### Query Parameters

| Name                                     | Type   | Description |
| ---------------------------------------- | ------ | ----------- |
| Cookie<mark style="color:red;">\*</mark> | string |             |

{% tabs %}
{% tab title="200: OK true" %}

```javascript
{
    // Response
}
```

{% endtab %}

{% tab title="400: Bad Request false" %}

```javascript
{
    // Response
}
```

{% endtab %}
{% endtabs %}