What Roblox's public APIs reveal
This page uses only unauthenticated Roblox endpoints. It combines presence snapshots with public profile details, social counts, created and favorited experiences, group memberships and roles, owned inventory, equipped avatar assets, collectibles, and username history for two accounts I control.
What “public” means here
No Roblox login, cookie, or API key is used. The snapshot comes from Roblox's public users, presence, friends, games, groups, inventory, avatar, and thumbnails services. Results can vary with account privacy settings and endpoint availability; an unavailable endpoint is labeled instead of being reported as an empty result. The friend-list endpoint is public too, but this demo intentionally does not republish third-party account identities. Badge and follower/following lists currently require authentication.
Public API access tested
Observed without a Roblox login, cookie, or API key. Roblox can change endpoint access at any time.
| Data | Anonymous result | Shown here |
|---|---|---|
| Profiles, username history, presence, social counts | Public | Yes |
| Created/favorite experiences, live players, visits, favorites, votes, settings, icons | Public | Yes |
| Groups, roles, role populations, owners, descriptions, group experiences, icons | Public | Yes |
| Inventory, limited collectibles, avatar configuration, saved outfits | Public when account settings allow | Inventory, collectibles, avatar; outfits when present |
| Per-asset creator, price, sales and limited status | Public per item | Equipped catalog assets |
| Friend identities | Public | No—third-party identities intentionally excluded |
| Earned badges; follower/following identity lists | 401: authentication required | No; public counts remain shown |
| Batch catalog item details | 403: XSRF token required | No; public per-item Economy endpoint used instead |
| Robux, transactions, purchases, messages, account/security settings | Account-private | No; not queried |