Setup Guides
Connect Roblox Open Cloud
Create, store, validate, rotate, and remove the scoped Roblox credential used by Clan Labs.
Last updatedWhat this does
Roblox Open Cloud authorises supported Roblox community writes, including rank changes and pending-join decisions. The credential is separate from a Clan Labs API key.
Prerequisites
- The main community or division already exists in Clan Labs.
- You are the Discord server owner; Clan Labs reserves Roblox Cloud configuration for Super Owner.
- The Roblox account creating the key can grant Open Cloud access to the target community.
- You can reauthenticate with Discord before saving or removing a credential.
Setup steps
- Open the Clan Labs community.
- Go to Settings → Roblox Cloud.
- Choose Credential instructions and verify the displayed target Community ID.
- Open Roblox Credentials.
- Under User API Keys, choose Create API Key.
- Use a descriptive name such as
Clan Labs (COMMUNITY_NAME). - Add the groups API system for the target community.
- Select both
group:readandgroup:write. - Leave IP restrictions empty. Add an expiry only if you will replace the key before that date.
- Choose Save & Generate, copy the key once, and paste it into Clan Labs.
- Choose Save credential.
Expected result
The status changes to Configured and shows the last time Clan Labs validated or updated the credential. The secret itself is never shown again.
Verify that it works
Open Pending Join Requests or perform an authorised low-risk rank operation. The page should load or the action should complete without an Open Cloud precondition error. Confirm the correct Roblox state and audit entry afterward.
Common errors
- No Roblox Open Cloud credential is configured — save a key before using write workflows.
- Roblox rejects validation with 401 or 403 — generate a current key and confirm both required scopes and the target community.
- The community is absent in Creator Hub — use an eligible Roblox account or fix its role permissions.
- A request works initially and later fails — check key expiry or whether the key was revoked.
- Rank or join writes time out — do not assume they failed; refresh Roblox state before retrying.
Security practices
- Create a dedicated key instead of reusing one from another service.
- Grant only the
groupssystem and the two required scopes for the intended community. - Do not restrict the key to your device’s IP.
- Do not share the secret in Discord, screenshots, logs, source control, or support requests.
- Replace the credential immediately if it may have been exposed. Clan Labs clears pasted drafts when fresh reauthentication expires.
Next, configure verification and group and rank binds.