Skip to content
shipLua

Start here

Connect Roblox

Signing in with Roblox proves who you are. Connecting Roblox to your studio lets shipLua read your games' analytics.

Sign-in and connection are different

  • Sign in with Roblox asks only for your Roblox identity (openid, profile). It logs you in to shipLua and nothing else.
  • Connect Roblox (Integrations in your workspace) asks Roblox for read-only access to your experiences: universe.analytics:read, game-pass:read and developer-product:read. shipLua stores the tokens envelope-encrypted with the same key service as two-factor authentication, bound to your studio, and deletes them when you disconnect.

Steps

  1. In shipLua, open Integrations, choose Add a game, then Pick it on Roblox and Connect with Roblox.
  2. On Roblox’s permission screen, select each experience you want shipLua to read and leave Read analytics on. That is the scope universe.analytics:read. A linked account that skipped the experience, or that was not given that scope, cannot read its analytics.
  3. Back in shipLua, link each experience to its Roblox universe. Insights and game health start filling in within an hour; Roblox data is daily.

Teams that manage keys on the Creator Hub can paste a read-only Open Cloud API key instead. See Integrations.

If it says analytics were not granted

A message like “is linked but was not given permission to read analytics” means the Roblox account is connected and the experience was not included, or Read analytics was left off. Choose Reconnect Roblox. shipLua asks again for universe.analytics:read and Roblox shows the permission screen. Select this experience and leave Read analytics on.

If that permission is not offered, the account cannot manage the experience. An owner can create an Open Cloud API key with universe.analytics:read for only this experience (some keys list it as universe-analytics:read) and add the key on Integrations.

Limits worth knowing

  • Roblox OAuth for third-party apps is in beta. Until Roblox finishes reviewing the shipLua app, OAuth connections stay in a private 10-user cap (see Security).
  • Roblox keeps 28 days of some health metrics, and the latest day can be marked projected until Roblox finalizes it.
  • Roblox has no API for place files, so Guardian audits use exports you upload.