The account endpoints let you inspect the state of the Rift CE server and retrieve account data.Documentation Index
Fetch the complete documentation index at: https://mintlify.com/N3XT3R1337/RiftCE/llms.txt
Use this file to discover all available pages before exploring further.
GET /running is a no-auth health check. GET /getaccounts returns the full account list. GET /getcookie retrieves the raw .ROBLOSECURITY cookie for a single account — a sensitive operation gated by its own permission flag.
GET /running
Returns the server status, version string, and total number of accounts in the vault. This endpoint requires no authentication and accepts no parameters. Use it to verify the server is reachable before issuing further requests.Response fields
Always
true when the server is responding. If the server is not running, the connection will be refused before this field is ever returned.The Rift CE application version string.
Total count of accounts currently loaded in the vault.
Example
GET /getaccounts
Returns a JSON array of all accounts managed by Rift CE. Each object contains the account’s public metadata and live status. Raw cookies are not included in this response — useGET /getcookie if you need them.
Permission required: WebServerAllowGetAccounts (enabled by default)
Response fields (per account)
The Roblox username for this account.
The Roblox numeric user ID.
The group this account is assigned to. Empty string if unassigned.
The display-name alias set on this account. Empty string if no alias is set.
Live session status. One of:
"Offline", "Online", "InGame", "InStudio". Resolved at runtime — not persisted to disk.ISO 8601 datetime string of the last time this account was launched.
Example
GET /getcookie
Returns the raw.ROBLOSECURITY cookie stored for a single account.
Permission required: WebServerAllowGetCookie (disabled by default)
Parameters
The Roblox username of the account whose cookie you want to retrieve. Must match exactly (case-insensitive lookup is used internally).
Response fields
The
.ROBLOSECURITY cookie value as stored in the vault. The _|WARNING prefix is stripped at import time, so the stored value is the raw token without any prefix.