Use this file to discover all available pages before exploring further.
Rift CE includes an optional local HTTP server that external scripts, bots, or tools can use to interact with your account vault. You can list accounts, retrieve cookies, trigger launches, and read or write custom fields — all over plain HTTP requests from the same machine or, optionally, your local network.
In Rift CE, click the Settings button in the top navigation bar.
2
Enable the server
Scroll to the Web Server section and toggle Enable Web Server on.
3
Set a port
The default port is 7963. Change it if that port is already in use on your machine. The setting is WebServerPort.
4
Set a password
Enter a password in the Password field. By default WebServerRequirePassword is enabled — all requests must supply this password. Leave the field blank only in isolated environments where no other process can reach the port.
By default the server only binds to http://localhost:{port}/. Nothing outside your machine can reach it. Enable Allow External Access (WebServerAllowExternal) only if you need requests from other devices on your network — this binds to http://+:{port}/ and may require Windows Firewall rule changes or administrator privileges.
WebServerAllowGetCookie and WebServerAllowEditing are disabled by default because they expose sensitive data or allow vault modifications. Enable them only for trusted local automations.
/getaccounts returns a JSON array of all accounts with Username, UserId, Group, Alias, Status, and LastUsed. /getcookie returns the raw .ROBLOSECURITY cookie for a single account — handle this value with care.
Account is the Roblox username (required). PlaceId is optional — omit it to open Roblox home. JobId is optional and only applies when PlaceId is provided.
All editing endpoints require WebServerAllowEditing.
Method
Path
Parameters
GET
/setalias
Account, Alias
GET
/setdescription
Account, Description
GET
/setgroup
Account, Group
GET
/getfield
Account, Field (omit Field to return all fields)
GET
/setfield
Account, Field, Value
GET
/removefield
Account, Field
Custom fields (getfield / setfield / removefield) are arbitrary key-value pairs stored per account. Use them to attach metadata like farm type, proxy address, or last-run timestamps to accounts.