Product changelog

Documented releases for the website, API, SDKs, and infrastructure.

Every meaningful product change should leave a trail: what shipped, why it matters, and where developers should look next.

Latest

Feature Flags API

  • Added six live routes under /api/v1/flags for definitions, deterministic user assignments, exposure tracking, listing, and cleanup.
  • Added Lua and JavaScript SDK helpers plus a self-test that writes a flag, assigns a variant, records exposure, lists, reads, and deletes it.
  • Added API workbench, Studio tester, key product, docs, status, and public route count coverage for the new module.
Infrastructure

Resend quota protection

  • Added a daily-quota email guard so Resend limit responses pause new email-code sends until reset.
  • Added an explicit quota message on login and registration instead of a generic delivery failure.
  • Kept password and Google Authenticator sign-in available for verified accounts without consuming email quota.
API

Session Analytics API

  • Added event ingest, player event listing, summary reads, and event cleanup routes under /api/v1/analytics.
  • Added Lua and JavaScript SDK helpers plus a self-test that writes, reads, summarizes, and deletes analytics events.
  • Added API workbench, Studio tester, key product, docs, and status coverage for the new module.
Billing

Subscription downgrade safety

  • Blocked plan changes when current active keys or stored API data exceed the target tier limits.
  • Added plan-fit state to subscription and dashboard responses so the settings page can explain locked plans.
  • Updated settings cards with clear usage-fit labels and restrained blocked-plan styling.
  • Kept validation on authenticated dashboard requests only, with no email delivery required.
API

Inventory Snapshot API and quota-safe testing

  • Added /api/v1/inventory/users/{userId} list routes and item-level GET, PUT, PATCH, and DELETE routes.
  • Added Lua and JavaScript SDK helpers for mirrored inventory items, equipped loadouts, and self-tests.
  • Updated docs, Studio tester options, API tabs, route metadata, and status counts.
  • Kept validation on API-key flows so email quota is not consumed during testing.
API

Experience Config API and documentation portal

  • Added live /api/v1/experience/configs/{configKey} PUT and GET routes.
  • Added Lua SDK helpers for live config rendering inside Roblox Studio.
  • Added documentation, status, and changelog pages.
  • Verified a visible Studio sign rendered from production API data.
Security

Account security and live key creation

  • Added email-based login, password setup, and Google Authenticator 2FA.
  • Live API key creation now requires verified 2FA.
  • Keys are revealed once and stored as server-side hashes.
Infrastructure

Production VPS, HTTPS, and email delivery

  • Configured Nginx, HTTPS, and backend service deployment on the VPS.
  • Verified robloxapis.com DNS and Resend transactional email.
  • Added health checks and production API route metadata.
API

Initial v1 API modules

  • Added cross-ban, player intel, vault storage, economy signals, webhook events, group policy, and Open Cloud introspection routes.
  • Added per-key request telemetry, storage usage, and audit logs.
  • Added hosted Lua and JavaScript SDK files.