API documentation

com.roblox.client · target ABI x86_64 · status page

This server watches Roblox's Android client (com.roblox.client) around the clock, records every version it sees, and keeps a copy of the installable builds. The API below is how another program asks it three questions:

• What is the current Roblox version, and when was it released?
• Which APK files do you actually hold?
• Give me that file.

Base URL

https://robloxandriod.com

All paths below are relative to it. Responses are JSON (application/json; charset=utf-8) unless stated otherwise, and every JSON endpoint sends Access-Control-Allow-Origin: *, so a browser page can call it directly.

Authentication

Every endpoint on this page is open: no key, no header, no account. Only POST /internal/poll requires a token, and that endpoint exists for the operator's cron job rather than for clients.

The 30-second version

What is live right now:

curl -s https://robloxandriod.com/api/v1/android/version

What is downloadable:

curl -s https://robloxandriod.com/api/v1/android/files

Download a specific build, or whatever is newest:

curl -L -o roblox.apk https://robloxandriod.com/download/2.734.917
curl -L -o roblox.apk https://robloxandriod.com/download/latest

-L matters. The download is a redirect to Cloudflare storage; without it you save the redirect instead of the APK.

Contents

1. Endpoints
   Every URL, what it returns, and what each field means.
2. Downloading files
   How /download works, why it redirects to Cloudflare, and how to verify what you got.
3. Writing a client
   A working updater in bash and python, plus the mistakes worth avoiding.
4. Failures and edge cases
   Every error code, which states only look like errors, and what is safe to retry.

What this server will not do

• It does not serve any version it has not stored. Ask /api/v1/android/files first, or accept a 404.
• It does not track any ABI other than x86_64. An abi parameter naming a different one is rejected rather than answered with something that will not install.
• It does not modify APKs. Bytes are copied from the public mirror unchanged, and the published sha256 is of the exact file you receive.