Skip to main content
XCS is a web platform that manages physical and in-game access control for Roblox experiences. It provides a dashboard for configuring access rules and a REST API for programmatic control. The platform is designed for Roblox developers who need to manage who can enter specific areas in their games.

​
Dashboard vs API

XCS provides two interfaces for managing access control:
  • Dashboard (https://xcs.restrafes.co) — A web UI for managing organizations, locations, access points, rules, and members. Requires a user account with session authentication.
  • Consumer API (https://api.restrafes.co/api/consumer/v1) — A REST API for programmatic access control. Uses API key authentication. Supports health checks, organization listing, and remote unlock.
The Consumer API is designed for automated systems that need to trigger unlocks without human intervention, such as backend services or integration platforms.

​
Who Is This For?

RoleHow You Use XCS
Roblox group ownerCreate organizations, invite members, configure access points for your games
Roblox developerIntegrate the MessagingService listener in your game scripts, use the API for automated unlocks
Security teamMonitor access events, configure rules, audit who enters restricted areas

​
What You Need to Get Started

  • A valid email address
  • A Roblox account (for identity verification in-game)
  • An invitation link from an XCS provider

Core Concepts

Deep dive into organizations, locations, access points, rules, and access groups.

Getting Started

Step-by-step tutorial from zero to your first access point.