Documentation

Everything you need to protect Roblox Luau with AntiLua: the dashboard, protection options, and the HTTP API.

What a build is

AntiLua takes Roblox Luau source and returns protected Luau output. It transforms the script using the selected protection options, including VM-oriented transformations and anti-tamper checks. Keep your readable source as the editable original.

input.luau

local Players = game:GetService("Players")
print("Hello, Roblox Luau", Players.LocalPlayer)

Paste or import your source in the workspace, then copy or download the result. API clients receive the protected output in the JSON code field.

Where to go next

Quickstart

Prepare, protect, download and test a Roblox Luau script.

How it works

From readable Roblox Luau to protected output.

Requirements

API key, content type and request shape.

Authentication & quota

Separate web and API limits, headers and cooldowns.

The whole map

Getting started

Overview: What AntiLua does and how these docs are laid out.
Quickstart: Prepare, protect, download and test a Roblox Luau script.
Dashboard: The workspace, access token, API key and documentation.

Features

How it works: From readable Roblox Luau to protected output.
Supported platforms: Roblox Luau and the output you distribute.
Protection options: Choose Intense VM Structure and Fast runtime.

API

Requirements: API key, content type and request shape.
Authentication & quota: Separate web and API limits, headers and cooldowns.
Limits: Source size, reset periods and retry behavior.
GET /health: The public service availability check.
POST /api/run: Obfuscate raw Roblox Luau over HTTP.
Errors: Status codes and what to do about them.

FAQ: Answers about compatibility, output and access.

Scope

These docs cover AntiLua’s Roblox Luau workflow. Web builds and API requests have separate usage limits; protection options can be selected for each request.

Only protect scripts you own or are allowed to modify. Obfuscation does not make client-delivered code impossible to analyze; keep secrets and trusted validation on the server.