Protect scripts by one simple API.

Sign in with Discord, then submit a script name and Luau source from your dashboard. The source is processed by the configured obfuscator and returned as a protected loader.

Obfuscate a script

After signing in with Discord, make a JSON POST request from the same website. The browser sends your session cookie automatically.

await fetch("/api/obfuscate", {
  method: "POST",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({ name: "test api", script: 'print("hi")' })
});

Successful response

{
  "success": true,
  "scriptId": "SCRIPT_ID",
  "scriptUrl": "https://arcway.pages.dev/protected/SCRIPT_ID",
  "pasteUrl": "https://pastefy.app/PASTE_ID",
  "loader": "loadstring(game:HttpGet(\"https://arcway.pages.dev/protected/SCRIPT_ID\"))()",
  "provider": "luarmoss",
  "antiTamper": true,
  "usage": {
    "credits_remaining": 299
  }
}

Your session cookie is private and cannot be read by JavaScript. Sign out when using a shared computer.

Request fields

`name`

Required. The script name shown in your dashboard. Placeholder names such as Untitled script are rejected.

`script`

Required. The Luau source to process.

Usage limits

Requests consume credits according to your Discord account's active plan. Requests without a valid Discord session are rejected. Webhook relay requests are limited to five events per minute per IP address.

Data handling

Arcway uses submitted source at runtime to request obfuscation and create the protected output. Arcway does not use your source for unrelated purposes. See the Privacy Policy for details.