Skip to content

Luau Library

The Aureva Luau library provides a simple interface for authenticating users and loading scripts from your Roblox executor. Key validation happens server-side before script content is delivered.


The standard loader URL format uses your script’s file hash from the Aureva dashboard:

https://api.aureva.cc/files/v3/loaders/{file_hash}.lua
PartDescription
{file_hash}Unique 32-character hex hash for the script file (from script settings)
.luaExtension (optional; some executors expect it)

The Aureva loader handles key validation automatically. Set the key before loading:

script_key = "YOUR_KEY"
loadstring(game:HttpGet("https://api.aureva.cc/files/v3/loaders/FILE_HASH.lua"))()

Some loaders support passing the key as a query parameter:

local loaderUrl = "https://api.aureva.cc/files/v3/loaders/a1b2c3d4e5f6g7h8.lua"
local key = "USER_WHITELIST_KEY"
loadstring(game:HttpGet(loaderUrl .. "?key=" .. key))()

For FFA (public) scripts, the key can be omitted:

loadstring(game:HttpGet("https://api.aureva.cc/files/v3/loaders/FILE_HASH.lua"))()

The Aureva loader system provides higher-level APIs for key validation and script loading:

local Aureva = loadstring(game:HttpGet("https://api.aureva.cc/loaders/library.lua"))()
Aureva.script_id = "YOUR_SCRIPT_ID" -- 32-hex script ID
local result = Aureva.check_key("USER_KEY")
if result.code == "KEY_VALID" then
Aureva.load_script()
else
warn("Validation failed:", result.code, result.message)
end

  1. User requests the loader URL (with optional ?key=... or script_key variable)
  2. Aureva validates the key automatically
  3. If valid, the script loads
  4. If invalid, an error message is returned

You can set a custom loader URL per script in the Aureva dashboard. When set, the custom URL is used instead of the default loader. This allows:

  • Proxying through your own domain
  • Custom branding or redirect logic
  • Integration with third-party loaders

  • Script IDs are 32 hexadecimal characters ([a-f0-9]{32})
  • Encrypted script IDs (longer than 64 chars) are supported for some flows
  • The loader URL uses file_hash (also 32 hex chars when present); otherwise script_id is used