FAQ

Short answers. For setup order see Getting started.

Do I need SinisterClient?

Most plans expect it for reliable resolves. You need the proxy capture unless staff gave you a Discord-only or API-only tier.

Why does resolve say I am not in game?

You almost certainly launched Roblox before SinisterClient, or used the normal Roblox shortcut instead of Launch inside the client.

Fix: close Roblox, open SinisterClient, launch from there, join the target server, then resolve.

Cookie linked but still broken

Cookies expire when you log out of Roblox in the browser. Run /auto-link again and finish within 10 minutes.

What is the difference between Script and Lua bridge?

Sinister Script (/get-script) is the licensed in-game product with its own UI.

Lua bridge is a helper file for custom executor scripts talking to SinisterClient on localhost. See Lua bridge.

Can I use Sinister on a VM or with a VPN?

Many builds block VMs, debuggers, remote desktop tools, and VPNs. /request-security-change asks for an exception. Staff may deny.

What is OOB verification?

A browser captcha step mid-resolve. Complete it and wait for the page to finish. OOB guide.

HWID / "leak" message

Your personal client build binds to one PC. Running the same SCB-* key elsewhere triggers leak detection. Use one machine or ask staff after a legitimate PC swap.

/get-client or /get-script never finishes

Builds queue server-side. Large compiles take minutes. If it fails for hours, open a ticket with your Discord id and the time you ran the command.

Discord command missing

Lockdown may be active. You might be in the wrong server. Some commands are staff-only on the management bot.

Reseller API vs normal sub

A separate SSW-* HTTP key for partners automating resolves. It does not include SinisterClient, cookies, or script access unless you also sell or hold a normal subscription.

Documentation: Reseller API guide · Swagger UI

Obfuscator API vs Sinister Script

Obfuscator (OBF-* keys, /api/v1/obfuscate) obfuscates your Lua source. Sinister Script is a separate licensed product loaded in-game.

Where is the API reference?

Interactive docs on your Sinister host (Swagger). Reseller guide: reseller-guide. Obfuscator: api-quickstart.

How do I compare plans?

Staff publish tier names in Discord. Feature flags (client, script, resolve types) are on your plan object. /status shows your current plan name. Generic feature list: Plans comparison.

Is sharing allowed?

Account sharing violates terms. Security systems flag subnet overlap, geo velocity, and multiple HWIDs. Do not share cookies or download links.