Indicates that a script container is permitted to execute scripts on the client (LocalScript).

Indicates that a script container is permitted to execute scripts on the server (Script).

Grants a script read-write access to instances that live outside its sandboxed container.

Allows a script to use the loadstring() Luau built-in to compile and execute a string as code.

Allows a script to access the shared and _G shared global variable tables.

Allows a script to create new Instance objects using Instance.new().

Guards access to a broad set of general-purpose engine APIs that do not belong to a more specific capability category.

Guards access to audio engine APIs such as Sound, AudioPlayer, and related classes.

Guards access to data store APIs such as DataStoreService and its associated objects.

Guards access to low-level networking APIs such as HttpService.

Guards access to physics engine APIs such as Constraint classes and BasePart physics properties.

Guards access to UI engine APIs such as ScreenGui, Frame, and other GuiObject classes.

Guards access to Constructive Solid Geometry (CSG) APIs such as UnionOperation and NegateOperation.

Guards access to chat engine APIs such as TextChatService and related chat classes.

Guards access to animation engine APIs such as AnimationController and related classes.

Guards access to user input APIs such as UserInputService and ContextActionService.

Guards access to environment and world-setting APIs such as Lighting and Atmosphere.

Guards access to remote event and function APIs such as RemoteEvent and RemoteFunction.

Guards access to the legacy Sound and pre-VoiceChatService.UseAudioApi sound stack APIs.

Guards access to Players service APIs that query or manage connected players.

Guards access to the Instance.Capabilities and Instance.Sandboxed properties that configure script sandboxing.

Mirrors the legacy Plugin permission level, granting access to Studio plugin APIs.

Mirrors the legacy LocalUser permission level, granting access to IDE-only and Studio-level APIs.

Mirrors the legacy WritePlayer permission level, granting the ability to modify player identity properties such as name and UserId.

Mirrors the legacy RobloxScript permission level, granting access to CoreScript APIs.

Mirrors the legacy RobloxEngine permission level, granting access to internal engine-level APIs.

The default capability assigned to API members that have not been explicitly assigned to any other capability category.

Restricts access to non-sensitive APIs that are intentionally kept internal.

Restricts access to APIs callable only from Studio plugin or Open Cloud Luau execution sessions.

Restricts access to APIs that may only be called from Studio Assistant execution contexts.

Restricts access to APIs that are executable only from Studio's RemoteCommandService in Team Create sessions.

Guards access to APIs that read or query asset metadata from the Roblox catalog.

Guards access to asset management APIs such as ContentProvider:PreloadAsync() and encryption-key registration.

Guards access to procedural and AI-driven content generation APIs such as EditableMesh and AvatarCreationService.

Guards access to platform-level avatar editing APIs provided by AvatarEditorService.

Guards access to APIs that create or update published Roblox assets.

Guards access to CaptureService APIs that take screenshots and record video.

Guards access to sensitive user input APIs such as those that can read raw keyboard or mouse data beyond normal game input.

Guards access to in-experience purchase and monetization APIs such as MarketplaceService.

Allows a script to load assets that are owned by the experience's creator using InsertService or require().

Guards access to social APIs such as SocialService, FriendPages, and ExperienceInviteOptions.

Guards access to server-to-server messaging APIs such as MessagingService.

Guards access to LogService and logging-related APIs.

Guards access to APIs that initiate external (non-Roblox) purchase prompts.

Guards access to group-related APIs such as GroupService.

Guards access to teleportation APIs such as TeleportService, TeleportOptions, and TeleportAsyncResult.

Guards access to moderation and player-consequence APIs such as Players:BanAsync() and ModerationService.

Guards access to MaterialService, MaterialVariant, and custom material APIs.

Guards access to APIs that control avatar locomotion and behavior at runtime.

Guards access to APIs that read or modify avatar appearance, such as HumanoidDescription.

Allows a script to require() asset IDs or call InsertService:LoadAsset() for assets not owned by the creator.