Documentation

Overview

F.I.S.H (Fully Integrated Service Hub) is a subscription tool for trading Roblox limited items. It watches the market, values items, scores incoming trade offers, builds counters to weak offers, posts and rotates trade ads, and keeps a log of why it did each thing. It always works inside limits you set.

What it does

1. Observes the market.
2. Values items better than a single price source can.
3. Advertises what you want to move.
4. Judges every inbound trade.
5. Negotiates with counters.
6. Executes accepts, declines and sends, on your PC.
7. Protects the account and inventory.
8. Learns from results.

What it will not do

• Promise or guarantee returns.
• Buy or sell Robux or items for real money outside Roblox.
• Try to dodge Roblox's detection. It stays slow and human-paced instead.
• Touch anyone else's account.

How it works

F.I.S.H is split in two so that the valuable logic and the sensitive secret never sit together.

The server decides, the client verifies and executes. The client never blindly obeys: it checks every instruction before acting.

Parts of the system

Autonomy levels

F.I.S.H never jumps straight to autopilot. It earns each level from evidence in your own logs.

Moving up

• L0 to L1: about two weeks of logs that match your own judgement.
• L1 to L2: two weeks of profitable recommendations.
• L2 to L3: 100 approved actions with no vetoes needed.
• L3 to L4: 30 days of positive results with no Risk Guard incident.

Moving down, automatically

• Two losing days in a row beyond the loss cap.
• Market data older than 15 minutes pauses everything.
• An unexpected API response pauses and alerts.
• A login challenge, 2FA prompt or HTTP 401 or 403 trips the kill switch.

F.I.S.H ships at L0 and never starts above L2 on a main account.

Safety limits

Limits are enforced on your PC. Defaults are conservative. You can lower them freely. Raising one above the plan ceiling needs a warning and takes effect after 24 hours.

Risk Guard

Every proposed action passes through Risk Guard and comes out as allow, escalate (ask you) or deny. In order, it checks: the kill switch, whether data is fresh and login is healthy, whether the action touches a protected item, whether it is inside your caps, and whether your autonomy level allows it to run alone.

Kill switch

Stops everything immediately. It trips when you press it, when Roblox shows a login challenge, 2FA request or 401 or 403, when items disappear that F.I.S.H did not trade, on repeated Roblox errors that suggest a restriction, or when the daily loss cap is hit twice in a row. After a kill, queues are cleared, nothing resumes until you resume it, and it restarts at L2.

Etiquette limits

• At most one outbound trade per person per 24 hours.
• At most two counter rounds per person per day.
• It backs off from anyone who has declined three times.

Approvals and alerts

You get alerts and approval requests in your own private Discord server. Each approval request shows the trade, the checks that passed and the reason it needs you.

• Approvals expire, by default after five minutes, because market data moves fast. Expired means rejected.
• An approval is permission to try. The trade is re-read and re-checked first.
• Only your own whitelisted Discord account can approve.
• Alerts never contain cookies, tokens or full API responses.
• Level can be lowered from Discord at any time, but never raised above L2 remotely.

Scams it checks for

A trading bot is a big target, so every offer is checked against known patterns. A hit is declined or sent to you.

• Projected bait: an item with an inflated recent average offered as an overpay.
• Hype dumps: an item pumped by hype that is about to fall.
• Lookalike items: similar name or thumbnail, cheaper item. Items are matched by ID, never by name or picture.
• Bait and switch: a trade edited after evaluation. The trade is re-read right before acting.
• Stale-data exploits: acting just after a price move F.I.S.H has not seen yet.
• New or burner accounts offering great deals.
• Probing: many similar offers to find the thresholds.
• Phishing outside the trade: chat messages asking for your cookie or to run a script. F.I.S.H ignores all chat.

An offer that looks too good to be true raises review, not excitement.

Account and cookie security

Your Roblox session cookie is like a password. Whoever has it is you. F.I.S.H is designed so that a stolen file is useless and our server never holds your cookie.

Two-part key

• Your cookie is encrypted on your PC.
• The key is split: one half is bound to your device, the other is held only by our server.
• A disk file alone is useless. Our server alone is useless too, because it holds neither the cookie nor the encrypted file.
• If a licence or device is revoked, the server stops releasing its half and the stored cookie can no longer be decrypted.

What you should do

• Use a dedicated session for F.I.S.H, not your browser's, so you can revoke it without logging out of everything.
• Start on an alt account.
• Turn on Roblox 2-step verification.
• Do not run free scripts or executors on the same PC.

Client and server

The client and server talk over one encrypted connection, with the server's public key and certificate pinned in the client. Every instruction from the server is signed, numbered and short-lived.

The client acts only if every check passes: the signature is valid and the instruction is fresh and not replayed, your autonomy level allows it, your local limits allow it, the items are still yours and unreserved, the trade just re-read from Roblox still matches what the server judged, and the kill switch is off. A buggy or malicious server therefore cannot exceed your limits or act on stale data.

• Offline: with no connection the client trades nothing and keeps retrying with backoff.
• Data minimization: the server receives only what it needs to decide.

Licensing

Pricing is not decided yet. This is the planned shape.

• A monthly subscription, with no profit share.
• Plans (Observe, Trader, Pro) gate which autonomy levels are available. Nobody starts at full auto.
• One licence per Roblox user ID and device, with one session at a time and a limited number of device changes each month.
• Licence states: trial, active, past due, suspended, cancelled, revoked, expired. Keys are only released for trial and active licences, plus a short grace period.
• Seats are capped, so there is a waitlist.

Glossary

Legal and risk

• Roblox's rules: automation and unofficial tools can break Roblox's Terms of Use. An account can be moderated or terminated. Try an alt account first.
• No affiliation: F.I.S.H is not affiliated with, endorsed by or sponsored by Roblox Corporation.
• Waitlist data: if you join the waitlist we store your Roblox username and email to invite you, and for nothing else.
• Minimum age: not decided yet. Terms of service, a risk disclosure, a privacy policy and a refund policy will be published before launch.

What is not ready yet