RSX · ID
One account.
Everything RSX.
RSX ID is the account you sign in with, the sessions you can end, the accounts you connect, and the keys you issue. It is also a standard OpenID Connect provider, so anything can verify an RSX user without a shared secret. Signup is closed.
Cost
Free
No paid tier exists and none is planned.
Minimum age
16
Matching the Polish digital-consent age. RSX is a developer platform.
Sign-in
OIDC
A standard OpenID Connect provider, not a bespoke scheme.
Links
Three
GitHub and Discord verified through OAuth. Roblox as a stated handle.
Capabilities
What it does.
An identity service is judged on what it refuses, so most of this is about revocation.
01
One account, every service
RSX ID is how you sign in to the CDN, the API, and anything else RSX opens. One identity, one password, one place to revoke access from.
02
Sessions you can see
Every session that is currently signed in, with the device and rough location it came from. End one, or end every other one at once. Changing your password ends them for you.
03
Connected accounts
GitHub and Discord are verified through their own authorisation flows, so a connection is proof rather than a claim. A Roblox handle can be stated but is cosmetic, and is labelled as such.
04
Handles that cannot be sniped
Handles are unique and case-insensitive. Releasing one reserves it for fourteen days, reclaimable only by the person who held it, so changing your name is not an opportunity for somebody to impersonate you.
05
Passwords we cannot read
Stored as salted hashes and never recoverable, including by us. Account recovery issues a one-time reset token; there is no path by which anyone at RSX can tell you your password, because there is nothing to tell.
06
Scoped API keys
Issue a key, give it exactly the scopes it needs, rotate it, revoke it. Keys are stored only as hashes, and scopes mirror the URLs they permit, so what a key can do is readable rather than a matrix to look up.
Surface
Where it lives.
Three addresses. The first is for people, the second for software, and the third is what makes the second verifiable by anyone.
| Address | Serves |
|---|---|
| id.rsx.group | The portal: your profile, your password, your sessions, your connections, and your API keys. |
| api.rsx.group/id/v1 | The API. Registration, sign-in, session refresh, and account management. |
| .well-known/jwks.json | The public keys. Any service can verify an RSX ID token without holding a shared secret. |
Integrating
Standard, so it is
replaceable.
RSX ID issues ES256-signed tokens and publishes its keys, which is the boring option on purpose. An integration built against OpenID Connect is built against a specification rather than against us, and that is the point: a platform worth building on is one you could leave. Conditions for building on it are in the Developer Terms.
- It is not a social account. There is no profile page, no feed, no followers, and no directory of users. A handle exists so people can be referred to, not so they can be browsed.
- It is not required to read. A public CDN link opens for anyone. An account is what you need to publish, not what you need to look.
- One account per person. Accounts cannot be sold, lent, traded, or transferred, and neither can handles.
- Third-party connections are yours to revoke. Linking GitHub or Discord grants RSX only what the authorisation flow asks for, and unlinking stops it. We never receive your password on those platforms.
Rules
What governs it.
An RSX ID is required for anything that publishes, so the account is where enforcement lands: a breach of the Content Policy or the Terms of Service is answered against the account, not only against the file. Accounts are for people aged 16 and over, and what an account holds and how long it is held for is set out in the Privacy Policy.
Report content that breaches the policy to abuse@rsx.group. Challenge an action taken against your account at appeals@rsx.group. RSX ID is operated by RSX under the Whitehill Group banner.