Many times when creating, I need to communicate to a server outside of rec room for a game, whether it be a database or a discord bot. Having an API chip would unlock many potentials like, trivia games, chatgpt, multiple instance communication, or just your own database.
However with such a powerful tool it has a drawback:
DDOS attacks:
This is a major concern with dealing with APIs. When sending a request, it sends your computer’s IP address. If this IP address gets in the hands of a malicious creator he can send lots of data to your internet and fill up your bandwith…
Solution?.. A dedicated server could be a solution. (This is also another reason to switch to dedicated servers) Instead of sending the request on the player’s client it would instead open up a small dedicated server that will then send the request and then communicate back to the player, this will send it’s IP to the API instead of the players IP.
I like this solution to that security issue with direct API requests. I also made a post about API requests here before and I’m glad this feature is still in peoples minds.
Having this would open up a world of possibilities!
TOS Change: In order for this to happen rec room needs to change their TOS , because we will be sending data to other servers/databases a tos change will need to be made.
This could be a cool concept, it would be crazy to access ChatGPT or other AI APIs. Of course you would need crazy safeguards for this to be practical. You can do lots of cool things, but also do a lot of not so nice things. If it gets throttled to only support the RR API, the actual usefulness of this isn’t that high anymore. There just isn’t a good way to make sure people don’t do funny things. I suppose they can have a white list for APIs but RR also has limitations to strings and data. Cool concept, not super practical though.