v2.6.1WorkingKeyless
A modern Luau workspace
built for Roblox.
Everything you need to write, explore, and run scripts smoothly. Enjoy Monaco 0.52 editing, instant virtual Luau LSP on every tab, a searchable Script Hub, and seamless one-click injection.
WorkingKeyless
1-- NovaX V2: inject once, execute on any client2local Players = game:GetService("Players")3local LocalPlayer = Players.LocalPlayer4 5loadstring(game:HttpGet("https://raw.githubusercontent.com/EdgeIY/infiniteyield/master/source"))()6print("[NovaX] Hello, " .. LocalPlayer.DisplayName)
Works with Roblox Player, Fishstrap, Bloxstrap and Froststrap. Scripts come from ScriptBlox and RobloxScripts.
Product tour
Built for writing scripts, not just pasting them
A focused, modern workspace designed around how you actually work — write, inspect, and execute without clutter.
Virtual Workspace Luau LSP across every tab
Monaco 0.52 with the NovaX Dark theme, full virtual-workspace Luau LSP diagnostics, and Project Real + Velocity standard library definitions. Works on all open tabs simultaneously without saving to disk first, with tabs + session restore, quick open, and instant pre-execution Check.
Includes: Monaco 0.52 · Virtual LSP (no save required) · Project Real & Velocity API · Check action
-- NovaX V2.6.1 · Virtual Luau LSP & Velocity API
local Players = game:GetService("Players")
local player = Players.LocalPlayer
-- 2D hardware-accelerated drawing library
local line = Drawing.new("Line")
line.Visible = true
line.Color = Color3.fromRGB(139, 124, 255)
line.Thickness = 2Search two script databases at once
ScriptBlox and RobloxScripts, with search, filters, pagination and a light cache. Verified, Key/Keyless, Universal, Patched and Paid badges are shown up front, favorites become Cloud Scripts in your Explorer, and anything opens straight into the editor.
Includes: 2 providers · key badges · favorites · open or run
Inject once, run it on every client
One-click Inject attaches through the in-process Quorum backend with live client detection. Run on all clients or a single target, let AutoExec scripts fire on attach, watch everything in Output, and Kill Roblox without touching Task Manager.
Includes: one-click Inject · live detection · all or one client · Auto-Execute
Multi-account Roblox sign-in with runtime protection
Seamless Roblox profile synchronization with automatic stale cookie purge to prevent 401 rejections, multi-account profile switching, and multi-layered security shielding (runtime process isolation, integrity checks, and sandbox containment) without compromising execution speed.
Includes: multi-profile switcher · anti-401 login · security handler · local sandbox
Real asynchronous subsystem startup with pre-warming
The splash screen is an active, multi-threaded startup pipeline. Luau LSP, Monaco 0.52.2 AMD bundles, language grammars, preferences, and local workspaces are pre-warmed and compiled in the background before the window is revealed — eliminating UI freeze, cold-start latency, and tab opening lag.
Includes: asynchronous pipeline · Monaco 0.52 pre-warming · parallel workspace indexing · 0ms tab delay
In-place atomic hot-swap with DLL lock protection
NovaX updates itself directly inside the app with zero manual file transfers. Releases are verified against strict SHA-256 and byte length pins before extraction, while smart Windows rename semantics protect against DLL sharing-violation locks with automatic .old backup recovery.
Includes: in-place self-apply · SHA-256 & byte validation · DLL lock protection · loop guard
Monaco Editor 0.52.2
High-performance editor with NovaX Dark theme, folding, IntelliSense, tabs + session restore.
Virtual Workspace LSP
Live Luau LSP diagnostics & autocomplete across all open tabs simultaneously without saving to disk.
Project Real & Velocity API
Full global definitions for 2D Drawing, closures & metamethod hooks, crypt, and WebSocket streams.
Script Hub & Cloud
ScriptBlox + RobloxScripts search, verified key badges, and one-click favorites as Cloud Scripts.
Auto-Execute Engine
Flag any script in Explorer and it executes automatically on every future client attach.
Client Manager
Download, launch, and detect Roblox Player, Fishstrap, Bloxstrap and Froststrap in one tab.
Live Subsystem Boot
Multi-threaded background startup pipeline pre-warming Monaco, Luau LSP, and indexing workspaces in parallel.
In-Place Auto-Update
Atomic background self-apply with SHA-256 integrity, .old backup hot-swap, and Windows lock immunity.
Modernized Workspace
Revamped Problems, Output & Console with TitleCase tabs, error counters & steady navigation.
Core Security Guard
Multi-layered runtime execution monitoring, process integrity validation, and strict filesystem sandboxing.
Gateway & Cloud Shield
Sliding window rate limiters on distribution APIs, automated temporary mitigation, and exploit probe defense.
Theming & Zero Emojis
9 built-in themes, live Custom CSS, video backgrounds, and 100% crisp vector SVG icons.
Execution runtime
Attach, execute, inspect
A direct in-process Quorum backend with zero middlemen. Attach in one click, then enjoy complete control over every running client.
Direct backend
x64 UI calling the client API in-process, sync work kept off the UI thread.
Targeted execution
Run on all attached clients or a single session, with live attach states.
Observable
Output watcher with filters and search, Problems view, rotating error log.
1 · InjectAttach to every Roblox client, or pick one target.2 · ExecuteRun the open script, or let AutoExec fire on attach.3 · InspectOutput, Problems and the error log show exactly what happened.Hub to editorOpen any Hub result straight into a tab, or save it as a Cloud Script.Check firstVerify a script with luau-lsp diagnostics before it ever executes.Kill switchKill Roblox from Settings or Clients. No Task Manager needed.Async bootSplash pre-warms Monaco & Luau LSP with 0ms UI lag.In-place swapSelf-applies releases with SHA-256 integrity & DLL lock safety.Security shieldMulti-tier sliding window rate limiter protects endpoints.Customization
Make it yours, then share it
Nine one-click themes, ten live color tokens, local image and video backdrops, per-area motion — and a real Custom CSS editor with validation and Safe Mode. Everything applies instantly, nothing needs a restart.
NovaX DarkDark base · violet accentMidnightBlue-black base · violet accentAbyssBlue-black base · blue accentForestDark base · green accentEmberDark base · amber accentRoséDark base · pink accentGlacierBlue-black base · cyan accentDaybreakLight base · blue accentMeadowLight base · green accentCustom themes
Save the current look, duplicate and rename, export and import .theme.json files. Ten color tokens with per-token reset.
Backgrounds & fonts
Local image or video backdrops — opacity, blur, veil, scope, pause-when-unfocused. Custom font files plus separate editor typography.
Motion & Custom CSS
Five animation presets with per-area multipliers that honor reduced-motion. A validated live stylesheet with Safe Mode.
/* Settings → Customization → Custom Styles, then Preview */
:root {
--nx-accent: #5b9cff;
--nx-r-md: 12px;
}
Full guide with copy-paste examples: Custom CSS docs →
Clear comparison
Why players switch to NovaX V2
The essentials side by side: backend, workspace features, and access.
| Feature / Quality | NovaX V2 | Other free tools |
|---|---|---|
| Backend | Direct, in-process | Host process + pipes |
| Editor | Monaco + real luau-lsp | Plain textbox, no diagnostics |
| Script Hub | 2 providers + favorites | Manual copy-paste |
| Auto-Execute | Scripts run on attach | Re-paste every session |
| Startup & Boot | Async boot + pre-warmed Monaco | Synchronous UI freezes & cold lags |
| Auto-Update | In-place hot-swap · SHA-256 integrity | Manual installer re-runs / broken files |
| Security & Shield | Active security handler · runtime isolation | Unshielded process / easily dumped |
| Client installs | Player · Fishstrap · Bloxstrap · Froststrap | Bring your own client |
| Theming | 9 themes · live CSS · video backgrounds | Fixed dark theme |
| Price | 100% free, no keys | Key links / paywalled tiers |
Pricing
Free forever. No keys, no catches.
NovaX is 100% free. No keys, no ad-link checkpoints, and no locked features. Every tool in the workspace is ready the moment you open it.
$0 / forever
Full workspace, one download, zero catches.
- Attach + execute on any client
- Script Hub, both providers
- AutoExec + Cloud Scripts
- Client installs + sessions
- 9 themes + custom CSS, keybinds
- No keys, no key links, ever
Discord / support
Updates, scripts, and help in one place.
- Update announcements
- Script sharing
- Setup & troubleshooting
- Feature requests
Guides
Read this before you inject
Installation
Run the Bootstrapper, clear the AV exclusion, launch as admin. Full walkthrough in the docs.
Read guide 02Attach & execute
Open Roblox, hit Inject, pick all clients or one target, then Execute. Flag repeats as AutoExec.
See the editor 03Clients & fixes
Installs auto-detect, even per-user ones. Locate install covers custom paths; logs and Kill Roblox the rest.
Fix issues 04Custom CSS
Validated live stylesheet, :root tokens that beat the theme, Safe Mode, and copy-paste examples.
Style itGet NovaX
Download the Bootstrapper
A small launcher for Windows 10 and 11. It pulls the ~11 MB build, verifies it, and re-checks for updates every time you run it.
- 1. Download and run the Bootstrapper. It pulls NovaX (~11 MB) and verifies every file.
- 2. Add the NovaX folder to antivirus exclusions (injectors always trip generic "GameHack" flags).
- 3. Launch NovaX as administrator, open Roblox, hit Inject, pick a target and Execute.
System requirements
- Windows 10 / 11 (x64)
- Internet for the first download
- Administrator rights for attach
- WebView2 runtime (auto-prompt)
What the Bootstrapper fetches
NovaX.exe+QuorumAPI.dll- Injector + decompiler binaries
- Embedded UI + Monaco bundle
luau-lspdiagnostics
Have questions?
Frequently asked questions
Install & setup
Yes. There is no key system, no key links, no tiers and no locked features. Attach, execute, the Hub, AutoExec and theming are all unlocked.
You never download NovaX itself. The Bootstrapper is a small launcher: it downloads the latest V2.6.1 build (~11 MB), verifies the files, and re-checks for updates every time you run it. The app itself also auto-updates (silent download, in-place install), and the launcher updates its own binary the same quiet way — so after the first install you may never need this page again. To force it, just run the Bootstrapper again.
NovaX automatically detects new releases in the background, downloads the verified payload, and confirms its SHA-256 hash and byte length before touching any files. It then performs an atomic hot-swap using Windows rename semantics (saving a temporary .old backup), bypassing Windows DLL file locks without requiring the launcher to run.
Instead of a superficial delay, the splash screen runs an active, asynchronous background initialization pipeline. It compiles Monaco 0.52.2 editor grammars in advance, mounts Luau LSP definitions, scans local workspace files, and detects Roblox environments in parallel so that when the main workspace opens, everything responds immediately with zero UI stutter.
It injects script code into the game process, so antiviruses generically flag any injector as "GameHack". That is the standard false positive for this category. Add the NovaX folder to exclusions.
Attaching to the Roblox process requires elevation. The app manifest requests it, so expect a UAC prompt on launch. Without admin, Inject cannot attach.
Running scripts
Roblox Player, Fishstrap, Bloxstrap and Froststrap. The Clients tab downloads, launches and detects all four, including per-user installs via AppData, Program Files and the registry. "Locate install" is only for truly custom locations.
Attaching is one click on Inject. There is no background auto-attach. AutoExec is the reverse: scripts you flag in Explorer run automatically every time you attach.
ScriptBlox and RobloxScripts, searched live inside the app. Verified, Key/Keyless, Universal, Patched and Paid badges come straight from the providers, and favorites sync into Explorer as Cloud Scripts.
Customize
Open Settings, then Customization, then Custom Styles. Paste your CSS, hit Preview to validate and apply it live, and flip on Enable Custom Styles. Scripts, remote imports and unbalanced braces are rejected before they can break the shell, and Safe Mode suspends the stylesheet without deleting it.
Yes. Save the current look as a custom theme, then export it as a .theme.json file and send it to anyone. They import it from the same Themes section. Nine built-ins ship with the app: Dark, Midnight, Abyss, Forest, Ember, Rosé, Glacier, Daybreak and Meadow.
No questions match that search. Try a different word.
What's new
NovaX V2.6.1 changelog
Every rewrite, in order. Click a release to expand or collapse it.
v2.6.1currentSecurity Handler, Runtime Protection & Stability Refinements
Enhanced runtime process monitoring, handle verification routines, and proactive execution safety checks across all NovaX subsystems.
Strengthened multi-vector background integrity checks, active thread protection, and runtime isolation barriers ensuring stable execution.
Refined API rate regulation, dynamic cryptographic handshake verification, and enhanced gateway shield against automated burst traffic.
Optimized internal lifecycle management and resource cleanup during high-frequency client attach cycles.
v2.6.0stableLive Subsystem Boot, Auto-Update Self-Apply & Performance
Splash screen actively runs background initialization for Luau LSP, Monaco Editor grammars, preferences, themes, and Roblox environment discovery in parallel.
Fixed double-slash path normalization boundary bug in Bridge self-apply, enabling seamless background update extraction directly into the app directory without launcher dependencies.
Smart rename-aside mechanism catches Windows sharing-violation locks on mapped WebView2 and runtime DLLs, guaranteeing smooth launcher-driven updates.
Monaco AMD bundle, Luau grammars, and autocomplete engines are compiled in advance during boot, making the Editor tab open instantly without frame drops.
Balanced 5 to 7 second boot progress ensures complete diagnostic readiness, status transparency, and zero UI stuttering.
v2.5.9stableGateway Shield, Runtime Protection & Security Hardening
Sliding window rate limiter enforcing burst thresholds and sustained volume limits with automated temporary mitigation for abusive traffic on distribution APIs.
Eliminated static credentials: HMAC update authentication keys and handshakes are derived dynamically in-memory using runtime bitwise masking.
Proprietary runtime handle validation that detects unauthorized foreign process attachment, memory dumpers, and active inspection engines.
Real-time filtering of automated scanners, suspicious request patterns, directory traversal probes, and sensitive URI queries.
Hardened loading screen update orchestrator with a stateful attempt counter, preventing infinite restart loops during silent and mandatory background releases.
Harmonized cryptographic binary pins, zero-click portable install fallback, and update enforcement across distribution channels.
v2.5.8stableBrand, Windows Integration & About Modal
Ultra-crisp SVG vector monogram scaled to a bold 68% with a 1.2px glass border and dedicated violet glow, eliminating pixelation and micro-rendering artifacts across dark themes.
Native multi-layer Windows ICO package embedding 16x16, 24x24, 32x32, 48x48, 64x64, 128x128, and 256x256 bicubic resolutions for Windows Explorer, Taskbar, and Alt+Tab.
The Bootstrapper auto-registers NovaX in the Windows Start Menu and Desktop, enabling instant indexing in Windows Search ("NovaX") with uninstaller registry alignment.
Rebuilt About dialog featuring a glass brand hero badge, a 3-column system specs grid (Architecture, Environment, Build Date), an interactive Official Website card, and a dedicated external launch button.
Updated C# security host allow-list to safely permit direct external browser dispatch to official NovaX web endpoints (getnovaxv2.vercel.app).
Upgraded launcher with mandatory update synchronization, zero-click portable install fallback, and SHA-256 asset integrity verification.
v2.5.7stableBinary Protection, LSP & UI
Multi-layered symbol encryption, string virtualization, and metadata stripping applied to production builds, thwarting decompilation.
Language server process bound directly to Windows Win32 Job Object API with automatic lifecycle limits. Clean child process reclamation when NovaX exits.
Background LSP analysis runs at BelowNormal CPU priority so editing and Roblox stay at 60fps. Adaptive debounce tunes response from 260ms for small scripts up to 550ms for 50KB+ files, preventing CPU thrashing.
Strict executable path validation enforces authentic language server binaries, stdio message guard thwarts memory DoS, and closed document tombstones are capped at 50 entries to eliminate leaks.
Both NovaX and the Bootstrapper feature an ultra-clean 1.5px laser neon Border Beam revolving smoothly around the squircle logo with graceful status transitions and perfected rounded corners.
High-resolution authentic branding for Bloxstrap, Fishstrap, Froststrap, and transparent-background Voidstrap, giving the Roblox tab a pristine, realistic look.
Dedicated popup filter interface for multi-criteria script discovery with direct execution dispatch, alongside polished panel toggles and icon animations.
Serverless anti-abuse filters, in-memory sliding window rate regulation per IP on all distribution endpoints, and hardened Content Security Policy and HSTS headers.
v2.5.6stableLSP, UI & Security
Live Luau diagnostics, type checking, and autocomplete across all open tabs simultaneously without saving to disk first. In-memory virtual filesystem synchronization directly to luau-lsp.
Complete standard library definitions matching Project Real and Velocity: 2D Drawing library, closure and metamethod hooks, cryptographic hashes & ciphers (base64, lz4, AES), WebSocket connections, and console streams with Monaco autocomplete.
Modernized Problems, Output, and Console tabs with sleek TitleCase typography, crisp SVG icons, live diagnostic count badges, and smooth animated active underline indicators matching the editor tabs.
Added tab re-click guards across the sidebar rail, Script Hub mini-tabs, editor script tabs, and bottom panels, preventing screen flashes and re-running entrance animations on already active views.
Refined Start overlay with horizontal recent script cards, quick action buttons, polished tab close icons, smooth transitions, and softened styling with exaggerated neon glows eliminated.
High-contrast execution log and output buffer with log routing, clear filtering, auto-scroll, and streamlined management for Local Scripts, Cloud Scripts, and Auto-Execute.
Automatic pre-login cookie reset and session pre-close verification to eliminate false HTTP 401 rejections during 2FA/CAPTCHA challenges, with instant multi-account profile switching and avatar display.
Multi-tiered runtime execution checks, worker thread protection, strict FileServer sandbox path containment, and HTTP security headers.
Audited and replaced all emoji glyphs across the NovaX UI and documentation with clean, high-resolution vector SVG icons for a professional dark workspace feel.
v2.5.5stableAttach Fix
Attach rewritten per client: the broadcast call wedged on live builds, so every observed client is now attached directly with per-target truth.
Attach and kill budgets raised above the backend's own timeouts — no more false timeout toasts while the backend is still working.
With auto update on, new releases download themselves at launch with no prompt, install in place without the launcher, and concurrent downloads are refused instead of colliding.
v2.5.0stableFull rewrite
Every screen rebuilt on the new workspace shell: Overview, Editor, Scripts, Roblox and Settings share one design system.
Direct in-process client API with worker-thread calls. No host process, no pipes, no middlemen.
This site: new layout, a live app preview, install docs and release notes that match the build.
Reliable installs and updates with download verification on every run. Re-run it to update, nothing else to do.
ScriptBlox plus RobloxScripts over its public v1 API, with search-as-you-type, filters, favorites, request cancellation, duplicate suppression and a bounded cache.
Auto-detects installs including per-user folders, registry and protocol entries. Roblox, Fishstrap, Bloxstrap and Froststrap cards with version selectors, downloads with progress, launch, one-click Attach and an always-available Kill switch.
Full Roblox Player deployments (Latest or Previous) fetched through the Weao/RDD pipeline into NovaX's own folder. The stock client is never touched.
Connect once in the embedded browser and your username and avatar show in Overview and Roblox. Your password is never seen or stored.
One-click Inject, per-client or all-client targets, live instance detection of running RobloxPlayerBeta processes and a clean Kill switch.
Flagged scripts run on attach, Check verifies with luau-lsp before anything executes, and favorites sync as Cloud Scripts.
Luau language server diagnostics on saved and unsaved scripts alike, surfaced live in the Problems view.
v2.0.0First light
The V2 line starts here: a clean break from everything that came before it.
A new dark workspace with an editor-first layout built on a shared design system.
A new client backend API underneath the rewritten interface.
No legacy code carried over. V2 starts fresh.
Download NovaX V2.6.1
Grab the Bootstrapper. It installs NovaX, updates it, and never asks for a key.