I realize it's not possible... from the docs : This sandbox means that: You cannot make HTTP Requests (AJAX). You cannot load external scripts or libraries (e.g. jQuery). Looking for some more information on why this is. I realize there are security concerns, but the reason for a true sandbox is to isolate it from other systems, so unless it's not a true sandbox, the only risk would be to the data in the particular game where the script is running. Let the script writer opt-in? If it's not got true isolation on the server-side, then perhaps a compromise would be to allow HTTP calls to AWS Lambda or Azure Functions? Then, we could write whatever additional code we wanted there, without Roll20 having to worry about what might be going on in that code (let Amazon/Microsoft handle the security). I am new to Roll20, but am a software developer and ran into this limitation and feel like it really cuts down on the number of really cool innovations you could do with the API. For example, I was thinking I'd use a weather API for a location that's a real-world analog for my fantasy location and use that to set the weather for the day (rather than rolling on a random table). Or, I could use the Twilio API to be able to send a text message to a player who's gone afk that it's their turn or something. There's an API for everything, so the possibilities are limitless. Apologies if this has already been discussed in depth, but a little searching didn't turn up much that wasn't more than a year old.