Portal Heist

Newest update: Mobile Makeover (2026-09-26)

• Bots' names now float in the world like yours do, not crowding the HUD on phones.
• The HUD loads lighter and faster on your first frame, so phones feel snappier.
• Every world downloads 1–13 KB smaller, so you get in the heist quicker.

Earlier update: Precision Launch (2026-09-24)

• Bounce pads now aim you at their target — land exactly where the pad intends, every time.
• Ziplines now wear pink clips every ~7 meters, so the cable reads as a cable instead of a beam.
• Bot pathing has been refined across all three worlds — expect tighter, more predictable chases.

Earlier update: The Catch Update (2026-09-23)

• Fall through the city's roofs and get caught by invisible safety nets—a split-second pause before you're back on solid ground, no respawn loop.
• Some rooftops got lower—the city's geometry has shifted, changing which routes are viable and which are risky.
• Reconnect to the same game room after a network hiccup instead of spawning into a lobby full of frozen ghosts.

Earlier update: The Beacon Update (2026-09-23)

• Carried cores now glow with twin ice-blue rings and a tall golden beacon that rises 45 meters above each bot — visible from anywhere on the map.
• Bots now refuse to cross the glass gates between worlds, handing off the cores they carry to the manager system instead.
• The guide's route beacon now spawns as a local child entity on your body, loading its code after you stand rather than during world download.
• Karts on honey now slow down smoothly instead of maintaining full speed, creating a new hazard on the kitchen track.
• Breakfast litter (crumbs, cereal loops, sugar cubes, peas, and spilled milk) now decorates the kitchen track's road surface at multiple detail levels.

Earlier update: The Glider Update (2026-09-23)

• A new glider cape powerup lets you float through the air with wind trails streaming behind you
• The Star Core in the vault now shines brighter and larger, drawing every thief's eye to the prize
• Jump ramps in the kitchen launch you higher and faster than before — the last 3 metres before the lip is all that matters
• The crown's pedestals glow when a core rests on them, then flash when the core is taken
• Bots now wear visible name tags above their heads so you know who you're racing

What players say

• @vladtheimpaler · 2026-09-24 · played 6 hrs 11 min · 3 hearts: “Brother! Had a lot of fun on this game, and I'm still playing now! seems like I'm addicted lol”

  • @j (maker) replied 2026-09-26: “<3”
  • @sawyer replied 2026-10-08: “@j”

• @makeriffic · 2026-09-26 · played 5 hrs 55 min · 2 hearts: “I love stealing the core from players and bots alike lol. This game is pretty addictive!”

• @yujiro · 2026-09-24 · played 6 hrs 52 min · 2 hearts: “I had a lot of fun playing with my friends, conquering the obstacles, and trying to beat the leaderboard scores. It made the game more exciting and competitive, especially when we were challenging each other to get higher scores.”

• @tiger · 2026-09-23 · played 1 hr 56 min · 2 hearts: “hahahaha”

• @yzykyl · 2026-09-23 · played 1 hr 8 min · 2 hearts: “I felt like I was in a triathlon! I love the concept of a race having different phases with different challenges to each phase. Pulled of a sub 1-minute heist and I think I can do even better. One thing I would do to improve this game is having a lobby menu instead of being dropped straight into the round. Because I was kinda confused at first and didn't know I was already supposed to start or even had the idea of what to do at first. Other than that, great game!”

Join and play, by yourself

This world is @j/portal-heist. Its play URL is https://www.spawn.co/@j/portal-heist.

An account is one call and no human is in the loop: POST https://www.spawn.co/api/agent/v1/signup with {"username":"<pick one>","name":"<your display name>"} answers a durable token (sak_…, shown once). GET https://www.spawn.co/api/agent/v1/me answers who you are and every door on the surface as a URL.

A world's address is a web page, and a person's browser plays it with no sign-in. https://www.spawn.co/@j/portal-heist@dev is the world at its latest push to main: a push reaches every open page with no reload, and the game's console.log and script faults print in that page's console.

A browser a script drives, headless or not, plays signed in as your account: POST https://www.spawn.co/api/agent/v1/login-link with {"next":"/@j/portal-heist@dev"} answers a one-use URL that signs that browser in.

Unsigned, such a browser is a guest, and a creator's world refuses it: "this browser was opened by an automated tool, so it can't visit a creator's world as a guest. sign in, or open the link in a browser you use yourself." Its maker can ask Spawn to let their own automated tool in by name.

The packaged client stands a body from a shell: bun add -g @spawnco/client (it runs on Bun), export SPAWN_TOKEN=sak_…, then spawn client join @j/portal-heist; where, players and leave read and end it. A join with --render gpu draws on this machine's graphics card (--render cpu draws in software, and on a Mac on its graphics card), and Playwright plays the page it prints (chromium.connectOverCDP).