Safety, Addon Security and ArenaNet Policy
Updated 21 October, 2026
Addons run inside Guild Wars 2, on your computer, with the same access as the game itself. That is what makes them powerful, and it is also why it is worth knowing where they come from, what they are allowed to do under ArenaNet's rules, and how Nexus and the addon library help you make informed decisions. This guide covers all three.
Nexus is developed by Raidcore, the team behind this site. Nexus and Raidcore are not affiliated with, endorsed or supported by ArenaNet or NCSOFT.
Are addons allowed?
ArenaNet does not officially support any third-party programs, and using them is at your own risk. Its Third-Party Programs policy describes what is tolerated. In broad terms, programs that improve the interface, display information in a different way or offer quality-of-life features are acceptable, as long as they do not:
- automate gameplay, for example by botting or performing several actions with a single key press,
- give you an unfair advantage over other players,
- reveal information the game does not normally provide to you, or
- harm other players or the game itself.
Macros have their own rules in the Macros and Macro Use policy. The short version: one key press may result in one game action. You are responsible for how you use any tool, including macros you record yourself.
These policies are ArenaNet's to define and can change. Their official wording always takes precedence over any summary, including this one.
What Nexus does and does not do
Nexus is an addon host. It loads addons, keeps them up to date and gives them shared services such as keybinds, settings and an interface. It does not include gameplay automation or features that give an advantage in combat. Its source code is publicly available, so anyone can verify what it does.
To work, Nexus contacts a few services on the internet:
| Address | Purpose |
|---|---|
api.raidcore.gg |
Checking for Nexus updates and loading the addon library. |
api.github.com, github.com |
Downloading Nexus and addon updates from their GitHub releases. |
assetcdn.101.arenanetworks.com |
Reading the current game build, to know when the game has been updated. |
| Addon developers' own servers | Updates for addons that are not hosted on GitHub. |
Nexus never asks for your account password or a GW2 API key. Individual addons may ask for an API key to offer their features, see below.
The Nexus addon library
The addon library is the list of addons you can install from within Nexus. Addons are reviewed before they are listed, and every addon is described by what it does, so you can decide whether you are comfortable with it. The rules are part of the Raidcore Addon Policy. Addons can carry these labels:
| Label | Meaning |
|---|---|
| No label | The addon only uses official interfaces, such as MumbleLink and the official API, and the services Nexus provides. |
| Accesses Game Memory | The addon reads or changes game memory, but only in ways that comply with ArenaNet's policies, for example to present information you can already see in a different way or to improve accessibility. Combat meters fall into this group. |
| Uses Macros | The addon includes or supports macros. Built-in macros must comply with the macro policy, and you are responsible for any macros you record yourself. |
| Uses Generative AI | Parts of the code or content were created with AI assistance. This is a transparency note, not a judgement about quality. |
In the game, addons that access game memory or use macros are marked with a tier icon in the library. Hover over it for details. Addons you installed manually that are not part of the library are marked as unclassified, which means nobody has reviewed them against the policy.
If an addon changes its behavior in a way that would change its classification without asking its users first, it is removed from the library and blocked from loading until the matter is resolved.
Staying safe
Only install addons from sources you trust
An addon is a program. A malicious one could read your files or install other software, just like any other program you download. To protect yourself:
- Prefer the Nexus library. Updates then come directly from each developer's official release page.
- For addons outside the library, download them from the developer's own website or repository, not from re-uploads, file-sharing sites or links in chat.
- Be wary of addons that promise features ArenaNet's policy does not allow. They put your account at risk, and they are a common disguise for malware.
- Open source code is a good sign but no guarantee. The developer's reputation in the community matters as well.
API keys
Some addons use the official GW2 API to show account information, for example achievements or your wallet. They ask you for an API key, which you create on your ArenaNet account page. Create a separate key for each addon, grant only the permissions it actually needs, and delete keys you no longer use. An API key never gives access to your password and cannot be used to log in.
Your account
Never enter your account password or authenticator codes into an addon. No legitimate addon needs them.
Reporting a problematic addon
If you believe an addon in the library breaks the rules, behaves maliciously or differs from its description, report it on the Raidcore Discord. Include the addon's name, its version and what you observed.