Feature Requests

Please check out the following guidelines before suggesting a feature! Off-topic posts will be deleted.
Please increase the group limit. Group Auto Invitations will accelerate this problem.
The maximum number of groups is only 100, or 200 with VRC+. This makes it impossible to adequately join a wide variety of groups—not only major events, but also grassroots events, close-knit friend groups, world announcement groups, affiliation or identity groups, expressions of intent, or even simple joke groups. When joining a new group, you must leave an old one. Because of this limitation, I was forced to leave the NeoWorlds group and the Japan Street neighborhood association group. As a result, I will no longer receive world update notifications, which should also affect store sales and similar metrics. With Group Auto Invitations, event groups will likely push out even more world groups and other types of groups. Please consider the struggles of users who actively use groups and have already reached the limit, rather than focusing on the average number of groups joined per user. ja: グループの上限人数はわずか100、VRC+でも200です。 これは著名なイベントのみならず草の根のイベント、身内の仲良しグループ、ワールドの告知グループ、所属属性、意思表示、単なるジョークなど様々なグループに満足に入ることを不可能にします。 グループに新たにはいるとき、古いグループを抜けなければなりません。 この制限によって私はNeoWorldsグループやJapan Street町内会グループを抜けなければなりませんでした。これでワールドの更新通知が届かないことになり、Store売り上げなどにも影響してくるはずです。 Group Audo Invitationsにより、イベントのグループによってより多くのワールドのグループやその他のグループが押し出されてしまうでしょう。 グループに入っている人数の平均値ではなく、アクティブにグループを使用しており上限に到達して居る人の苦悩を考えて下さい。お願いします。
2
Avatar Performance Versions
This feature request is asking for the ability to upload a secondary "optimized" version of an avatar to the same blueprint ID. Description: Users can already upload their own fallback avatars and even generate impostors, but what if I had a "Very Poor" avatar with a "Medium or better" version? This would mean that I could upload an "unoptimized" version of my avatar with all the bells and whistles, but then I could also upload a Medium or Good version of the avatar that people can opt to see instead of my slower avatar. Technical Details: In the VRCSDK, the user would have an option to upload a "medium or better" version of their avatar on the same blueprint ID. Considers the performance after optimization scripts run. Inherits the existing avatar show system (show, hide, shield), where shield would likely show the Medium or better version if they are hiding Poor/Very Poor. Benefits: Overall instance performance can remain good without needing to hide most avatars. Creates a stronger market for "optimized avatars" or avatar optimization tooling. Improves immersion since you can see more avatars as intended. Has the same drawback as impostors (mismatched state), except it's likely more accurate. Users wouldn't need to change avatars as often, since they can already be in their "event" avatar. It's like the fallback system, but per avatar. Drawbacks: More storage required on VRC's end. Still a chance of avatar state mismatch. Would probably be best combined with a "temporary show" feature for avatars Fallbacks and Imposters already exist which may disincentivize the feature from being made
1
Security: Confirm consent before launching URL from client
During Metafes 2025 and now again during BOOTH Festival, which are both promoted directly by VRChat and are high-traffic worlds, a remote user (likely using a custom client) is able to launch URL's in browser windows or tabs until a user's machine runs out of memory, leading to a DoS on the target. The launched URL's are only the URL's that the world offers to open as part of the normal experience when interacted with approiately. However, affected users will see performance and stability issues within their OS, as well as a possible loss of work if they have open projects which are closed due to low memory availability. I reported the issue privately (helpdesk #630818) on November 2nd and it was finally acknowledged on November 28th. Only acknowledged with no further response. It was being actively exploited at the time of the report. There are no mitigations to this from the VRChat client other than not joining public worlds (which further reduces VRChat's public player base), but they have been informed of the issue and acknowledged receipt of it. I propose that VRChat do one or more of the following: Spawn a pop-up before a URL is launched, asking consent to open it and informing the user that it is actually happening, as otherwise the browser opens in the background without their knowledge. Add setting to turn off URL launching entirely, as the pop-ups can be easily overwhelming. Revoke the ability to launch URL's from the client until the cause of opening them remotely has been identified and fixed. For users: These worlds have the "admin_filter_UrlLauncher" tag, allowing them to open browser windows. If you are aware of a world that has these tags, do not join public instances until the issue has been resolved.
7
Load More