All features
Everything KeyForge offers — script protection, Discord automation, monetization, and platform management.
Script Protection
Secure your Lua scripts with obfuscation, HWID locking, and runtime verification.
Loader generator
Paste source once, get a minified loader that fetches the real script only after key validation.
HWID locking
Keys bind to the executor's hardware ID on first use. No sharing, no leaking.
Auto obfuscation
Toggle per-project obfuscation. The loader serves protected code without extra steps.
Multi-game dispatch
Assign game IDs (PlaceIds) to scripts. Loader auto-picks the right script at runtime.
Two-stage handshake
Nonce-based challenge/response prevents loaders from being called outside the executor.
Kill switch
Disable a project instantly — all active loaders stop serving on the next check.
Key Management
Full lifecycle control over access keys — generate, revoke, expire, and track every key.
Key generation
Create keys manually or in bulk. Set custom durations or make them permanent.
Key types
Manual, Discord-whitelisted, or ad-link earned — each tracked separately.
HWID reset
Users can reset their own HWID lock once. Admins can force-reset any key.
Expiry & revocation
Keys auto-expire or can be manually revoked. Status visible in real time.
Key analytics
See active, expired, revoked, and redeemed counts at a glance.
Redeemed tracking
Know which Discord user redeemed which key and when.
Discord Bot
Full Discord integration — slash commands, access panels, role automation, and multi-bot scaling.
Slash commands
15 commands: /login, /panelsetup, /hostscript, /whitelist, /redeem, /genkey, and more.
Access panel
Post a branded embed with Redeem/Get Role/Get Script/Reset HWID buttons.
Role automation
Auto-assign buyer roles on key redemption. Set manager roles for staff.
Whitelist via Discord
Managers whitelist users directly from Discord — key created, role assigned, loader DM'd.
Multi-bot system
Add unlimited bots to bypass Discord's 100-server limit. Load-balanced invite distribution.
Bot status rotation
Custom rotating status showing server count, panels, scripts, and member counts per bot.
Invite link generation
Admin panel can generate invites for any server the bot is in.
Leave server
Make the bot leave any server directly from the admin panel.
API key auth
Each Discord server links to a KeyForge account via a unique API key — owner-only setup.
DM delivery
Loaders and keys are delivered via Discord DMs automatically.
Monetization
Turn scripts into revenue with ad-gated keys and Stripe payment flows.
Ad-gated keys
Users complete an ad (Linkvertise, LootLabs, custom) to earn a time-limited key.
Custom ad providers
Configure any verification URL template — not locked to one ad network.
Stripe integration
Subscription plans (Starter, Creator, Scale) with Stripe customer portal.
Key duration control
Set how long ad-earned keys last (hours or days).
Claim tracking
Every ad completion is tracked with status: pending → verified → claimed.
Anti-bypass
Ad tokens are verified server-side — no client-side tampering possible.
Dashboard & Analytics
Clean, real-time dashboard with KPIs, tables, and per-project management.
Overview KPIs
Projects, total keys, active keys, and recent activity at a glance.
Project management
Create, edit, enable/disable, and delete projects with nested scripts.
Key tables
Searchable, filterable key lists with status, project, and date columns.
Admin analytics
Platform-wide stats: users, keys generated, handshakes, Discord servers, revenue.
User table
Admin can search users, change plans, reset passwords, and delete accounts.
Discord server dashboard
Per-server view showing linked project, redeemed keys, roles, and setup steps.
Security
Account security, session management, and platform protection.
Two-factor authentication
TOTP authenticator app, email code, or phone (SMS) — enable in Settings.
Password hashing
All passwords are bcrypt-hashed with 12 rounds. Never stored in plain text.
Session management
View and revoke active sessions. Auto-expiry after 30 days.
Email verification
Accounts require verified email before full access.
Forgot password
Email-based reset flow with math CAPTCHA and IP rate limiting.
Admin password reset
Admins can set custom passwords for users directly from the panel.
API key hashing
Discord API keys are hashed before storage — not readable after creation.
Customization
Make the platform yours with theming and branding options.
Theme system
Choose from Midnight (purple), Ocean (blue), or Crimson (red) color presets.
Persistent theme
Theme saves to localStorage and applies instantly across all pages.
Custom panel names
Discord panels can be named anything via /panelsetup name.
Glass morphism UI
Frosted glass cards, smooth animations, gradient text, and dark-mode native design.
Responsive design
Full mobile support — sidebar collapses to drawer, tables scroll horizontally.
Platform & Infrastructure
Built on modern, scalable technology.
Next.js 16
React 19 with App Router, server components, and Turbopack for fast builds.
SQLite / Turso
Local dev with SQLite, production with Turso's distributed libSQL — no cold starts.
Prisma ORM
Type-safe database access with auto-generated migrations.
Discord.js
Gateway-based bot presence with custom status rotation and multi-bot support.
Brevo / SMTP
Transactional emails for verification, 2FA, and password resets.
Ed25519 verification
Discord webhooks verified with tweetnacl — no spoofed interactions.
Vercel / Render
Frontend on Vercel with edge caching. Bot worker on Render for persistent WebSocket.