Get started

Quickstart

A working install in under ten minutes. The walkthrough assumes you have shell access to your FiveM server and the dashboard open in another tab.

Before you start

  • FiveM artifact build 5500 or newer (older builds will refuse a few of the native guards).
  • Outbound TCP/443 from your server to api.hoaxeye.net.
  • An account on the dashboard with at least one server slot.

1. Issue an API key

1

Create the key

Open the dashboard, pick the server you want to protect, and use Settings → API keys → Create. Give it a memorable label (e.g. prod-eu-west) and store the value somewhere safe — it's shown once.

2. Drop in the resource

2

Place the folder

Copy the hoaxeye resource folder you received with your key into resources/[standalone]/hoaxeye. Don't rename the folder — the resource name is referenced inside.

3. Ensure it in server.cfg

3

Wire it up

Add a single line to your server.cfg, typically near the top of the resource list so it boots before scripted gameplay loads.

server.cfgBASH
# server.cfg
ensure hoaxeye

4. Point the resource at your key

4

Edit config.lua

Open resources/[standalone]/hoaxeye/config.lua and set the API key. Other defaults are safe — leave them alone for the first run.

config.luaLUA
-- config.lua
Config = Config or {}
Config.ApiKey      = "hx_live_…"  -- from the dashboard
Config.Enforcement = "observe"     -- start in observe mode for the first 24h

Starting in observe mode means hoaxeye only logs verdicts; nothing kicks players. After a day of clean logs you can flip individual detections to score or enforce.

5. Restart and test

5

Verify the connect path

Restart the server (or refresh; ensure hoaxeye). Connect once with your own client. Within ~5 seconds the dashboard's Recent detectionsfeed should show the join with a verdict (most likely cleared).

If you don't see anything, check the server console for a one-line warning from hoaxeye — it usually indicates an unreachable API or an invalid key.

Next steps

  • Server setup — resource whitelist, performance tuning, Discord verify hookup.
  • Detection families — what each family does, what verdicts it emits.
  • FAQ — appeal a false positive, request a whitelist entry.