> For the complete documentation index, see [llms.txt](https://lscripts.gitbook.io/lscripts/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://lscripts.gitbook.io/lscripts/introduction/fivem-asset-escrow.md).

# Fivem asset escrow

The paid lscripts resources are protected with the Cfx.re Asset Escrow system. This page explains what that means for you as a server owner.

### What escrow is

Asset Escrow is the official Cfx.re protection system. It lets developers protect their code by preventing others from modifying or accessing certain scripts directly. The core script files are encrypted, the resource still runs normally on your server.

### What is encrypted

Escrow encrypts **Lua, YFT, YDD and YDR** files. Everything else in the package stays as normal files. The user interface is never encrypted, so the whole `html/` folder ships as plain files you can read and restyle.

### What stays open

Developers mark the files that should stay editable with the `escrow_ignore` directive in `fxmanifest.lua`. On lscripts paid resources the open files are the ones a server owner is meant to touch:

* `config.lua` (and `server_config.lua` where a resource has one)
* `locales/*.lua`
* the adapter files, for example `shared/functions.lua`, `client/framework.lua` and `server/framework.lua`
* `sql/*.sql`
* the complete `html/` folder

Everything else, the server and client logic, stays encrypted. Each resource lists its own open files on its installation page under "Which files you can edit".

### How access works

When you buy an escrowed resource through Tebex, the asset is tied to your Cfx.re account. Your server gets the entitlement to run it through your keymaster. In short, the script runs on servers that belong to the account that bought it.

### What your server needs

* Valid keymaster server keys, a server key from [keymaster.fivem.net](https://keymaster.fivem.net) linked to the account that purchased the script.
* The asset granted to that account through the purchase.

{% hint style="warning" %}
If an unauthorized server tries to run the resource it will not start, and the console shows an error stating **"You lack the required entitlement"**. If you see that, make sure the server is running on keys from the Cfx.re account that purchased the script.
{% endhint %}

### Keep the folder name

Do not rename the resource folder. On top of the escrow protection, lscripts scripts check their own name on start and stay inactive when renamed. Use the folder name exactly as it comes out of the download.

### Downloading and updates

Granted assets show up in your Keymaster under granted assets, and through your Tebex account. Updates are pulled the same way and re-uploaded to your server. Every resource also prints a note in the server console when a newer version is out.