Documentation

What is StormAC?

StormAC is a server-authoritative anti-cheat and security platform for FiveM. All critical decisions (detection, threat scoring, punishment) run on the server. The client sends signals; the server validates and acts. Events are whitelisted and rate-limited. Weapons, damage, entities, and explosions are monitored. Suspicious behaviour is scored and can trigger warnings, kicks, or bans, with logs and optional screenshot evidence.

You manage everything from the web dashboard: detection sensitivity, punishment rules, config sync, bans, logs, and webhooks.

Getting started

1. Register at the panel and verify your account.
2. Purchase a license from the Pricing page (Tebex Pay or Wallet Address / Discord).
3. Redeem your license in the dashboard under Redeem — you will see your API Key and License Key.
4. Download the resource from the dashboard Download page. Enter your API Key and License Key so the generated ZIP includes your config.
5. Install on the server: extract the ZIP and place stormanticheat and stormac_guard into your FiveM resources/ folder. Add ensure stormanticheat and ensure stormac_guard to server.cfg.
6. Restart the server. In the console you should see License validated successfully!.

Dashboard overview

• Dashboard — Overview: servers, detections, recent activity.
• Download — Get the StormAC resource ZIP (with optional API/License keys baked into config).
• Redeem — Activate license keys and view your API Key and License Key.
• Servers — List of registered servers; click a server for details.
• Per-server: Configuration (sync from panel), Console (run commands), Logs, Bans, Players, Health (CPU/RAM/FPS), Lookup, Map, Stream, Admins.
• API Keys — Create and manage API keys for the resource and integrations.
• Webhooks — Discord webhooks for detections, bans, connections, etc.
• Ban stats — Ban statistics.
• Settings → Security — 2FA, password.

Configuration

Server configuration is edited in the dashboard under Server → Configuration. The resource pulls this config on an interval (e.g. every 60 seconds). You can tune detection modules (speed, teleport, godmode, noclip, event protection, weapon/damage, entity/explosion), punishment actions (warn, kick, ban), threat thresholds, and in-game menu options. Export/import JSON is available.

Detections and bans

Detections are based on server-side analysis and optional client signals. Each event can add to a player's threat score. When the score exceeds your configured thresholds, the server can warn, kick, or ban. Bans are stored and checked on connect. You can revoke bans from the dashboard. Optional screenshot evidence is captured when configured. All actions are logged and can be sent to Discord via webhooks.

Webhooks

In Webhooks you can set Discord webhook URLs for: main (general), bans, detections, connections, unbans, and public logs. Events from the panel and from the resource (e.g. detections, bans) are sent to these webhooks when configured.

API keys and license

The resource authenticates with the panel using an API Key and a License Key. You get these after redeeming a license. They are set in the resource config.lua (or injected when you download the ZIP with keys). One license covers one server (one server.cfg identity). API keys can also be used for custom integrations.