Anticheat whitelist
Fiveops isn’t an anticheat. If your server runs one, staff tools (noclip, god mode, teleport, revive…) can look like cheats to it. This page lists what Fiveops does so you can whitelist it.
Every staff tool is switched on by the server after a permission check; the player’s game never decides on its own.
1. Exempt the whole resource first
Section titled “1. Exempt the whole resource first”Add the fiveops resource to your anticheat’s trusted or whitelisted resources. That covers everything below. Use the
lists only if your anticheat can’t exempt a whole resource.
2. Connections
Section titled “2. Connections”From the server (FXServer):
| Address | Purpose |
|---|---|
wss://gw.fiveops.app/connect | Fiveops connection |
https://1.1.1.1/cdn-cgi/trace, https://api4.ipify.org, https://[2606:4700:4700::1111]/cdn-cgi/trace, https://api6.ipify.org | The server’s public IP for the license IP lock |
https://<account>.r2.cloudflarestorage.com | Screenshots and videos attached to tickets |
From the player’s game (the Fiveops NUI page, nui://fiveops):
| Address | Purpose |
|---|---|
https://api.fiveops.app | Support ticket files |
https://s3.<region>.backblazeb2.com | Session recordings and death replays (upload) |
https://cdn.discordapp.com | Discord avatars |
https://map.fiveops.app | Map tiles |
stun:stun.l.google.com:19302, stun:stun1.l.google.com:19302 | Live screen watch (WebRTC); also the Fiveops TURN relay |
https://cfx-nui-ox_inventory | ox_inventory item images |
3. Network events
Section titled “3. Network events”Player’s game → server
Section titled “Player’s game → server”fiveops:client:fault, fiveops:combat:damage, fiveops:combat:death, fiveops:events:ready,
fiveops:events:refresh, fiveops:events:return, fiveops:events:teleport (checked on the server: only an active
event that allows it), fiveops:giveaway:join, fiveops:integrations:report, fiveops:markers:ready,
fiveops:media:chunk (latent), fiveops:menu:open, fiveops:menu:ua, fiveops:model:result,
fiveops:models:resolve, fiveops:nui:call, fiveops:nui:cloud (also latent), fiveops:quick:open,
fiveops:rec:report, fiveops:self:delete, fiveops:self:keys, fiveops:shortcut, fiveops:shortcuts:hello,
fiveops:shot:failed, fiveops:stashes:open, fiveops:stashes:pick, fiveops:stashes:ready, fiveops:ticket:call,
fiveops:vehicle:keysResult, fiveops:vehicle:spawned, fiveops:warning:ack, fiveops:watch:offer,
fiveops:watch:signal, fiveops:zone, fiveops:zones:ready, fiveops:zones:crossed (zone enter/exit for the log
rule; checked and rate-limited on the server)
Server → player’s game
Section titled “Server → player’s game”fiveops:announce:show, fiveops:client:closeMenu, fiveops:client:deleteLocal, fiveops:client:denied,
fiveops:client:esp, fiveops:client:espToggle, fiveops:client:esxWeather, fiveops:client:freeze,
fiveops:client:garagePlace, fiveops:client:giveKeys, fiveops:client:heal, fiveops:client:kill, fiveops:client:models,
fiveops:client:notice, fiveops:client:notification, fiveops:client:notifications, fiveops:client:open,
fiveops:client:openQuick, fiveops:client:oxOpen, fiveops:client:phoneReload, fiveops:client:quickAnnounce,
fiveops:client:resetModel, fiveops:client:revive, fiveops:client:self, fiveops:client:selfVehicle,
fiveops:client:setModel, fiveops:client:setVitals, fiveops:client:shortcuts, fiveops:client:spawnVehicle,
fiveops:client:stashPicked, fiveops:client:stashPlace, fiveops:client:suspect, fiveops:client:teleport,
fiveops:client:vehicleFuel, fiveops:client:vehicleMove, fiveops:client:vehiclePlate,
fiveops:client:vehicleRepair, fiveops:client:vehicleTweak, fiveops:client:waypoint, fiveops:events:blips,
fiveops:events:changed, fiveops:events:list, fiveops:events:notice, fiveops:events:open,
fiveops:giveaway:close, fiveops:giveaway:count, fiveops:giveaway:end, fiveops:giveaway:joined,
fiveops:giveaway:none, fiveops:giveaway:show, fiveops:giveaway:time, fiveops:markers:visible,
fiveops:media:result, fiveops:nui:result (also latent), fiveops:rec:params, fiveops:rec:replay,
fiveops:rec:start, fiveops:rec:stop, fiveops:rec:urls, fiveops:shot:take, fiveops:stashes:notice,
fiveops:stashes:visible, fiveops:ticket:open, fiveops:ticket:push, fiveops:ticket:result,
fiveops:warning:acked, fiveops:warning:reset, fiveops:warning:show, fiveops:watch:ended, fiveops:watch:signal,
fiveops:watch:start, fiveops:watch:stop, fiveops:zones:list, fiveops:zones:debug, fiveops:client:zoneDraw
Other scripts’ events
Section titled “Other scripts’ events”Fiveops also uses events of the scripts it detects. Only the ones for scripts you run are used.
| Where | Events |
|---|---|
| Server → player’s game (revive, needs, phone, keys, clothing) | esx_ambulancejob:revive, hospital:client:Revive, qbx_medical:client:playerRevived, ars_ambulancejob:healPlayer, p_ambulancejob/client/death/revive, ak47_ambulancejob:revive, esx_status:set, hud:client:UpdateNeeds, qb-phone:client:CustomNotification, vehiclekeys:client:SetOwner, illenium-appearance:client:openClothingShopMenu, vRP:tunnel_req |
| Player’s game → server (saved look) | qb-clothes:loadPlayerSkin |
| Inside the player’s game (saved look after a ped model) | illenium-appearance:client:reloadSkin, skinchanger:loadSkin |
| Player’s game → server (keys, ESX weather) | okokGarage:GiveKeys, t1ger_keys:updateOwnedKeys, vehicles_keys:selfGiveVehicleKeys, esx_weather:server:setZoneWeather |
| Inside the player’s game | cd_garage:AddKeys, vehiclekeys:client:SetOwner, qb-phone:RefreshPhone, ox_lib:notify, chat:addMessage, chat:addSuggestion, chat:removeSuggestion (menu command name), ox_inventory:disarm (no-weapons zone) |
| Only listened to | esx:playerLoaded, QBCore:Client:OnPlayerLoaded, ND:characterLoaded, vRP:Active, hospital:server:RespawnAtHospital |
Events you add to moneyEvents in editable/framework.lua are listened to on the server as well.
4. Natives in the player’s game
Section titled “4. Natives in the player’s game”Staff tools (only for staff with the permission):
| Tool | Natives |
|---|---|
| Noclip | CreateCamWithParams, RenderScriptCams, SetEntityCollision, SetEntityVisible, SetEntityInvincible, SetEntityVelocity, SetEntityCoordsNoOffset, SetEntityCoords, FreezeEntityPosition |
| God mode | SetEntityInvincible, SetPlayerInvincible |
| Invisibility | SetEntityVisible |
| Infinite ammo | SetPedInfiniteAmmoClip, SetPedAmmo, RefillAmmoInstantly |
| ESP | GetGamePool, World3dToScreen2d, GetPedBoneCoords, DrawLine, DrawRect, DrawText |
| Remover | StartShapeTestLosProbe, NetworkRequestControlOfEntity, SetEntityAsMissionEntity, DeleteEntity, DeleteVehicle |
| Teleport to waypoint | GetBlipInfoIdCoord and the teleport natives below |
| Vehicle shortcut | NetworkRequestControlOfEntity, SetVehicleFixed, SetVehicleDeformationFixed, SetVehicleEngineHealth, SetVehicleMod, ToggleVehicleMod, SetVehicleFuelLevel |
Actions staff (or an export) apply to a player:
| Action | Natives |
|---|---|
| Teleport (go to, bring, map, stash) | SetPedCoordsKeepVehicle, FreezeEntityPosition, RequestCollisionAtCoord, GetGroundZFor_3dCoord |
| Freeze | FreezeEntityPosition |
| Kill, health and armour | SetEntityHealth, SetPedArmour |
| Heal | SetEntityHealth, SetPedArmour, ClearPedBloodDamage |
| Revive | NetworkResurrectLocalPlayer, SetEntityHealth, ClearPedTasksImmediately |
| Spawn vehicle | CreateVehicle, TaskWarpPedIntoVehicle, SetVehicleNumberPlateText |
| Vehicle repair, fuel, plate, colour, flip, move | NetworkRequestControlOfEntity, SetVehicleFixed, SetVehicleMod, SetVehicleNumberPlateText, SetEntityRotation, SetEntityCoords |
| Ticket screenshot (the E key) | DisableControlAction |
Zone rules, for every player but only inside a zone that has the rule (map zones):
| Rule | Natives |
|---|---|
| No weapons | DisableControlAction, SetCurrentPedWeapon, SetPlayerCanDoDriveBy |
| Speed limit | SetVehicleMaxSpeed |
| Entry permit (pushed out) | SetEntityCoords, SetEntityVelocity |
| No getting into vehicles | DisableControlAction, ClearPedTasks |
| Border and area on the map | DrawPoly, DrawLine, DrawMarker, AddBlipForRadius, AddBlipForArea |
| Drawing a zone (staff only) | StartShapeTestLosProbe, GetPedBoneCoords, DrawLine, DrawPoly, DrawMarker, DisableControlAction |
A safe zone needs no native in the player’s game: the server drops the damage event (weaponDamageEvent).
Screen capture
Section titled “Screen capture”Session recordings, death replays, live screen watch and ticket screenshots read the game image inside the Fiveops NUI
page (WebGL in the game’s browser) — no native is called. If your anticheat flags screen capture or video recording from
NUI, exempt the fiveops NUI page.