Jixryo Keys

Jixryo Keys replaces qbx_vehiclekeys and the old fork of it. Keys and fobs are real items that name their car, the ignition needs the right key, and every way of stealing a car is a start the server agrees to and an end it checks. Scripts that call qbx_vehiclekeys or qb-vehiclekeys keep working, because Keys answers to both names, and it can answer for eight other key systems too. The resource is jixryo_vehiclekeys.

#What players get

• A key and a fob per car, as items (vehicle_key, vehicle_fob; the keyring holds ten). Each names its car: the plate, the car's name, the lock it was cut for, its key number, and a tag the player gives it in the inventory ("Mom's car"). A temporary key from a rental or a job names the vehicle's session instead and dies when the vehicle goes or the server restarts.
• The ignition. G in the driver's seat: your key goes in by itself and the engine starts; hold G and the key comes out. Or drag it into and out of the inventory's IGNITION slot. Without the right key in, bridged wires or a job car you share, the engine stays off, the game's own starting included. A key left in keeps the car running, and anyone can drive off with it and pocket the key. An owned car remembers the key left in it, in the garage too, and gives it back once.
• The battery, with Jixryo Mechanic running: a weak battery turns over for its seconds before it catches, a dead one only clicks and will not start by G, the fob or any other script. A car already running stays running.
• Locks. L inside is the door button. Outside, the fob works within 25 m: tap to lock or unlock with a chirp and the lights, hold to start or stop the engine (the key must be in and nobody driving). Without a fob, the key turns in the driver's door within 2.5 m and takes a moment and a half. The fob has no screen of its own: L, the fob item used from the inventory or its hotbar key, and its buttons in the inventory's item menu: lock, start, trunk and panic (30 seconds of alarm).
• Sharing. Hand a key over, since it is an item; get copies at the locksmith; /givekeys hands a temporary key to someone beside you; job cars are shared with everyone on duty in the job (police and ambulance cars lock themselves when you get out; the mechanic's tow trucks off duty too); rentals and job scripts give temporary keys that stop working when the vehicle goes.
• Theft, every step checked on the server. A lockpick at a locked driver's door (two seconds feeling for the pins, then the minigame; a plain pick snaps 40 percent of the time, an advanced one 20). A slim jim or a smashed window through the third eye. Hotwiring with a lockpick in the driver's seat. A trojan USB (used up) or a hacking laptop (kept) past an immobiliser, with the Hacking minigame. H searches a car you have no key for (10 to 20 seconds, an 80 percent chance, never a player's own car). Aiming a gun at an NPC driver holds them up for seven and a half seconds, and they hand the key over by the weapon: a handgun half the time, a rifle or shotgun 90 percent, heavy weapons 99. A dead driver's key can be taken, and a car left running has its key in the ignition. A failed break-in sets the alarm off for 15 seconds on the server's dice (35 percent on a basic car, 85 alarmed, always on an immobiliser), a smashed window always, and the police hear through Jixryo Core's dispatch three times in four by day and half the time between 1 and 6 in the morning.
• Security tiers by class or model: basic; alarmed (muscle, sports classics and sports cars); immobiliser (supercars, helicopters and planes: an advanced lockpick for the doors, no slim jim, and a bypass tool to start); sealed (emergency, military and trains: no way in without the key).
• The locksmith, YouTool in Davis by default: your cars with their lock number, keys cut and keys owed; cut a key (150 dollars), program a fob (500), collect what is owed, change the locks (2,500: every older key and fob dies, the one in the ignition too, and you get a new set), copy a key you carry (100). Paid from the bank, never into debt, refunded when nothing fits in your pockets.
• XP and perks, with Jixryo Skills running: Lockpicking for picked doors (18), Car Theft for slim jims (15), smashing in (4), hotwiring (20), hold-ups (12) and found keys (8), Hacking for immobilisers (25). The perks act here: Steady Hands widens every sweet spot, Light Touch and Spare Pins save picks, Quiet Work keeps alarms quiet, Master Picker drops a pin, Bridged and Slim Fingers speed things up, No Witnesses lowers police reports, Gone in Sixty never fails a hotwire, and the Hacking perks give the bypass more time, a second try and a skipped stage.

#What staff get

• Staff commands, for the ACEs in Config.staff.ace (group.god, group.admin, jixryo.keys): /addkeys [id] hands a temporary key to the car beside you without keys of your own, /cutkeys [id] cuts a real key and fob for the nearest car (an owned one's lock and next numbers), /rekey fits new locks on the nearest owned car (every key dead, the owner's new set waits for them), /keyholders lists who carries keys or fobs to the nearest car and what is in its ignition.
• Audited through Jixryo Core: keys.cut, keys.copy and keys.rekey at the locksmith, keys.staff.add, keys.staff.cut and keys.staff.rekey for the commands.
• The console says so at boot when the old qbx_vehiclekeys still runs beside this resource, and when a lockpick or bypass tool is used by another resource and needs its item's client event set.
• Known limit, from the README: a car left running is given a key when its new driver's game says so, so a cheat that owns an NPC car's entity could start its engine first. It gets a key to an NPC car, nothing more. The README also records that the resource has not been run in game yet.

#Install

1. Stop qbx_vehiclekeys and take it out of server.cfg. Keys provides that name and qb-vehiclekeys; if the old one still runs, the console says so when the server starts.

2. Order. It depends on ox_lib, oxmysql, qbx_core, ox_inventory and Jixryo Core, and uses Jixryo Skills (XP and perks), Jixryo Mechanic (the battery) and ox_target (the slim jim, the window and the locksmith) when they run. ensure qbx_vehiclekeys also starts it, since the provided name finds it.

   ensure jixryo_core
   ensure ox_inventory
   ensure jixryo_vehiclekeys

   Copy

3. Items. The Jixryo ox_inventory fork has the key items, the key ring, the IGNITION panel and two quiet add and remove exports that move a key into and out of an ignition without an item message. Any other ox_inventory works too: keys move with the normal calls and say so. The items are vehicle_key, vehicle_fob, keyring and slimjim (Config.items), lockpick and advancedlockpick (Config.theft.lockpicks), trojan_usb and hacking_computer (Config.security.bypass.tools). The item names are the old ones, so nobody's keys break.

4. Lockpicks and bypass tools become useable for this five seconds after start when no other resource has a use for them (registerLockpicks and bypass.register set to auto). If another resource has them, give the items a client event in ox_inventory: lockpicks:UseLockpick with args false or true for the lockpicks, jixryo_vehiclekeys:client:useBypass with the item's name for the tools.

5. Database. The table jixryo_vehiclekeys makes itself as one Jixryo Core migration step, and the old keys' table comes over once: every lock number, key count, key owed and key left in an ignition carries on.

6. The locksmith's page ships built in web/build (source jixryo-ui/apps/keys).

7. Restart the whole server the first time, so the inventory shows its key panel and every resource finds the provided names.

#How other scripts' calls behave

• Jixryo Core reaches these keys through its vehicles module (giveKeys, hasKeys, removeKeys), and Keys uses its validation, rate limit, permission, player, audit, HUD, dispatch, skills and database modules.
• Jixryo Mechanic sets the battery on the vehicle (jxCrank seconds, jxNoStart) and hears every start through the server event jixryo_vehiclekeys:cranking (vehicle, seconds, dead) to play the sound.
• ox_target gets two global vehicle options, the slim jim and the window, and the locksmith's sphere; without it the locksmith has a prompt and E.
• Restarting Keys tells every name it answers as that it stopped (FiveM's resource stop events for that name), so other resources drop the export copies they kept and the inventory hides and shows its key panel with it.

#Its own API

Server exports (also answered as qbx_vehiclekeys):

A vehicle is a server entity, a network id or { netId }. Client exports: HasKeys(vehicle), the key and fob items' useKey and useFob, and six more the Jixryo inventory's key panel calls (the ignition move, a fob's button, the tag, the engine, the panel's settings and what the player carries); those six carry the retired server abbreviation in their names and are left out here.

State bags and events:

The game's calls go through 19 server callbacks named jixryo_vehiclekeys:server:<name> (the engine, the key, the lock, the fob, the ignition move, the tag, break-ins, hotwiring, searches, hold-ups, a dead driver and the locksmith); they are not an API, and the server checks every one.

#Commands and keybinds

The three keybinds keep the old keys' names, so bindings players made carry over; they change them in Settings, Key Bindings, FiveM.

#Configuration

config.lua, with every word players see in shared/text.lua:

#Security

• The client is never trusted. Every action names a vehicle by its network id, and the server checks the player's distance, seat and items on each call.
• Theft is timed by the server. Break-ins, hotwiring, bypasses, searches and hold-ups are a start the server agrees to and an end it checks: too quick, walked off, or the wrong car gets nothing. Tools wear out, alarms sound and the police hear on the server.
• Keys fit by the server's numbers. A key or fob fits only when its plate and lock match the car's record, and a temporary key only its vehicle's session in this server run.
• Grants from a game go only to the owner or the first player near a vehicle a script just made; lock changes from a game open a car only for someone with its keys.
• The locksmith checks the counter, the owner and the balance, refunds when nothing fits in the pockets, and runs one purchase at a time per player, so a double click buys once.
• Staff commands check the ACE every call and go to the audit log.
• One thing the server cannot see, as the README says: a car left running is given a key when its new driver's game says so, so a cheat owning an NPC car's entity could start its engine first and get a key to that NPC car.

#Tests

Two suites in dev-tools/luarun/tests, sharing jixryo_vehiclekeys.setup.lua (a real database with Jixryo Core's real validate, db, rate, perm, player, audit, hud, dispatch, skills and vehicles modules, and qbx_core, ox_inventory, Jixryo Skills and dispatch stood in). Both run on 2026-10-31.

cd dev-tools/luarun
node run.mjs ../../jixryo_scripts/jixryo_vehiclekeys tests/jixryo_vehiclekeys.lua
node run.mjs ../../jixryo_scripts/jixryo_vehiclekeys tests/jixryo_vehiclekeys.client.lua

The README records 28 planted bugs, each breaking one rule above and each caught, 5 more in the battery's hook caught too, and the built locksmith page passing dev-tools/nui/cdp-game.mjs. It also records that the resource has not been run in game yet.

#Check it in game

1. Start with the old qbx_vehiclekeys removed. The console shows the table made and the old keys' table brought over.
2. Buy or pull out a car: your first key and fob land in your pockets, named with the plate and number. G starts it and the key leaves your pockets; hold G and it comes out.
3. Leave the key in, get out, and have a friend drive off with it and pocket the key.
4. Lock the car with L from across the street: the fob clicks in your hand, the car chirps and flashes. Hold L: it starts from a distance with the key in.
5. Pick a parked NPC car's door with a lockpick, then hotwire it from the driver's seat; watch for the alarm and the dispatch call. Press H in one you cannot start and search it for its key.
6. Aim a pistol at an NPC driver: the hold-up runs its time and they hand over the key half the time.
7. At the locksmith in Davis: cut a spare key, copy it, then change the locks: the old key stops working and the one in the ignition comes out.
8. On duty as police, get into a cruiser without a key: it starts, and locks itself when you get out.