Skip to main content

Security & Server Authority

Nord Inventory is intentionally designed so the UI/client does not become the authority for inventory state.

Server-controlled operations

The server validates or controls:

  • item movement and transfer;
  • weight/slot capacity;
  • item use completion;
  • authoritative metadata changes;
  • firearm magazine ammunition;
  • reserve ammo consumption;
  • durability state;
  • inventory sessions and persistence;
  • admin authorization;
  • vehicle storage capacity.

Admin identifiers

FiveM license fallback identifiers live only in server/config.lua and are not loaded on clients.

Integration rule

Third-party resources, including staff/admin systems, should use Nord Inventory server exports for mutations. Client snapshot exports are for UI/read convenience and must not be trusted as proof that an authoritative action is valid.

Private storage

Always check job/group/ownership permissions in trusted server code before opening a sensitive stash or custom inventory.

Back to top