Security & Server Authority
Nord Inventory is intentionally designed so the UI/client does not become the authority for inventory state.
Server-controlled operations
The server validates or controls:
- item movement and transfer;
- weight/slot capacity;
- item use completion;
- authoritative metadata changes;
- firearm magazine ammunition;
- reserve ammo consumption;
- durability state;
- inventory sessions and persistence;
- admin authorization;
- vehicle storage capacity.
Admin identifiers
FiveM license fallback identifiers live only in server/config.lua and are not loaded on clients.
Integration rule
Third-party resources, including staff/admin systems, should use Nord Inventory server exports for mutations. Client snapshot exports are for UI/read convenience and must not be trusted as proof that an authoritative action is valid.
Private storage
Always check job/group/ownership permissions in trusted server code before opening a sensitive stash or custom inventory.