For Developers · Libraries

PUSL-V4

Panda-Unified Security Libraries V4 — an HTTP-only authentication SDK combining V4.3-Cookies and V4-HyperGuard. No WebSocket, built for mobile executors including Delta Android.

When to use it

PUSL-V4 authenticates a key entirely over HTTP: a signed handshake, an AES-256-CBC encrypted and HMAC-signed response, and a rolling-key heartbeat that keeps the session live. There is no WebSocket, so it runs on executors with broken or missing WS support.

HTTP only — no WebSocket

Every exchange is a plain HTTP request. Endpoints rotate every 5 minutes, the server identity is Ed25519-pinned, and each message carries a rolling AES key + HMAC + sequence number for relay and replay protection.

1. Fetch the library

local ok, src = pcall(function()
    return game:HttpGet("https://secure.pandauth.com/pv4/lib")
end)
if not ok or not src then
    return warn("[PUSL-V4] Failed to fetch library.")
end

local PUSL = loadstring(src)()
if not PUSL or type(PUSL.configure) ~= "function" then
    return warn("[PUSL-V4] Library failed to initialize.")
end

2. Configure

PUSL.configure({
    serviceId    = "YOUR_SERVICE_ID",
    debug        = false,
    kickOnDetect = false,
})

3. Validate

local key = PUSL.loadSavedKey and PUSL.loadSavedKey() or "USER_KEY_HERE"
if not key or key == "" then
    return warn("[PUSL-V4] Get a key: " .. PUSL.getKeyUrl())
end

local result = PUSL.validate(key)
if not result.success then
    return warn("[PUSL-V4] Auth failed: " .. (result.error or "unknown"))
end

print("[PUSL-V4] Authenticated. Premium:", result.isPremium)

API: configure, validate, validatePremium, getKeyUrl, copyGetKeyUrl, loadSavedKey, saveKey, clearSavedKey, isConnected, disconnect, hwid, getVersion.

On success validate returns { success, isPremium, expiresAt, getKeyUrl, dashboardUrl, sessionId } and starts the HTTP heartbeat in the background.

Using the Kryptic Vault?

You do not load PUSL-V4 yourself — it is built into the Vault loader as PandaAuthV4. Your uploaded script just calls it:

if PandaAuthV4.Validate(key) then
    -- authenticated
end

if PandaAuthV4.Validate_Premium(key) then
    -- authenticated + premium
end

Executor support

HTTP is resolved from request / http_request / http.request. WebSocket is not required. Synapse X (syn.*) and Fluxus are not referenced — both executors are defunct.