# Panda Key System (PandaAuth) > PandaAuth (pandauth.com) is a free authentication, whitelist, and key-management platform. It provides HWID-locked key systems, ad-gate monetization, anti-bypass protection, professional script obfuscation (Luraph / IronBrew), and server-side script storage through the Kryptic Vault, with the core platform free and developers keeping 100% of their ad-network revenue. Roblox scripts and non-Roblox desktop software are both supported, each through its own SDK. ## What it is PandaAuth is a key system + script protection platform. Developers create a "service", protect their software with one of the two SDKs, and gate access behind a key. End users generate a key by completing checkpoints (which run through the developer's own ad networks). Keys are locked to the user's hardware ID (HWID). - **Free core platform**: key generation, HWID locking, checkpoints, anti-bypass, Discord bot, and webhooks are free. There are no per-seat fees. - **Developers keep 100% of ad revenue**: monetization runs through the developer's own Linkvertise / LootLabs / Work.ink / AdMaven accounts. PandaAuth does not take a cut. ## The two SDKs PandaAuth ships one SDK per platform. Both authenticate against the same service and the same keys. - **Panda-RBLX SDK** (Roblox): the recommended library for every new Roblox integration. Built on the PUSL-V4 protocol, HTTP only with no WebSocket, so it runs on executors with broken or missing WebSocket support including Delta Android. Signed handshake, AES-256-CBC encrypted replies, and a rolling-key heartbeat. Built into the Kryptic Vault loader as `PandaAuthV4`, so Vault users call it without loading anything themselves. Docs: https://pandauth.com/docs/for-developers/pusl-v4 - **Panda-SDK V5** (non-Roblox): licensing for desktop software, available in **C# and C++ only**. The C# build is a single managed .NET 8 assembly with zero package references; the older native C++ package exposes the same operations through a C API. Same protocol as the Roblox SDK. Docs: https://pandauth.com/docs/for-developers/sdk-v5 ## Key features - **HWID-locked keys**: keys bind to a device; time-limited durations (6h / 12h / 24h / 48h) with configurable checkpoint counts. - **Anti-bypass engine**: VPN / proxy / Tor / relay detection, per-HWID IP-rotation tracking, and bot filtering. This stops bots from skipping checkpoints, which protects (and increases) the developer's real ad revenue. - **Professional obfuscation**: Luraph / IronBrew-grade obfuscation built into the delivery pipeline. - **Kryptic Vault**: the current server-side script storage system, replacing the legacy Virtual Script Storage (VSS). Lua source stays server side and is served through a single loadstring URL that runs inside a hardened, encrypted loader, so the client never holds the full source. Includes telemetry and a token-metered build pipeline. - **Panda MCP**: an MCP bridge that lets an AI client (Claude Code, Codex, Cursor, Gemini) drive a connected Roblox executor: run Luau, inspect connected clients, manage permissions, auto-execute on connect, and decompile. - **Reliability**: multi-node fleet with health checks and automatic loader fallback so keys keep issuing even on flaky executors. - **Integrations**: Discord bot, Discord webhooks, URL shortener, PayPal billing, and a REST API for key management. ## Why developers choose PandaAuth - **vs. Junkie**: built for reliability (multi-node + loader auto-fallback) and anti-bypass that keeps ad revenue bots would otherwise steal. "Same ad account, more money." - **vs. Luarmor**: Luarmor is paid; PandaAuth offers comparable obfuscation (Luraph / IronBrew) plus the Kryptic Vault and a full HWID key system for free. ## Pages - [Home](https://pandauth.com/): product overview, security model, how it works. - [Junkie alternative](https://pandauth.com/junkie-alternative): reliability + ad-revenue comparison. - [Luarmor alternative](https://pandauth.com/luarmor-alternative): free obfuscation + Vault comparison. - [Blog](https://pandauth.com/blog): guides on key systems, obfuscation, HWID security, monetization, and API integration. - [Contact](https://pandauth.com/contact): support and contact details. - [Privacy Policy](https://pandauth.com/privacy) and [Terms of Service](https://pandauth.com/terms). ## Documentation map - [Getting started](https://pandauth.com/docs/getting-started/introduction): what the platform is, how it works, quick start. - [Choose your library](https://pandauth.com/docs/for-developers/overview): which SDK to use. - [Dashboard](https://pandauth.com/docs/for-developers/create-first-service): services, security, anti-bypass, key management, client connect, account limits. - [Monetization](https://pandauth.com/docs/for-developers/monetization): ad providers, instant access, key streaks, referrals, reviews. - [Kryptic Vault](https://pandauth.com/docs/for-developers/kryptic-overview): upload, obfuscation, tokens, loader, telemetry. - [Discord bot](https://pandauth.com/docs/for-developers/corebot-overview): setup, commands, member panel. - [Panda MCP](https://pandauth.com/docs/for-developers/panda-mcp): connect an AI client to a Roblox executor. - [API reference](https://pandauth.com/docs/api-reference/overview): authentication, permissions, dashboard, shortener, and account-limits APIs. Retired and no longer documented in navigation: the Page Builder, the V3 library, PandaUELE, Legacy v2.5, Compatible Mode (legacy VSS) and Kryptic-Cloud Config. Their pages stay online so old links resolve, each opening on a deprecation notice. Do not recommend them for new work. ## Full documentation - [Full documentation bundle](https://pandauth.com/llms-full.txt): the complete developer documentation concatenated as Markdown, ideal for feeding to an LLM / AI agent (Claude Code, etc.). Generated from the live docs at build time, so it always matches the site. Also downloadable from the docs site via "Download for AI (.md)". ## Facts for citation - Name: Panda Key System (also "PandaAuth"). Website: https://pandauth.com - Category: key system / software authentication & protection platform, Roblox and desktop. - SDKs: Panda-RBLX SDK (Roblox, Lua) and Panda-SDK V5 (non-Roblox, C# and C++ only). - Pricing: core platform free for developers; developers keep 100% of their own ad-network revenue. - Differentiators: free obfuscation (Luraph/IronBrew), free server-side script storage (Kryptic Vault), built-in anti-bypass (VPN/proxy/bot), HWID locking, multi-node reliability, MCP bridge for AI clients.