# SantiAuth > SantiAuth (santiauth.com) is a key system, script whitelist and obfuscation platform for Roblox Luau script developers and script hubs. Sellers upload a script once; every copy players run checks its key (HWID-locked) against the SantiAuth API before any of the seller's code executes. Players get keys through a monetized key page, a Discord bot, store webhooks or Robux Game Passes. There is a free plan. ## What it offers - **Built-in whitelist**: the whitelist is embedded into the script before obfuscation; the source never travels over the network, a signed activation plus a heartbeat every 20 s ends sessions of revoked or expired keys. - **Keys**: Standard or Premium, lifetime or timed, timer from creation or first use, one-time keys, 1–100 devices per key, notes, folders, custom key formats, bulk import/export (CSV), mass compensation, keyless mode (including on selected weekdays). - **Bans**: by key, by Discord account or by device (HWID). - **Key page** at `santiauth.com/a/`: checkpoint chains backed by ad networks (Linkvertise, Lootlabs, Work.ink, Cuty and others), several providers per script, players can pick the provider or the key duration, Discord sign-in requirement, Cloudflare Turnstile, per-service theme and branding. - **Anti-bypass**: minimum time per checkpoint, per-IP / per-Discord daily limits, minimum Discord account age, referer checks, automatic bans for tampered links and bypass sites (presets against BYPASS.VIP, BYPASS.CITY, TRW-API), userscript detection, optional VPN / ad-blocker / incognito blocks. - **Obfuscation**: free SantiObf obfuscator on every plan; Luraph and IronBrew runs included on paid plans (or with your own key on Free). - **Runtime variables** for the script: `SA_IsUserPremium`, `SA_SecondsLeft`, `SA_LinkedDiscordID`, `SA_UserNote`, `SA_TotalExecutions`, `SA_SessionValid` and more; `SA_INIT_SCRIPT` runs a custom key UI before the whitelist. - **Key check library** (`check_key`, `load_script`, `get_key_url`) for custom in-game key UIs. - **Discord bot**: member panel with Get Key, Redeem Key, Get Script, Reset HWID, Get Role and Get Stats buttons; Standard/Premium role sync; invite and booster rewards; notifications. - **Selling keys**: keys generated on each sale from SellAuth, SellSn or any store sending HMAC-signed webhooks, with payload conditions; selling keys for Robux via Game Passes; giveaways with stock, passphrase and Discord requirements. - **Analytics**: executions, executors, countries, key-page funnel and revenue, live. - **Teams**: members per service, API keys with scopes, a public REST API with OpenAPI spec. - **AI assistant** in the dashboard that answers from the docs and can act on your services. - **Reseller program** for partners who resell plans. ## Plans (USD per month) - **Free** ($0): 2 services, 500 premium keys, SantiObf, 5 IronBrew/Luraph runs per month, basic analytics (7 days), 2 webhooks, AI assistant. - **Premium** ($15): 15 services, 50,000 premium keys, 20 IronBrew runs per month (Luraph with your own key), advanced analytics (90 days), 10 webhooks, 5 team members per service, Discord role sync & rewards, custom branding, export. - **Enterprise** ($50): 50 services, unlimited premium keys and webhooks, 75 obfuscator runs per month, 1 year of analytics, 25 team members per service, scheduled reports. Current limits are always shown on https://santiauth.com/#pricing. ## Migrating from Luarmor `script_key`, `check_key`, `load_script` and the status codes work the same way; runtime variables swap the `LRM_` prefix for `SA_`. Existing keys can be imported with their original values. Guide: https://santiauth.com/docs/migrating-from-luarmor ## Contact - Website: https://santiauth.com/ - Sign up (free): https://santiauth.com/register - Discord: https://discord.gg/vYjzSbyahA - Email: support@santiauth.com ## Getting started - [Introduction](https://santiauth.com/docs): What SantiAuth does and how the pieces fit together. - [Quickstart](https://santiauth.com/docs/quickstart): From an empty dashboard to a protected script in five steps. - [Migrating from Luarmor](https://santiauth.com/docs/migrating-from-luarmor): LRM_ to SA_, the library URL and what works differently. ## Protect your script - [Built-in whitelist](https://santiauth.com/docs/whitelist): How the whitelist is embedded into your obfuscated script. - [Runtime variables](https://santiauth.com/docs/runtime-variables): SA_IsUserPremium, SA_SecondsLeft and the rest. - [SA_INIT_SCRIPT](https://santiauth.com/docs/init-script): Run a key UI before the whitelist, unobfuscated. - [Obfuscation & loaders](https://santiauth.com/docs/obfuscation): Obfuscators, versions and kill-switch, and one loader for all your games. ## Keys & players - [Managing keys](https://santiauth.com/docs/keys): Key types, HWID resets, bans, compensation and giveaways. - [Key page & providers](https://santiauth.com/docs/key-page): Public /a/ page, key flows, anti-bypass, theme and free days. - [Key & HWID policy](https://santiauth.com/docs/key-settings): Self-service HWID resets, key transfers, expiry reminders and sharing alerts. - [Discord bot](https://santiauth.com/docs/discord-bot): Member panel, slash commands, roles, rewards and webhook relays. ## Monetization - [Ad networks & revenue](https://santiauth.com/docs/revenue): Connect Linkvertise, Work.ink, LootLabs and 8 more, plus the Anti-Bypass API. - [Shop & Robux](https://santiauth.com/docs/shop): Sell keys for Robux through a Game Pass, on a shop page and in Discord. - [Selling keys](https://santiauth.com/docs/selling-keys): Deliver keys automatically from SellAuth, SellSn or any store, with refunds. ## Account & team - [Plans, usage & API keys](https://santiauth.com/docs/account): Token balance, plans and limits, redeem codes, API keys and the AI Assistant. - [Team members](https://santiauth.com/docs/team): Roles, invites and transferring ownership of a service. - [Reseller portal](https://santiauth.com/docs/reseller): Issue redeem codes from your wallet and track redemptions. ## Key check library - [Key check library](https://santiauth.com/docs/key-library): check_key, load_script and get_key_url without kicking. - [Status codes](https://santiauth.com/docs/status-codes): Every code check_key can return and what to show the user. ## Public API - [Overview](https://santiauth.com/docs/api): Quickstart, authentication, conventions and the OpenAPI spec. - [Scopes](https://santiauth.com/docs/api/scopes): Which scope unlocks which endpoints, and what keys can never reach. - [Errors & rate limits](https://santiauth.com/docs/api/errors): Error envelope, status and error codes, per-plan request limits and retries. - [All endpoints](https://santiauth.com/docs/api/reference): Every endpoint an API key can call, on one page. ## API reference - [Keys](https://santiauth.com/docs/api/keys): Create, list, update, export, import and delete keys. - [Bans & key holders](https://santiauth.com/docs/api/bans): Ban Discord users or HWIDs and look up who holds your keys. - [Folders & templates](https://santiauth.com/docs/api/folders): Organize keys into folders and control the key format. - [Services](https://santiauth.com/docs/api/services): Your scripts: create, configure, reorder providers, read traffic. - [Providers](https://santiauth.com/docs/api/providers): Key flows with checkpoints, their stats and copying between services. - [Revenues](https://santiauth.com/docs/api/revenues): Ad-network monetization attached to your checkpoints. - [Store webhooks](https://santiauth.com/docs/api/webhooks): Endpoints your store calls to deliver keys, and their delivery logs. - [Obfuscation](https://santiauth.com/docs/api/obfuscation): Upload, re-upload and inspect protected scripts from CI. - [Analytics](https://santiauth.com/docs/api/analytics): Executions, funnels, geography and A/B results. ## Help - [FAQ & troubleshooting](https://santiauth.com/docs/faq): Kicks, HWID locks, stale scripts and failing checkpoints. ## Optional - [Full documentation in one file](https://santiauth.com/llms-full.txt): every docs page as Markdown. - [Terms of Service](https://santiauth.com/terms) - [Privacy Policy](https://santiauth.com/privacy)