FiveMFiveM server.cfg Checker: Check your configuration online
Check your FiveM server.cfg online for errors: paste or select the file, and the checker reports missing endpoints, placeholders in sv_licenseKey and rcon_password, enabled sv_scriptHookAllowed and OneSync issues. Each finding identifies the affected line, if applicable. To create a new server.cfg, switch to the Generator at the top.
Built by Eric Mager
Free, no sign-up required—your server.cfg is checked only in your browser and is not uploaded anywhere.
Based on the official FiveM documentation: docs.fivem.net/docs/server-manual/server-commands
Config checked? Start it on your own FiveM server.
server.cfg
Runs entirely in your browser—nothing is uploaded or stored. Only connection- and security-related commands are checked, not resource-specific Convars.
Result
Example result
What the report looks like in the server.cfg Checker
You paste your server.cfg, and the checker lists every connection and security issue with the affected line. The example below is an intentionally insecure sample file; your findings depend on your file.
Example · Example server.cfg with intentional vulnerabilities
Errors: 0 · Warnings: 5 · Notices: 0Input
endpoint_add_tcp "0.0.0.0:30120"endpoint_add_udp "0.0.0.0:30120" sv_hostname "My Roleplay Server"sv_maxclients 96onesync legacy sv_licenseKey "changeme"rcon_password "" sv_scriptHookAllowed true add_ace group.admin command allow ensure mapmanagerensure chatOutput: findings
- 5 warnings
Warning · Line 5sv_maxclients ≥ 65 requires onesync on (legacy is no longer sufficient).
Warning · Line 8sv_licenseKey looks like a placeholder, not a real key.
Warning · Line 9rcon_password is empty or a common placeholder — RCON is therefore insecure or effectively open.
Warning · Line 11sv_scriptHookAllowed is enabled — it allows Script Hook V clients and is officially considered a security risk.
Warning · Line 13add_ace exists for group.admin, but no SteamID/identifier has been assigned via add_principal.
How it works
How to check your FiveM server.cfg
Paste, review findings, fix: six steps to a checked server.cfg.
Step 1
Paste server.cfg
Paste the contents of your server.cfg into the text field or select the file using “Choose file”. The Checker tab is already active.
Step 2
Optional: Load example
If you want to try the tool first, click “Load example”. The checker will then check an intentionally insecure example file.
Step 3
Read result
The check runs immediately as you paste or type. The result shows the number of errors, warnings and notes at the top.
Step 4
Review findings
Findings are sorted by severity, with errors first. If a line is affected, its number appears before the finding, for example for an empty rcon_password.
Step 5
Fix lines
Fix the reported lines directly in the text field or in your file, then check again until “No errors or warnings found.” appears.
Step 6
Restart server
Apply the corrected configuration to the server.cfg on your FiveM server and restart it. For a completely new file, switch to the Generator at the top.
Validation rules
What the checker checks in your FiveM server.cfg
The checker specifically checks connection- and security-related commands from the FiveM documentation. It deliberately does not flag unknown commands because each resource can read its own ConVars from server.cfg. It skips comment lines beginning with #, and if a command appears multiple times, the last value takes precedence.
Connection and startup
- endpoint_add_tcp/endpoint_add_udp is missing or does not use the IP:PORT format (error)
- TCP and UDP endpoints use different ports (info)
- sv_licenseKey is missing (error) or is a placeholder (warning)
- onesync has a value other than off, legacy or on (error)
- sv_maxclients is not an integer or is outside the range 1–2048 (error)
Security
- rcon_password is empty or a common placeholder (warning)
- sv_scriptHookAllowed is enabled (warning)
- add_ace for group.admin without a matching add_principal (warning)
- steam_webApiKey is a placeholder (warning)
Syntax and notes
- Unclosed quotation mark on a line (error)
- sv_enforceGameBuild specifies a build not on the known build list (warning)
- No ensure or start, so no resources are started (info)
- sv_hostname is not set (info)
- Lines using set, setr or seta are recognized like direct commands
OneSync
OneSync in FiveM: Which mode each slot count requires
The checker compares sv_maxclients with the onesync value in your server.cfg. Valid sv_maxclients values are integers from 1 to 2048; onesync allows off, legacy and on.
1 to 32 Slots
The checker does not require OneSync for this slot count.
33 to 64 Slots
From sv_maxclients 33, the checker warns if neither onesync on nor onesync legacy is set.
65 to 2048 Slots
From sv_maxclients 65, legacy is no longer sufficient: the checker warns unless onesync on is set.
Fix error
Common errors in the FiveM server.cfg and how to fix them
These findings are common reasons why a FiveM server fails to start, is unreachable or runs insecurely. Each includes a suggested fix, sometimes with an example line.
No endpoint set
Without endpoint_add_tcp and endpoint_add_udp, the server is unreachable. Add both in IP:PORT format, usually using port 30120.
endpoint_add_tcp "0.0.0.0:30120"
endpoint_add_udp "0.0.0.0:30120"sv_licenseKey is missing or is a placeholder
The server will not start without a valid key from portal.cfx.re. Replace placeholders such as changeme with your real license key.
rcon_password is empty or insecure
An empty or common password makes RCON insecure or effectively open. Set your own long password.
sv_scriptHookAllowed is enabled
This allows Script Hook V clients, which is officially considered a security risk. Set the value to 0.
sv_scriptHookAllowed 0add_ace for group.admin without add_principal
Permissions for group.admin have no effect unless someone is assigned to the group. Assign your identifier using add_principal.
add_principal identifier.license:xxxx group.adminExplore more
More FiveM tools for server.cfg and resources
Server Configuration Generator
Describe your server.cfg settings to the ZapX AI Agent in your own words, or set each option manually—with a live preview for your rented FiveM server.
Built by Florian Galz
fxmanifest.lua Generator
Configure directives in a form and get a valid fxmanifest.lua instantly.
Built by Eric Mager
FiveM Resource Installer
NewCheck a FiveM resource ZIP archive for the destination folder, ensure line, dependencies, escrow, and SQL. In the Dashboard, the tool installs the resource directly on your server.
Built by Fabian Groß
fxmanifest.lua Checker
Find missing quotation marks, unknown directives, invalid values, and outdated entries.
Built by Eric Mager
server.cfg Generator
Configure network, license, OneSync, admin permissions, and resources using a form.
Built by Eric Mager
FAQ
Frequently asked questions
Quick answers about checking your FiveM server.cfg.
Connection- and security-related commands: missing or incorrectly formatted endpoint_add_tcp/endpoint_add_udp (IP:PORT), a missing or placeholder sv_licenseKey, an empty or placeholder rcon_password, enabled sv_scriptHookAllowed, invalid onesync values, sv_maxclients outside 1–2048 and its OneSync thresholds, add_ace for group.admin without add_principal, a placeholder steam_webApiKey, missing ensure/start, missing sv_hostname, an unknown sv_enforceGameBuild and unclosed quotation marks. It recognizes lines using set, setr or seta just like direct commands.
No. The check runs entirely in your browser, and a selected file is read only locally. Nothing is uploaded or saved, including your license key or RCON password.
The checker reports common server.cfg issues as errors: the server will not start without a sv_licenseKey containing a valid key from portal.cfx.re, and it will be unreachable without endpoint_add_tcp/endpoint_add_udp. Endpoints without IP:PORT format, invalid onesync or sv_maxclients values, and unclosed quotation marks also appear as errors. The tool does not check causes outside the server.cfg, such as resource issues.
From sv_maxclients 33, the checker requires onesync on or legacy; from 65, it requires onesync on. If the required mode is missing, a warning appears on the sv_maxclients line. Valid sv_maxclients values are integers from 1 to 2048.
An empty value, as well as changeme, change_me, password, 123456, admin, yourpassword, yourlicensekeyhere, yourkeyhere and xxx through xxxxx, regardless of case. This applies to sv_licenseKey, rcon_password and steam_webApiKey. The checker does not verify whether a license key is valid with Cfx.re. You can create a real key at portal.cfx.re.
Errors are findings that mean the server will not start, is unreachable, or has an invalid value or syntax, such as a missing sv_licenseKey or endpoint. Warnings flag security or configuration risks, such as an insecure rcon_password or a onesync mode that is too limited for the slot count. Notes provide information, such as a missing sv_hostname, no started resources or different TCP and UDP ports.
No. It checks only connection- and security-related server.cfg commands. It deliberately ignores unknown commands and resource-specific ConVars to avoid false alarms. You can check your resources’ fxmanifest.lua with the fxmanifest Checker. Go to FiveM fxmanifest Checker
Yes. Switch to the Generator tab at the top of the tool and build the file using the form. Go to FiveM server.cfg Generator
Any more questions?
Contact Support
Rent your own FiveM server in 60 seconds
DDoS protection included, full control over server.cfg and resources, cancel anytime.
No setup. No risk. Online in seconds.
Looking for more tools? View all FiveM tools
Preferred source on Google
