Loader

Service loader

Publish one protected loader URL for each service and copy the loadstring into your UI.

Published loader

Service

1UI sets SCRIPT_KEYYour key-system UI writes getgenv().SCRIPT_KEY before running the loader.

2Loader authenticatesClaudmor checks the key, HWID, bindings, expiry, and service.

3Protected build is deliveredThe matched PlaceId / UniverseId route returns only the stored obfuscated script.

Copy this into your script / UI

Publish the loader first.

Public loader URL

Not published

The loader URL is public by design

The public URL returns only a small bootstrap. The actual obfuscated loader is POST-only and requires Claudmor executor headers plus a valid SCRIPT_KEY, HWID, and configured account bindings. The headers are only an extra filter; key/HWID validation is the real gate.