GlowAuthScript infrastructure

PRIVATE WORKSPACE

Scripts that stay
easy to manage.

Upload, organize and share clean raw links from a dashboard built for speed.

01Google & GitHub accessChoose either account to sign in securely.

02Instant raw linksGenerate a direct link for every upload.

03Owner deletionDeleted links stop serving the original file.

Secure workspace

Continue with Google→

OR

Continue with GitHub→

EXECUTION OVERVIEW

Your scripts.
Your numbers.

Review successful script deliveries from Script Uploader and Panel Builder in one place.

Lifetime totals stay saved even after a script or panel is deleted.

Live · updates every 10 secWaiting for first refresh…

Total executions0Lifetime successful deliveries

Script Uploader0Direct script deliveries

Panel Builder0Key-verified deliveries

Tracked items0Current and historical scripts

EXECUTION INSIGHTS

Delivery activity

Successful source deliveries over time, based on server events.

Loading activity chart…

Last 7 days0Last 30 days0

BY SOURCE

Execution sources

Compare deliveries across your two publishing tools.

Loading execution totals…

LATEST ACTIVITY

Recent executions

The latest successful source deliveries.

Loading activity…

LIFETIME HISTORY

Script and panel history

Counts are retained for deleted items, so removing an upload or panel never erases its previous totals.

Saved to account

Your tracked scripts and panels will appear here after their first successful delivery.

Execution counts represent successful source-delivery requests. GlowAuth cannot verify whether code finished running inside a third-party executor.

LIVE SCRIPT ACCESS PAGES

Panel Builder

Build and preview your branded access panel, then manage its keys separately in the Key Generator tab.

DESIGN SETTINGS

Customize your page

Changes show up instantly in the preview.

LIVE EDITOR

01

IdentityName your published page and brand.

Panel namePublished panel names are unique across GlowAuth. Delete a panel before reusing its name. Link name

/p/

Published link names must be unique. A deleted panel’s link name can be reused; your domain stays glowauth.pages.dev. Brand name Top label

02

Hero contentTell visitors what your page is about.

Main headline Highlighted line Description

03

Actions & appearanceChoose where the buttons go and set your accent.

Primary button label Primary button URL Secondary button label Secondary button URL Accent color

#9C7CFF

04

Panel appearanceBrowse, preview, and buy premium styles directly from Shop.

CURRENT BACKGROUNDGlowAuth Original · FreeOpen Shop to preview and unlock premium backgrounds. Purchases are permanent and verified by PayPal.

CHECKING SHOP STATUS…

05

Key system & scriptThe access box stays on the published panel. Visitors must redeem a key to receive your script.

Fixed action typeAuto Add verifies a complete pasted key automatically; the button remains available. Button nameThe button cannot be removed, only renamed. Key input placeholder Script status buttonShow a status button beside the key formVisitors can check the key they entered and see its current status and expiry without consuming a use. Status button emoji Status button name Script file name

Input source0 characters · Maximum 500 KB. Source is sent only after a key is verified. Or load a local .lua, .luau, or .txt fileLoading a file replaces the text in Input source.

06

Feature cardsAdd up to three short highlights to your page.

01

Card titleCard description

02

Card titleCard description

03

Card titleCard description

LIVE CANVAS

Preview

Switch between desktop and phone layouts as you design.

Live

NNorthstarOFFICIAL

MEMBER ACCESS

Member accessstarts here.

Enter your access key below to unlock the script attached to this panel.

Get started ↗Learn more

⌘

Unlock your scriptAccess key required

Your script appears after a valid key is verified.

01Verified access

Access is checked before script delivery.

02Key-managed

Control key usage and expiration.

03Owner controls

Update your panel whenever your script changes.

YOUR PAGES

Published panels

Edit a page, copy its link, or remove it.

0 of 3 panels published. You can create up to three panels.

▧No panels published yetYour published pages will appear here.

ACCESS & DEVICE CONTROL

Key Generator

Manage keys separately from panel design. Select one of your published panels to generate keys, review activations, reset HWID locks, and revoke keys.

OWNER ONLY

01

Select a published panel

Each key belongs to one panel, so choose the panel whose access rules it should use.

Published panel

⌘ Choose a panel to manage its keys

Select a published panel above to open its key workspace. Keys, expiry rules, and device locks stay scoped to that panel.

DEVELOPER CONSOLE REST API · V1

Developer API

One secure workspace for tokens, projects, script releases, and license validation.

✓ Scoped access✓ Usage limits✓ Token rotation

API reference↗

⌑Built for server-side useKeep API tokens private

Checking API status…Free plan

Requests this month—Loading quota

Projects—Plan limit

Active API tokens—Only hashed token values are stored.

API versionv1Versioned routes with JSON responses

ACCESS CONTROL

Create an API token

Choose a label and the least permissions this integration needs.

KEY

PLAN & LIMITS

Your API usage

Protected operations count toward your monthly quota. Profile and usage checks remain available after you reach the limit.

Checking your current plan…

✦Free planFor getting started

$0

✓

Project & script APICreate projects and version scripts.

✓

License managementIssue, validate, revoke and reset bindings.

✓

Secure token controlsToken scopes, rotation and revocation.

Choose yo
30-day access is a one-time payment, not an automatically renewing subscription. Lifetime prices are one-time payments. All payments are processed by PayPal; GlowAuth validates the order and capture on the server before activating access.

PROJECT WORKSPACE
Your API projects
Separate each app or integration and limit tokens to individual projects.
PRJ
Project nameDescription (optional)
Your projects will appear here.

TOKEN INVENTORY
Your API tokens
Revoke a token immediately if it is lost or no longer needed.
Sign in to load your API tokens.

QUICK START
Make your first request
Use your API token from a trusted server or backend environment.
GET/api/v1/me
curl "https://glowauth.pages.dev/api/v1/me" \ -H "Authorization: Bearer YOUR_GLOWAUTH_API_TOKEN"
GET/api/v1/projectsList projects
POST/api/v1/projectsCreate a project
POST/api/v1/projects/{project_id}/scriptsCreate a script
POST/api/v1/scripts/{script_id}/publishPublish a version
POST/api/v1/projects/{project_id}/licensesCreate a license
POST/api/v1/licenses/validateValidate a license
View machine-readable OpenAPI specification ↗

GLOWAUTH KNOWLEDGE BASE

Everything you need.
One clear guide.

Learn how to upload scripts, build access panels, manage keys and connect your own apps to the GlowAuth Developer API.

01 Step-by-step02 Practical examples03 Security notes

SEARCH Open API specification ↗

01 Start here 02 Script uploader 03 Panel Builder 04 Key Generator 05 Developer API 06 Security & fixes

No guide matched that search. Try a shorter phrase like “expiry”, “upload”, or “token”.

01
FIRST STEPS
Getting started
Get from sign-in to a working script setup.

1
Sign in
Use Continue with Google or Continue with GitHub. Your dashboard is tied to the signed-in account, and the Scripts library only displays uploads owned by that account.

2
Choose a workspace tab
Scripts stores uploaded files, Panel Builder publishes a branded access page, Key Generator manages access keys, and Developer API creates backend tokens and projects.

3
Use Docs when you get stuck
Search this guide for the feature or message you see. The API specification provides a machine-readable description of the API routes.

i
Tip On a phone, tap Menu in the header to open or close the dashboard navigation. Selecting a section automatically closes the mobile menu.

02
SCRIPTS
Script uploader & library
Upload a file, get a direct URL, and manage it later.

Upload a script
Open Scripts and tap Choose a file (or the upload area).
Select a .lua, .luau, or .txt text file. The current upload limit is 5 MB.
Review the selected file, then tap Upload and generate.
Copy the Script ID, Raw URL, or generated loadstring shown in the result card.

What each result means
Script ID
The stable identifier used to recognize this upload in your library.
Raw URL
A direct link to the uploaded text file. Use it where you need the raw file.
Loadstring
A ready-to-copy loader expression for the supported raw endpoint shown by the dashboard.

Manage your library
Use the search field to find a file by name or ID. Open visits the raw file, Copy ID copies its identifier, and Delete removes the active upload from your workspace. Treat a deleted upload's link as retired; upload again if you need a new file entry.

!
Keep important source backed up. The dashboard is not a replacement for version control. Save your own copy before deleting or replacing a script.

i
LuaRN OBF. GlowAuth uses the official LuaRN API for source protection. API availability, website-origin authorization, request quota, and LuaRN service health can affect whether a protected upload or publish succeeds.

03
PUBLISHING
Panel Builder
Create up to three pages that visitors use to enter a key and access your script.

Build your page
Open Panel Builder and edit the panel identity, unique panel name, and link slug.
Customize brand name, heading, description, optional action links, accent color, and up to three feature cards.
Use the free original background or open Shop to preview and purchase Aurora Glass, Cosmic Nebula, or Prism Royale for $5 USD each through PayPal. Each successful purchase unlocks that style permanently for your account.
Under Key system & script, choose Key Redeem or Auto Add, set the button labels and optional status button, then paste script source or load a local Lua/Luau/TXT file.
Watch the live preview, then choose Publish panel. Copy the published page URL and loader template from the success area.

Published page URL pattern
https://glowauth.pages.dev/p/your-panel-slugReplace your-panel-slug with the slug you published.

Important settings
Panel name
The display name for your page. Published names must be unique.
Link name / slug
Forms the page path. Use letters, numbers, and hyphens; keep it easy to share.
Key Redeem
Visitors submit their access key using the key button on the panel.
Auto Add
Checks a complete pasted key automatically; the key action button remains available.
Script status
Optionally lets visitors check the key's status and expiry without consuming a use.
Script source
The source configured for the panel is delivered only after the server validates access conditions.

i
Use a new preview link after publishing changes. Social apps may cache an older Open Graph preview for a while.

04
ACCESS CONTROL
Key Generator
Issue keys, control expiry, and manage access for a published panel.

Generate access keys
Open Key Generator, select the published panel that should own the keys, and refresh the panel list if it is missing.
Choose the number of keys (the available quick choices are 1, 5, 10, or 25).
Choose One redemption or Reusable key.
Set the expiration to permanent, choose a preset, or build a custom duration using years, months, days, hours, minutes and seconds.
Generate the keys, then copy and securely store the values shown. Existing keys can be searched, filtered, revoked, reset or permanently deleted.

Delete
Permanently removes a key record from the selected panel. This cannot be undone.
One redemption
A key intended to be consumed once under the configured validation flow.
Reusable key
A key that can be redeemed more than once, subject to its expiry and device binding rules.
Expiry
Timed keys are invalid after their expiration time. Check the selected duration before issuing keys.
Revoke
Turns off a key. Revocation is appropriate when a key was shared accidentally or should no longer work.
Reset HWID
Clears the stored device binding so the key can bind again on its next successful validation.

!
Copy keys immediately. The full key value is displayed only when created. GlowAuth stores a hash rather than a recoverable plaintext key, so the original value cannot be shown later.

05
INTEGRATIONS
Developer API
Use GlowAuth from your own trusted server or backend application.

!
Server-side only. Never put a GlowAuth API token in public JavaScript, a public webpage, or a distributed client script. Anyone who obtains it could use the permissions attached to that token.

1. Create a token
Open Developer API.
Give the token a descriptive label.
Optionally restrict it to one project.
Select only the scopes it needs, create it, and copy the token before leaving the page.
GlowAuth tokens use the ga_live_ prefix. The full value is only returned when created or rotated; GlowAuth stores its SHA-256 hash.

2. Send an authenticated request
Pass the token in the standard Authorization header and send JSON for request bodies when an endpoint expects input.
Example · cURL
curl "https://glowauth.pages.dev/api/v1/me" \ -H "Authorization: Bearer YOUR_GLOWAUTH_API_TOKEN"
Replace the placeholder with your token from a secure server secret. Do not commit live tokens into a repository.

3. Scope reference
projects:readList and inspect projects.
projects:writeCreate, update, or archive projects.
scripts:readRead script and version metadata.
scripts:writeCreate scripts and publish versions.
licenses:readRead and validate license metadata.
licenses:writeCreate, revoke, or reset license/device bindings.

4. Core endpoints
GET/api/v1/health
Public API health and database-binding status.
GET/api/v1/plans
Public plan-limit metadata.
GET/api/v1/me
Authenticated developer profile and plan.
GET/api/v1/usage
Current monthly usage and quota.
GET/api/v1/projects
List projects available to the token.
POST/api/v1/projects
Create a project when scope and token restrictions allow it.
POST/api/v1/projects/{project_id}/scripts
Create or inspect project scripts with the matching method and scope.
POST/api/v1/scripts/{script_id}/publish
Publish a prepared script version.
POST/api/v1/projects/{project_id}/licenses
Manage license records for a project.
POST/api/v1/licenses/validate
Validate a license, optionally with a device identifier.
POST/api/v1/licenses/{license_id}/revoke
Revoke a license.
The exact operations and response schemas are defined by the live machine-readable API document.
View OpenAPI JSON specification ↗

5. Quotas, plans and payments
Protected API operations consume the plan’s monthly request quota. Free includes 10,000 requests and 1 project; Pro includes 250,000 requests and 10 projects; Business includes 2,000,000 requests and 100 projects; Enterprise includes 10,000,000 requests and 500 projects.
Developer API plans currently offer one-time Lifetime access (Pro $5, Business $10, Enterprise $20) or a separate one-time 30-day access option (Pro $3, Business $8, Enterprise $18). The 30-day option is not an auto-renewing subscription. A tier is applied only after the server verifies PayPal’s completed capture; expired 30-day access falls back to the previous active purchase or Free.
Webhooks, advanced analytics, team roles and priority support are not included as working features in this build; the API plan metadata does not claim that they are enabled.

06
PROTECTION & TROUBLESHOOTING
Security and common fixes
Protect your keys, understand errors, and know what a device binding can and cannot guarantee.

Best security practices
Store API tokens in server-side environment secrets. Use separate tokens for separate apps and grant the minimum required scopes.
Rotate a token immediately if it is exposed; update your server secret with the replacement and stop using the old value.
Revoke access keys when no longer needed, and give reusable keys only to people who should retain access.
Keep a private backup of source code. Check published panel content and action URLs before sharing it.
Use a stable HTTPS endpoint. Do not send keys or tokens in URL query strings, screenshots, or support messages.

“The GlowAuth API database binding is not configured.”
The Pages Worker cannot find the GLOWAUTH_DB binding. In Cloudflare Pages, open Settings → Bindings, confirm the D1 variable name is exactly GLOWAUTH_DB, select the glowauth-api-db database, and configure Production and Preview as needed. Redeploy the project after changing a binding. Then check /api/v1/health and confirm database_binding_configured is true.
“Unauthorized” or a token is rejected
Check that the header is exactly Authorization: Bearer YOUR_TOKEN, the token has not expired or been revoked, and the operation's required scope is granted. Rotate tokens if the value was exposed.
“Forbidden” for a project
Check the token's project restriction and scope. A project-restricted token cannot be used to access another project or to create projects.
“Too many requests” / HTTP 429
Back off before retrying. Add retry delay with exponential backoff and avoid repeatedly polling the same endpoint. The API has rate limits and monthly quotas.
My key or script is not available
Confirm that the key is active, belongs to the selected published panel, and has not expired or been revoked. For the protected loader, verify the device binding; an owner can reset the binding from Key Generator.
My published panel looks out of date
Confirm you published the latest editor changes. Open the latest panel URL in a fresh tab; social-preview providers may cache preview images and metadata.

i
Device-binding limitation. An executor-provided HWID or saved installation ID can be spoofed, copied, or raced. It is a useful friction layer, not proof of a unique physical device. Do not treat a client-side script loader as an unbreakable security boundary.

i
Open-source credits. See the third-party attributions and license notices.

GlowAuth DocsKeep your source backed up and your tokens private.API reference ↗

LOADSTRING CONTROL CENTER
Every script.
Your decision.
Turn individual generated loadstrings on or off. Pick one uploaded script or one published panel website without affecting the others.
Each switch applies only to the selected loadstring

TOTAL LOADSTRINGS—Uploader scripts and published panels
ENABLED—Available to execute on request
DISABLED—Return the owner-disabled message

INDIVIDUAL SETTINGS
Your loadstrings
Each row is one unique link. Turning it off blocks that item only; the original file or panel remains saved.
SERVER ENFORCED

◌Loading your loadstrings…Your uploaded scripts and published panel websites will appear here.

Settings are saved to your accountSaved source stays available for editing even while delivery is off.

i
Good to know Turning a switch off blocks future requests to GlowAuth. It cannot revoke source that someone already downloaded or copied elsewhere. The disabled response says “This script has been disabled. Ask the Owner.”

GlowAuth ControlsPer-loadstring settings · Account scoped

Unlock more with GlowAuthAPI tiers and premium panel styles · one-time pricing

GLOWAUTH MARKETPLACE
The Shop

Everything paid in one place. All prices are USD; 30-day plans and lifetime plans are one-time payments, not auto-renewing subscriptions.

01
DEVELOPER API
More room to build
Higher monthly request quotas and project limits for your integrations.

✦STARTER
Pro
For individual developers and smaller integrations.
250Krequests / month10projects
30 days · one-time$3.00Lifetime · one-time$5.00

◇MOST POPULAR
Business
For growing products and API-backed services.
2Mrequests / month100projects
30 days · one-time$8.00Lifetime · one-time$10.00

⬡HIGHEST TIER
Enterprise
For high-volume projects and broader teams.
10Mrequests / month500projects
30 days · one-time$18.00Lifetime · one-time$20.00

Secure checkout is verified server-side by GlowAuth.

02
PANEL DESIGN
Give your panel its own look
Unlock each premium style once and keep it on your account permanently.

AURORA
$5 one-timeONE-TIME PURCHASE
Aurora Glass
Flowing mint light, soft glass, and violet depth.

NEBULA
$5 one-timeONE-TIME PURCHASE
Cosmic Nebula
Deep-space clouds with electric blue-violet energy.

PRISM
$5 one-timeONE-TIME PURCHASE
Prism Royale
Holographic facets with polished spectrum edges.

After selecting an owned style, apply it to a panel in the builder.

Payment and access stay protected. GlowAuth only unlocks paid API limits and background styles after the server verifies a completed PayPal payment. Closing this shop never starts a checkout.

GlowAuth Secure marketplace