You lack the required entitlement on FiveM
FiveM prints You lack the required entitlement to use [asset name] when the server’s license key belongs to a Cfx.re account that does not own the escrowed script. The fix is the same for every one of our scripts on ESX, QBCore and Qbox: run the server on a key from the buying account, or move the purchase on the Cfx.re Portal to the account that owns the key.
Cfx.re handles keys, purchases and transfers, so these steps follow Cfx.re’s own support articles. Portal page and button names are given as those articles word them.
Before you start
- Which account bought the script. Tebex checkout signs you in with Cfx.re. Your scripts appear in your Cfx.re Portal account. Cfx.re’s articles call that page Granted Assets.
- Which account owns the server key. The key sits in
serveras.cfg sv_licenseKey. The Portal’s server registration keys page lists the keys of the account you are signed in with. - Keymaster is now the Portal. Cfx.re moved the Assets and Grants pages from Keymaster to the Portal on 15 October 2025. Older answers that say “transfer it on Keymaster” mean the Portal.
You lack the required entitlement to use [asset name]
- Restart the server and check that
sv_licenseKeyinserverholds the key you meant to use. This is Cfx.re’s first fix..cfg - Sign in to the Portal with the account you bought on and open Granted Assets. If the script is listed there, that account owns it.
- Open the server registration keys page on the same account. If the server’s key was not generated there, the server runs on another account’s key.
- Pick one fix:
- Run the server on a key from the buying account: on the Portal Servers page, select “Generate Key +”, enter a display name and select “Generate”. Put that key in
sv_licenseKeyand restart the server. - Move the script to the account that owns the current key, as in “Move a purchase on the Cfx.re Portal”.
- Run the server on a key from the buying account: on the Portal Servers page, select “Generate Key +”, enter a display name and select “Generate”. Put that key in
Move a purchase on the Cfx.re Portal
- Sign in to the Portal with the account that owns the script and open Granted Assets.
- Select the script and choose “Transfer”.
- Enter the recipient’s Cfx.re username and select “Transfer” again. Cfx.re sends you a confirmation email.
- In that email, select “Confirm transfer request”. The script moves to the recipient’s account.
Cfx.re’s transfer article (edited 1 July 2026, read 19 October 2026) allows one transfer per asset, within 28 days of purchase, and a transfer cannot be reversed. Check the recipient’s username before you confirm.
Failed to verify protected resource [resource name]
Cfx.re gives one cause for this second escrow error: files corrupted while the script was copied to the server. Copy the whole resource folder again, including the .fxap file and every hidden file. Some FTP programs skip hidden or protected files.
Check it works
Restart the server, or run ensure with the script’s resource name, such as ensure tk_policejob. The console prints no entitlement or verification error for that resource, and its features work in game.
If it still fails
- The script is in Granted Assets on neither account: it was bought with another Cfx.re account. Sign in to the Portal with each account you have used at checkout.
- Transfer is refused: the script was already transferred once, or more than 28 days have passed since purchase. Run the server on a key from the account that holds the script.
- Scripts are split across two accounts: transfer each script bought on the other account to the account in use. Each transfer must happen within 28 days of that script’s purchase.
Failed to verify protected resourcereturns after a fresh copy: compare the server folder with the download. If the.fxapfile or a hidden file is missing, upload with a tool that copies hidden files.