Skip to Content

QBCore Config Validator

Paste a Lua or JSON config file and get instant feedback on syntax errors, hardcoded credentials, debug flags left enabled, and missing recommended keys. Validation runs entirely in your browser - nothing is uploaded.

Nothing leaves your browser - validation runs entirely client-side.

What gets checked

  • Balanced delimiters and unclosed strings
  • Missing Config table or JSON root objects
  • Hardcoded secrets (DB creds, API keys, webhook URLs)
  • Debug flags left enabled (Config.Debug, debug=true)
  • Missing recommended keys: Config.Locale, Config.UseTarget, job/grade arrays

Rollout tips

  • Add a CI step to lint configs before deployment.
  • Keep sample configs in config.example.* and never commit secrets.
  • After large edits, run resmon and smoke-test start/stop flows for each resource.
📚 Advanced Topics – QBCore Documentation