MxF LabsSoftware studio

Launch MxF Factions Documentation

Factions Docs Portal LoginDiscord

MxF Labs pre-launch mode. Customer portal and admin operations remain online.

Web Security | MxF Labs

MxF Factions

Getting Started

Feature Overview MxF Factions Documentation Introduction to Factions

Installation

Data, Backups, and Migration Complete Owner Setup Guide Launch Checklist Compatibility

Requirements

Requirements and Compatibility

Configuration

Permission Contexts Production Default Content Definitions GUI Configuration Competitive Holograms Particles

Feature Setup

Core Faction Rules Setup Roles, Relations, and Chat Setup Homes, Warps, Corners, and Flight Setup Roster and Alts Setup Economy, Vaults, and TNT Setup FTop and PTop Setup Mission System Setup Upgrade, Reward, and Shop Setup Timers, Grace, SOTW, and Shields Setup Raid Operations Setup KOTH Setup Outposts Setup

Permissions

Variables

Gameplay

Core Faction Systems Faction Dashboard Player and Faction Leader Guide Public Faction Profiles

Progression

Missions, Upgrades, Shops, and Rewards Custom Upgrades Mission Filters Mission Objectives Mission Rewards MxF Rewards Season Engine Season Phases MxF Season Points Season Rewards Season Snapshots MxF Shop Upgrade Effects

Competitive

Seasons, FTop, PTop, and Rewards Raids, Shields, and War Center Capture Reward Claims Raid Detection Raid Notification Configuration Raid Outpost Regions Raid Outpost Resets Raid Outpost Rewards Raid Outposts

Staff Operations

Staff Operations Investigations and Rollback Investigation Events Investigation GUI MxF Investigations Rollback Conflicts Rollback Handlers Safe Rollback

Integrations

Web Dashboard Configuration MxF Web Integration Web Permissions Web Security

Licensing

Runtime Licensing

Developer API

Definition API Developers Web API

Troubleshooting

DocsIntegrationsMxF Factions

Integrations / MxF Factions

Web Security

Security controls implemented in the foundation:

Docs version

v1.0.0

Product version

1.0.0-dev

Last updated

Jul 21, 2026

# Web Security

Security controls implemented in the foundation:

API key and secret.

HMAC SHA-256 signatures over method, path, timestamp, nonce, and body.

Raid Outposts Setup

Season Engine Setup

Analytics, Audit, Rules, and Rollback Setup

Menus, Messages, Commands, and Presets Setup

Upgrade Requirements

Timestamp expiry.

Nonce replay protection.

Read/write rate limits.

CORS allowlist.

Session expiry and revocation.

Link-code expiry and one-time use.

Privacy toggles for player IPs and exact coordinates.

Faction-visible audit filtering.

The website may display and request actions, but Java remains authoritative. Browser-supplied faction ids, roles, permissions, balances, prices, rewards, and staff status are never trusted.

Previous

Web Permissions

Next

Runtime Licensing