How to fix "You lack the required entitlement" on a FiveM server

Paid FiveM resources are delivered through Cfx.re Asset Escrow. A purchase adds the resource to one Cfx.re account, and a server may only run it when that account is the one behind the server's license key. When a server that is not entitled tries to start the resource, the FiveM documentation describes the result like this: the resource will not start, and an error stating "You lack the required entitlement" appears in the server console.

You lack the required entitlement to use <resource name>

So the message is about who owns the resource. The files are fine; the server asking for them is not allowed to run them.

1. Restart the whole server, not just the resource. Cfx.re support gives this as the first step, and it is enough when the purchase was made while the server was already running.
2. Find the account that owns the resource. Log in at portal.cfx.re and open Granted Assets. The resource has to be listed there. If it is not, you are logged in to a different account from the one used at checkout.
3. Find the account that owns the server key. The key is the sv_licenseKey line in server.cfg. It has to be one of the server keys of that same account in the Portal.
4. Make the two match. Either create a new server key on the account that has the resource and put it in server.cfg, or transfer the asset to the account that owns the key. Cfx.re support documents the transfer for both Keymaster and the Portal.
5. Restart again and read the console.

# server.cfg
sv_licenseKey "your_server_key"

Situation	Cause	Fix
Bought a few minutes ago, server was already running	The server has not picked up the new grant	Restart the whole server.
Resource is in Granted Assets, error stays	The server key was created on another Cfx.re account	Use a key from the account that has the resource, or transfer the asset.
The host or a developer set up the server	The key in server.cfg is theirs, not yours	Create your own key in the Portal and replace it.
Resource is not in Granted Assets at all	Bought with a different Cfx.re login	Log in with the account used at checkout, then transfer the asset if needed.
Files came from someone else	The account never received the resource	The server owner has to buy it. Copied files do not carry the entitlement.
It worked and then stopped	A subscription ended, or the server key was changed	Renew the subscription, or check the key in server.cfg.

On subscriptions, the FiveM documentation says that when one expires the asset is removed from the account and will no longer start on that server.

Two things have to sit on one account: the purchased resource and the server key. Tebex checkout logs you in with a Cfx.re account, and that account receives the resource. The server proves who it belongs to with its license key. The machine and the hosting company play no part in it.

This is why the error shows up so often after a server changes hands, after moving to a new host that supplied its own key, or when one person buys resources and another person created the key. Decide which account runs the server and keep purchases and keys on it. The full install path is in how to install a FiveM resource from Cfx.re Escrow.

Yes, but it is a different message. An escrowed download contains a small file named .fxap in the resource folder, next to fxmanifest.lua. Because the name starts with a dot, some file managers and FTP programs hide it or skip it. Upload the whole folder exactly as it was downloaded, keep the folder name, and do not edit protected files.

If the console says the protected resource could not be verified instead of naming an entitlement, download the resource again from the Portal and replace the folder on the server before changing anything else.

The FiveM documentation lists Lua, YFT, YDD and YDR files as the types Asset Escrow protects. The author can leave any file open with escrow_ignore in fxmanifest.lua. This is the example from the documentation:

escrow_ignore {
  'script/code.lua',  -- Only ignore one file
  'stream/tuner.ydr', -- Works for any file, stream or code
  'stream/*.yft',     -- Ignore all .yft files in that folder
  'stream/**/*.yft'   -- Ignore all .yft files in any subfolder
}

Files listed there arrive readable and can be changed. That is how a config file, or the handling of a vehicle, stays editable. Which files are open is the author's choice. For vehicle resources, the metas you can usually change are listed in fxmanifest.lua and data_file for vehicles.

Every Nilo3D vehicle, hoverboard and pet is delivered through Cfx.re Escrow, so the same rules apply. If the error stays after the steps above, open a ticket on the Nilo3D Discord and send your Cfx.re username. With it we can see which account received the purchase.