mm_carkeys is Master Mind’s vehicle-key resource. The reviewed manifest identifies version 1.0.8. It includes temporary keys, inventory key items and key bags. The previous attribution and blanket compatibility claims did not match this source.
Use the actual configuration
The manifest requires ox_lib; settings are in shared/shared.lua. The creator documentation lists OneSync Infinity and OX or QB inventory integration. Register vehiclekey and keybag using the instructions for your inventory. The manifest comments allow disabling the ox_core imports when that framework is not used. Test your garage and dealership integrations with the chosen framework and inventory versions.
Qbox support is incomplete in this revision
shared/init.lua detects qbx_core and sets the framework to qbx, but server/bridge.lua only implements player, identifier and job retrieval for qb, esx and ox. Detection alone therefore does not establish a working Qbox installation. The inventory bridge also assumes specific exports and item structures; selecting an inventory name is not proof of API compatibility.
Repair authorization before live use
The reviewed server events grant permanent or temporary keys from client-supplied vehicle plates without checking vehicle ownership there. The lock-state event also applies the requested state without checking key possession or proximity. Do not deploy this revision unchanged as a trusted vehicle-access system. A developer should enforce server-side authorization and validate entity, plate and distance, then test allowed and denied operations. This is static source review, not a complete security audit.