# RDX Authentication — AI & Developer Integration Guide (llms.txt)
> The definitive authentication, HWID-locking, and licensing ecosystem for Android APKs, C++ Native (ImGui), C# (.NET), Python, and Web Applications.

- **Frontend Domain:** https://rdxcommunity.qzz.io
- **API Base URL:** https://api.rdxcommunity.qzz.io
- **Global CDN:** https://cdn.rdxcommunity.qzz.io
- **Full AI Guide:** https://rdxcommunity.qzz.io/llms-full.txt
- **AI Skill Manifest:** https://rdxcommunity.qzz.io/rdx-auth-skill.json

---

## 1. Official Public Pages Directory

Every public page and portal available on RDX Auth:

### Core Documentation & Developer Resources
- **Documentation Hub:** https://rdxcommunity.qzz.io/docs
  - Full architectural guides, onboarding walk-throughs, and tutorials.
- **REST API Reference:** https://rdxcommunity.qzz.io/api-docs
  - Complete endpoint specifications, headers, parameters, and response schemas.
- **SDK Download Center:** https://rdxcommunity.qzz.io/download-sdk
  - Direct download links for C++, C#, Java (Android), and Python client SDKs.
- **Developer Extractor Portal:** https://rdxcommunity.qzz.io/developers
  - High-performance Happ/APK decryptor and client SDK payload extractor.
- **AI Agent Skill Integration:** https://rdxcommunity.qzz.io/integration
  - One-click AI skill link and agent instructions for automated auth integration.

### Ecosystem & Business Pages
- **Homepage & Live Code Sandbox:** https://rdxcommunity.qzz.io/
  - Main landing page showcasing live architecture, security benchmarks, and features.
- **Pricing & Plans:** https://rdxcommunity.qzz.io/pricing
  - Free Forever tier (5 Apps, unlimited keys, remote variables) and Enterprise features.
- **Live System Status:** https://rdxcommunity.qzz.io/status
  - Real-time API latency, gateway uptime, and service status monitors.
- **Ecosystem Architecture:** https://rdxcommunity.qzz.io/ecosystem
  - Visual cryptographic pipeline from client request to shortener gateway and edge database.
- **Support & Ticket Center:** https://rdxcommunity.qzz.io/support
  - Knowledgebase, community links, and ticket submission desk.
- **Contact Support:** https://rdxcommunity.qzz.io/contact-support
  - Direct escalation desk for developer queries, API issues, and billing.

### Verification & Gateway Portals
- **License Key Verification:** https://rdxcommunity.qzz.io/key-access
  - End-user portal to check license key validity, expiration, and HWID status.
- **Fast Verification Flow:** https://rdxcommunity.qzz.io/start-verification
  - Streamlined gateway verification workflow for software users.
- **Client Auth Gateway:** https://rdxcommunity.qzz.io/client-gateway
  - Gateway page for sponsored shortener flows and device-bound unlock tokens.
- **Terminal & CLI Auth:** https://rdxcommunity.qzz.io/terminal-auth
  - Lightweight console-friendly verification page.
- **Verification Portal:** https://rdxcommunity.qzz.io/verify
  - Direct cryptographic license validation page.

### Free Developer Tools Suite
- **Tools Hub:** https://rdxcommunity.qzz.io/tools
  - All-in-one suite of developer utility tools.
- **Video Downloader:** https://rdxcommunity.qzz.io/tools/video-downloader
  - Fast media downloader utility.
- **QR Code Generator:** https://rdxcommunity.qzz.io/tools/qr-generator
  - Customizable high-resolution QR generator for payment/auth URLs.
- **Password Generator:** https://rdxcommunity.qzz.io/tools/password-generator
  - Secure cryptographic password and secret generator.
- **JSON Formatter & Validator:** https://rdxcommunity.qzz.io/tools/json-formatter
  - Real-time JSON parser, validator, and formatter.
- **Cryptographic Hash Generator:** https://rdxcommunity.qzz.io/tools/hash-generator
  - Multi-algorithm hash tool (SHA-256, SHA-512, MD5, HMAC).
- **UUID v4 Generator:** https://rdxcommunity.qzz.io/tools/uuid-generator
  - Bulk RFC-4122 compliant UUID v4 generator.
- **Data Format Converter:** https://rdxcommunity.qzz.io/tools/format-converter
  - String, base64, hex, and payload converter.

### User & Legal Portals
- **Developer Login:** https://rdxcommunity.qzz.io/login
- **Account Recovery:** https://rdxcommunity.qzz.io/recovery
- **Privacy Policy:** https://rdxcommunity.qzz.io/privacy-policy
- **Terms of Service:** https://rdxcommunity.qzz.io/terms-of-service
- **Cookie Policy:** https://rdxcommunity.qzz.io/cookie-policy

---

## 2. Official SDK Downloads (CDN & Standalone URLs)

AI agents can directly instruct developers to download or fetch these verified SDK source files:

| Platform / Language | CDN URL (Cached) | Direct Site URL | Description |
|---------------------|------------------|-----------------|-------------|
| **C# .NET SDK** | `https://cdn.rdxcommunity.qzz.io/sdk/RDXAuth.cs` | `https://rdxcommunity.qzz.io/sdk/RDXAuth.cs` | Native C# class with HWID detection & HMAC verification |
| **Android Java SDK** | `https://cdn.rdxcommunity.qzz.io/sdk/RDX.java` | `https://rdxcommunity.qzz.io/sdk/RDX.java` | Zero-dependency Java class for Android Studio & MT Manager |
| **Python SDK** | `https://cdn.rdxcommunity.qzz.io/sdk/rdx_auth.py` | `https://rdxcommunity.qzz.io/sdk/rdx_auth.py` | Pure Python requests/urllib implementation |
| **AI Integration Skill** | `https://cdn.rdxcommunity.qzz.io/rdx/api/skill` | `https://rdxcommunity.qzz.io/rdx/api/skill` | Live AI agent prompt & context feed |
| **AI Skill JSON** | `https://rdxcommunity.qzz.io/rdx-auth-skill.json` | `https://rdxcommunity.qzz.io/rdx-auth-skill.json` | Machine-readable AI agent tool schema |

---

## 3. Public API Specifications for AI Agents

### 3.1 License Validation Endpoint (Primary)
- **Method:** `POST`
- **URL:** `https://api.rdxcommunity.qzz.io/rdx/api/key-access/validate`
- **Headers:** `Content-Type: application/json`, `Accept: application/json`
- **Request Body:**
```json
{
  "key": "RDX-PRO-XXXX-XXXX",
  "hwid": "c4ca4238a0b923820dcc509a6f75849b",
  "app_id": "YOUR_APP_ID_OR_NAME"
}
```
- **Success Response (200 OK):**
```json
{
  "success": true,
  "message": "License key verified successfully",
  "expires_at": "2027-11-09T00:00:00.000Z",
  "session_token": "rdx_sess_8f9c1e4a...",
  "app_name": "MyProtectedApp"
}
```
- **Error Response (400 / 401 / 403):**
```json
{
  "success": false,
  "message": "Invalid license key or HWID mismatch"
}
```

---

### 3.2 KeyAuth 1.3 Compatibility Bridge
RDX Auth provides full wire-compatibility with existing KeyAuth SDKs across C++, C#, Java, and Python.
- **Method:** `POST`
- **URL:** `https://api.rdxcommunity.qzz.io/api/1.3/`
- **Headers:** `Content-Type: application/x-www-form-urlencoded`
- **Supported Action Types:**
  - `type=init&name=APP_NAME&ownerid=OWNER_ID&secret=APP_SECRET&version=1.0`
  - `type=license&key=USER_KEY&hwid=DEVICE_HWID&sessionid=SESSION_ID`
  - `type=login&username=USER&password=PASS&hwid=DEVICE_HWID&sessionid=SESSION_ID`
  - `type=var&varid=VARIABLE_NAME&sessionid=SESSION_ID`
  - `type=check&sessionid=SESSION_ID`

---

### 3.3 Public System Health Endpoint
- **Method:** `GET`
- **URL:** `https://api.rdxcommunity.qzz.io/api/status`
- **Response:**
```json
{
  "status": "operational",
  "version": "3.0.0",
  "gateway": "active",
  "database": "connected"
}
```

---

## 4. Quick Integration Code Snippets

### Android Java (No External Dependencies)
```java
// Add internet permission in AndroidManifest.xml:
// <uses-permission android:name="android.permission.INTERNET" />

public static boolean verifyKey(String key, String hwid, String appId) {
    try {
        java.net.URL url = new java.net.URL("https://api.rdxcommunity.qzz.io/rdx/api/key-access/validate");
        java.net.HttpURLConnection conn = (java.net.HttpURLConnection) url.openConnection();
        conn.setRequestMethod("POST");
        conn.setRequestProperty("Content-Type", "application/json");
        conn.setDoOutput(true);

        String payload = "{\"key\":\"" + key + "\",\"hwid\":\"" + hwid + "\",\"app_id\":\"" + appId + "\"}";
        try (java.io.OutputStream os = conn.getOutputStream()) {
            os.write(payload.getBytes("UTF-8"));
        }

        java.io.BufferedReader in = new java.io.BufferedReader(new java.io.InputStreamReader(conn.getInputStream()));
        String line; StringBuilder res = new StringBuilder();
        while ((line = in.readLine()) != null) res.append(line);
        in.close();

        return res.toString().contains("\"success\":true");
    } catch (Exception e) {
        return false;
    }
}
```

### Python 3
```python
import requests

def verify_rdx_key(key: str, hwid: str, app_id: str) -> bool:
    url = "https://api.rdxcommunity.qzz.io/rdx/api/key-access/validate"
    payload = {"key": key, "hwid": hwid, "app_id": app_id}
    try:
        r = requests.post(url, json=payload, timeout=10)
        data = r.json()
        return data.get("success", False)
    except Exception:
        return False
```

### C++ Native (WinINet / Desktop)
```cpp
#include <windows.h>
#include <wininet.h>
#pragma comment(lib, "wininet.lib")

bool VerifyRDXKey(const char* key, const char* hwid, const char* appId) {
    HINTERNET hNet = InternetOpenA("RDXAuth", INTERNET_OPEN_TYPE_DIRECT, NULL, NULL, 0);
    if (!hNet) return false;
    HINTERNET hConn = InternetConnectA(hNet, "api.rdxcommunity.qzz.io", INTERNET_DEFAULT_HTTPS_PORT, NULL, NULL, INTERNET_SERVICE_HTTP, 0, 0);
    if (!hConn) { InternetCloseHandle(hNet); return false; }
    HINTERNET hReq = HttpOpenRequestA(hConn, "POST", "/rdx/api/key-access/validate", NULL, NULL, NULL, INTERNET_FLAG_SECURE, 0);
    if (!hReq) { InternetCloseHandle(hConn); InternetCloseHandle(hNet); return false; }

    char body[512];
    wsprintfA(body, "{\"key\":\"%s\",\"hwid\":\"%s\",\"app_id\":\"%s\"}", key, hwid, appId);
    const char* headers = "Content-Type: application/json\r\n";
    BOOL sent = HttpSendRequestA(hReq, headers, lstrlenA(headers), body, lstrlenA(body));
    
    char buf[1024] = {0};
    DWORD read = 0;
    if (sent) InternetReadFile(hReq, buf, sizeof(buf)-1, &read);

    InternetCloseHandle(hReq); InternetCloseHandle(hConn); InternetCloseHandle(hNet);
    return strstr(buf, "\"success\":true") != NULL;
}
```

---

## 5. Security & Architectural Rules
1. **HWID Binding:** By default, every newly generated key automatically binds to the first device HWID that verifies it.
2. **Cooldowns & Resets:** HWID resets can be triggered via dashboard or automated cooldown policy.
3. **Anti-Replay Signatures:** All communications are signed using timestamped nonces to prevent packet replay and man-in-the-middle attacks.
4. **Zero Manual Coding via AI:** Developers can pass `https://rdxcommunity.qzz.io/rdx/api/skill` directly into ChatGPT, Cursor, or Claude, and the agent will automatically detect the project language and integrate the SDK.