ZIP Packs, Partner Sharing, and Signed Verification

How multi-KV archives and partner databases show up in API results

Unshared.shop / Blog / ZIP Packs, Partner Sharing, and Signed Verification
Cyanokit October 16, 2026 12 min read API Documentation

Packs are first-class now

Double and triple KV products ship as ZIP archives. The validator no longer fails just because two 16 KB files sit in the same zip. POST ?action=validate and validate_url walk every safe 16,384-byte entry (subfolders included), send them to KVChecker.com in batches of 10, and return multi: true when more than one KV is present.

How to detect a pack response

if (!empty($json["multi"])) {
    $summary = $json["summary"]; // total, unbanned, banned, unknown, errors
    foreach ($json["results"] as $kv) {
        // $kv has the same fields as a single validate: serial, partner_checks, sharing, …
    }
    $meta = $json["kvchecker"]; // partners, verifications[], indexed consoles
}
  • status at the pack level is Unbanned, Mixed, Unknown, or Error.
  • Top-level unbanned is true only when every KV is unbanned (no banned / unknown / error).
  • expected_count is set when you pass product=2keys (or similar) into validate_url.
  • Each result includes kv_index and inner_path (zip entry name).

Partner databases

KVChecker currently queries partners such as Cipher, xbGuard, and Nfinite. The list is returned in kvchecker.partners and may grow. For each KV:

  • partner_checks.Cipher.checked = true and first_seen = null — scanned, no record (clear).
  • first_seen = "2022-06-05T22:26:42Z" — that network has seen the serial since that timestamp.
  • sharing.shared_partners is the map of name → first seen, and is_shared is whether that map is non-empty.

A single partner hit is often the customer’s own stealth server. Multiple independent first-seen dates is a much stronger “this KV has been around” signal. That is the same copy we show on the homepage validator and on the download page live report.

Signed verification

Do not trust a screenshot of “Unbanned.” Persist kvchecker.signature and the verify_link (or each item in kvchecker.verifications for batched packs). Anyone can open the link on kvchecker.com and confirm the payload.

Delivery page vs API

Opening https://dl.unshared.shop/kv.bin?id=… in a browser runs the same checker (cached for five minutes) without spending a download credit. Adding dl=true skips the page and streams the file — that is what Discord bots, validate_url, and credit redirect downloads use.

Related docs

Back to Blog