Builds an unhardened APK for the selected app so it can be re-signed by MT Manager / APK Editor without breaking guards. Boots straight to home screen — no panel call. Use this to iterate on visuals (drawables, layouts, colours, app name, launcher icon). The output is delivered via a 5-minute single-use token URL — no more public /_drop/ path that anyone could scrape.
Test APK linked to qrfix3No throwaway panel
One-click IBO APK with the panel URL hard-baked to
/AutoBuild/ibo/qrfix3/ — install it
and it talks straight to your test panel. No throwaway PHP panel
spun up, nothing to clean afterwards. Use this for rapid
install-and-iterate cycles on the qrfix3 base.
Pre-branded base APKsLibrary
Hand-curated bases with theme overlays already applied (Sky VIP etc).
Download, edit logo / colours / app_name on your machine, then upload
via the Manual builder tile below — the server patches the URL,
deploys the panel, signs it, and gives you a permanent share link.
Loading...
Panel apps — what's deployed wherelive
Every customer panel + every APK signed for it. Click + Add app to this panel
to jump to the Manual Builder with the customer name pre-filled — just type a suffix
(sports, movies, etc.), pick an edited APK, hit Build & Deploy,
and the new APK installs side-by-side on the device while talking to the same panel.
Loading panels…
Storage Janitor — purge stale runtime datacron: nightly 03:15 UTC
Wipes leaked / runtime cache data from qrfix3 base + every customer panel:
MAC diag logs, stale pairing codes, live/sports/news caches, append-only activity logs,
legacy snoop logs, and qrfix3's leaked portal/log tables.
Customer DBs & portal data are NEVER touched.
Security Audit — scan panels for data-leak antipatternscron: nightly 03:30 UTC
Static-analyses every panel's PHP for: SELECT \u2026 FROM ibo without a MAC filter,
unsanitised $mac SQL interpolation, etc. Telegram alert fires if anything dirty.
Push Update to All Customersin-app prompt
Rebuilds every customer's APK with the latest base patches, bumps versionCode,
re-signs with their existing keystore, drops the new APK to /_drop/,
and updates each version.json. Customers see "Update Available"
on next app launch and can install in place — no sideload, no uninstall.
Push History — last update runs
Click a row to see exactly which customers got which versionCode and any errors.
Loading\u2026
Manual builder — bring-your-own-APK + auto panel~90s
Pick the target app (IBO or Wave), grab its base APK, decompile & redesign it however you like, then
upload it back here with a customer name. The server will:
spin up a fresh PHP panel (qrfix3 for IBO, wave template for Wave),
repoint your edited APK at it (smali URL swap + recompile + signing),
and hand you back the same shape of result the regular builder produces —
APK download URL, panel URL, and (IBO only) admin login (admin/admin).
Same end-customer experience, just with your custom design.
or paste a direct download URL
Tip — for Dropbox links, replace ?dl=0 with ?dl=1 at the end so the server gets the binary instead of an HTML page.
For Google Drive, use the form https://drive.google.com/uc?export=download&id=<FILE_ID>.
Leave the suffix blank for a normal one-app-per-panel build —
OR if the customer panel already exists, the server will auto-pick a unique suffix
(app2, app3, ...) so the new APK gets its own package
(com.a1xpanels.preview.app2) and installs alongside the original.
Type your own suffix (e.g. sports / movies / live) for a friendlier filename.
🔑 Shared Signing Keystore — for MT Manager re-signs
load once
Every IBO build is now signed with one shared keystore
(regardless of customer). Download it once, load it into MT Manager, and use it to re-sign
any APK you edit — installs will OTA-upgrade cleanly over previous builds without
uninstall + reinstall hassle. The in-app signature check has also been gutted,
so the app no longer crashes if you sign with a different keystore — but using this
one is what keeps OTA upgrades clean.
Alias:
Password:(use for both Keystore-pass AND Key-pass in MT Manager)
🔓 Strip Protection — unlock APK for MT Manager editing
~60s
Upload any A1x-branded IBO APK (any version) and we'll
neuter the three guards that make MT Manager re-signing crash the app:
signature-pin verify, IboGuardReport telemetry, and the _buildKey HMAC check.
You get back an APK signed with a shared dev key, ready to edit + re-sign in MT Manager with any keystore.
When done editing, drop the re-signed APK into the
Manual builder above and click
Build & Deploy to re-secure it for production.
or paste a direct download URL
Reseller Pack — IBO Panel ZIP
One-click ZIP of the entire IBO PHP panel — designed to be sold
to resellers who host on their OWN domain. Includes an auto-installer
(install.php) that asks the reseller for admin login,
their domain, and Telegram token, then self-deletes after creating
data/panel.db.
Active design-preview panels
throwaway
Every IBO design-preview build also spins up a temporary PHP panel under /AutoBuild/ibo/preview-…/ so the unhardened APK can actually log in. Delete a row when you're done — both the panel folder AND the APK go in one shot.
Click Refresh.
Trusted Friend Pack — Panel + Base APK
One-click bundle for sharing with a trusted partner. Combines the
IBO PHP panel (auto-installer included) AND a clean editable base APK
(no signature pin / URL crypto / OTA / branding — fully MT-Manager
editable). Friend deploys panel on their own domain, edits the APK
freely with their own keystore.
Includes: panel ZIP (5 MB) · base editable APK (59 MB) · README
Generate a key you can share with a customer. They visit https://autobuild.a1x-panels.com/build, enter the key, pick a name, and instantly build their own APK + panel. When the key expires or you revoke it, the panel folder is deleted and the APK stops working.
Create new key
Existing Codes
Loading…
Customer Panels
Every deployed panel folder under /AutoBuild/<app>/<customer>/ on a1x-panels.com. Last Seen is the mtime of the panel's data/panel.db (updated on every login/portal change). "Push Update" overwrites only PHP kit files — customer panel.db and uploads/ are preserved.
Loading…
Batch IBO Rebuild
Push smali hot-fixes to every customer
Re-runs build_customer_apk() for every active IBO / IBO Sky
customer using their existing theme + VOD-only flag. Use this
whenever a fix is added to ibo_builder.py (e.g. the MAC-expired
dialog stub) and you want every live customer's APK to absorb it.
Builds run sequentially in the background — a failure on one customer
does NOT abort the rest. Each customer is ~40–60 seconds.
Resale Builds (files-only sale)
Build a one-shot package for a customer who'll host the panel on their own domain. Produces a .zip containing their signed APK, the full PHP panel, and an INSTALL.md guide. The APK still carries the A1x native watermark so attribution is locked-in even if they re-brand the UI.
2–32 chars, letters/digits/underscore/dash. Used in the APK & zip filename.
Where they'll host the panel. No https://, no trailing slash.
Built packages
Loading…
Profile
Change the username & password you use to log in to this Master Panel.
Signed in as
—
Customer signing keystores
Each customer build is signed with a unique keystore. The APK kills itself on launch
if the signature does not match the embedded fingerprint, blocking unauthorised re-skins.
To MT-Manager edit a build, download that customer's keystore here and use it to re-sign.
Customer
Alias
Store pass
Fingerprint (SHA-256)
Created
Loading…
Tamper alerts
Devices running an APK with a wrong signature phone home before they kill themselves.
Each row below is one tamper attempt detected on a customer's panel.
When
Customer
Pirate package
Their cert (SHA-256)
Device
IP
Loading…
Disk usage & safe cleanup
Scans the four growth points on the VPS:
/_drop/ (old build drops),
/opt/autobuild/builds/ (build outputs),
the four *_preview/ work-dir clones (regenerated each design preview),
and /tmp/a1x_*pack caches.
APKs referenced by active builder codes are auto-protected and never deleted.
Click Scan to inspect disk usage. No files are deleted until you click Delete selected and confirm.
Manual Clone — IBO Test Base
Spins up a fresh IBO panel + APK from the cleaned testbase
reference. The base APK has AES URL crypto stripped, native bootstrap
neutered, signature pinning removed, and the broken activity_vpn_picker.xml
layout repaired. Customers can be edited freely in MT Manager and
re-signed without breaking the panel connection.
Used as the panel slug (https://a1x-panels.com/AutoBuild/ibo/<name>/) and as the APK filename suffix.
If you set a unique package name per clone, multiple clones can be installed side-by-side on the same device. Renaming adds ~30s to the build.
Existing clones
Manual Clone — Wave Test Base
Spin up a fresh Wave customer panel + signed APK in one click. Mirrors the IBO Manual Clone flow but uses wave_builder.build_customer_apk() and the _templates/wave panel template.
2-32 chars, letters / digits / underscore / hyphen. Becomes the panel slug AND the APK package suffix (com.a1xpanels.wave.<customer>).
Existing Wave clones
Loading…
Manual Clone — XClone Test Base
Spin up a fresh XClone customer panel + signed APK in one click. Pulls from the patched _3_6_4_work base (sports/calendar button already hidden) via xclone_builder.build_customer_apk() and deploys the _templates/xclone panel template.
2-32 chars, letters / digits / underscore / hyphen. Becomes the panel slug AND the APK package suffix (com.a1xpanels.xclone.<customer>).
Existing XClone clones
Loading…
Manual Clone — Cinema HQ Customer Panel
Spin up a fresh customer panel + signed APK in one click. Each customer gets a unique Android package name so multiple builds can install side-by-side on the same device. Default login is admin / admin — the panel forces a password change on first sign-in.
2-32 chars, letters / digits / underscore / hyphen. Also drives the auto package name com.a1x.cinemahq.<customer>.
Lowercase Java-style identifier (com.example.app). Each customer should have a unique package so APKs install side-by-side.
Starting…0%
Existing Cinema HQ panels
Loading…
Manual Clone — Nuvio / GhostStream
Spin up a fresh stremio customer panel + GhostStream APK in one click. Uses the canonical GhostStream-warp-debug.apk base (WARP VPN + DNS login + Quality Limits all built in), binary-patches the __GHOSTPANEL__ sentinel inside classes*.dex to point at the new customer panel, then signs with the master keystore. ~5 seconds end-to-end.
Spin up a fresh Janky customer panel + APK in one click. Decompiles the canonical Janky_0.92.69-a1x.apk (Networks proxy + mobile touch UI + QR -> addyourplaylist all baked in), swaps the jankytest panel URL for the new customer's, rebuilds with APKEditor, signs with the master keystore. ~10-15 s end-to-end.
Spins up a fresh MovieBox customer panel with the A1x VOD UI (Netflix-style rows + 12 free scrapers + TMDB metadata, no Debrid keys). APK ships with native A1x login + WebView VOD home pointed at this panel. Admin login is admin / admin.
2-32 chars. Becomes the panel slug (/AutoBuild/moviebox/<customer>/).
📲Auto-send to customer via Telegram(optional)
▾
When set, the panel DMs the customer the APK download + admin login the moment the build finishes. Have them DM @A1xReport_bot, hit 🔄 Refresh, pick them.
Auto-fills when you pick from the dropdown. Leave blank to skip the push entirely.
Existing MovieBox clones
Loading...
Manual Clone — Movila
Spins up a fresh Movila customer panel (reuses the MovieBox PHP panel but flips every brand string to Movila) + a per-customer Movila APK with the customer's panel URL baked in. APK is ad-free, ships direct-to-portal auth (same fix as MovieBox v11), and gets a unique install package id so multiple customer builds coexist on a single device. Admin login is admin / admin.
2-32 chars. Becomes the panel slug (/AutoBuild/moviebox/<customer>/) and the APK file name suffix.
What the user sees under the app icon on their home screen. Leave as Movila for the default brand.
Lowercase com.foo.bar form. Leave blank to auto-fill as com.movila.a1x.<customer-lowercased>. Must differ from every other customer's package so multiple builds can coexist on a device.
Existing Movila clones
Loading...
WAVEO— Manual Clone
Spins up a fresh WAVEO customer panel (Cockpit-style single api/wave/ endpoint serving the portal list) + a per-customer WAVEO APK. Zero vendor pings — Firebase init is stubbed, and every Smartwave Cloudflare worker (sportsdb / tmdb / ratings / trakt / soccersapi) plus iptvcompanion + waveo.tv hosts are rewritten to invalid.invalid so the phone never reaches Cockpit infra. Includes MAC auto-login (register a device MAC on the panel and the APK signs in automatically on launch) and a VPN webview (per-customer VPN server list — taps hand off an .ovpn with credentials inlined to OpenVPN-for-Android). Sports / ratings / Trakt screens fail silently (v1 scope). Admin login is admin / admin.
2-32 chars. Becomes the panel slug (/AutoBuild/waveo/<customer>/) and the APK file name suffix.
What the user sees under the app icon. Leave as WAVEO for the default brand.
Lowercase com.foo.bar form. Leave blank to auto-fill as com.a1x.waveo.<customer-lowercased>. Must differ from every other customer's package so multiple builds can coexist on a device.
📲Auto-send to customer via Telegram(optional)
▾
When set, the panel DMs the customer the APK download + admin login the moment the build finishes — no copy-paste needed. Send the customer this one-click bot link: https://t.me/A1xReport_bot (or pass them the QR code from t.me/A1xReport_bot). They press Start, then hit 🔄 Refresh below and pick them.
Auto-fills when you pick from the dropdown above. Leave blank to skip the Telegram push entirely.
Appears at the top of the message before the download link.
Existing WAVEO clones
Loading...
R
Reezn— Manual Clone
Spins up a fresh Reezn customer panel + a per-customer Reezn APK in one click. The base APK is already stripped (no Live TV, no Adsterra ads, no FCM / OneSignal push, premium unlocked, anti-MITM PackageCheckerHelper neutered) and ships with the A1x corridor login pointed at this customer's panel. Profile lives in the sidebar; brand is hidden on the Profile page. Admin login is admin / admin.
2-32 chars. Becomes the panel slug (/AutoBuild/reezn/<customer>/) and the APK file name suffix.
📲Auto-send to customer via Telegram(optional)
▾
When set, the panel DMs the customer the APK download + admin login the moment the build finishes — no copy-paste needed. Send the customer this one-click bot link: https://t.me/A1xReport_bot. They press Start, then hit 🔄 Refresh below and pick them.
Auto-fills when you pick from the dropdown above. Leave blank to skip the Telegram push entirely.
Appears at the top of the message before the download link.
Existing Reezn clones
Loading...
S
Streamflix— Manual Clone
Spins up a fresh Streamflix customer panel + a per-customer Streamflix APK. The base APK already has Telegram + Help rows stripped from settings (About / Version Mobile kept) and the in-app updater repointed at this customer's panel. Each panel ships with an App Updates page so the operator can push new versions OTA without users re-installing. A1x corridor login is baked in. Admin login is admin / admin.
2-32 chars. Becomes the panel slug (/AutoBuild/streamflix/<customer>/) and the APK file name suffix.
Recommended: leave blank to keep com.streamflixreborn.streamflix — renaming the package breaks hardcoded FileProvider authorities + intent const-strings and crashes the app post-login. Only fill this in if you absolutely need multiple Streamflix builds on the same device.
📲Auto-send to customer via Telegram(optional)
▾
When set, the panel DMs the customer the APK download + admin login the moment the build finishes. Have them DM @A1xReport_bot, hit 🔄 Refresh, pick them.
Auto-fills when you pick from the dropdown above. Leave blank to skip the Telegram push entirely.
Appears at the top of the message before the download link.
Existing Streamflix clones
Loading...
♫
Musify
Flutter music-streaming client · Spotify-styled
Spins up a fresh Musify customer panel + a per-customer Musify APK. The Flutter source is patched once at master build time — Sponsor and Others sections removed, GitHub update-pings neutered, and a custom Check-for-updates tile wired to this customer's panel via --dart-define A1X_PANEL_URL. Each panel ships with an App Updates page so the operator can push new versions OTA without users re-installing. A1x panel-login gate is baked in. Admin login is admin / admin.
2-32 chars, letters/digits/underscore/hyphen. Becomes the panel slug (/AutoBuild/musify/<customer>/) and the APK file name suffix.
Compared against the panel's app_updates.json. End-users on a lower code see the update prompt. Bump this to the current upstream Musify code (default 175).
Leave blank to skip. When filled, the panel + APK short links + admin login are pushed to this chat as soon as the build succeeds.
Existing Musify clones
Loading…
S5
IPTV Smarters v5— Manual Clone
Spins up a fresh IPTV Smarters v5 customer panel + per-customer signed APK. Ships with Refresh DNS, Xtream + QR login, Multi-DNS playlists, and built-in VPN (OpenVPN configs push from panel). Player defaults to native Android MediaPlayer (Cloudflare-safe). Admin login is admin / admin.
2-32 chars. Becomes the panel slug (/AutoBuild/smarters/<customer>/) and the APK file name suffix.
Leave blank to keep the default Smarters caption.
Existing Smarters clones
Loading...
Send Payment Invoice
DM a customer a clean payment-due receipt with item details and your wallet/account address. Useful for chasing customers who got an APK but haven't paid. Uses @A1xReport_bot.
Shop Orders
All orders placed through @A1xAppsShop_bot. Auto-refreshes every 15s while this tab is open.
