open Security / Keys in the catalog ↗
Services
| service | methods | what it does |
|---|---|---|
com.webos.service.commercial.scapadapter | 110 | Commercial/pro-TV SCAP adapter (set-top/conditional-access integration) with a large configuration surface: OSD language and lock, picture… |
com.webos.service.miracast | 37 | Miracast (Wi-Fi Display) service: manages device discovery, pairing and connection, reports connection/media/P2P state and statistics, and… |
com.webos.service.drm | 31 | Digital Rights Management service: authenticates the device, acquires and checks content rights, manages certificates and decryption keys,… |
com.webos.service.widevine | 29 | Widevine DRM service: manages the content decryption module (CDM) and sessions, generates license and provisioning requests, reports HDCP… |
com.webos.service.utp.acas | 10 | ACAS conditional-access service (utp broadcast stack): reports CAS module, contract, ECM, and power-on control info and manages… |
com.webos.service.sdxpromo | 9 | Promotion-management service: checks EULA and available promos, deletes and expires promos, and reacts to app-list and locale changes. |
com.webos.service.keymanager3 | 8 | Security key manager (keystore): generates, imports, exports and derives cryptographic keys, runs begin/update/finish crypto operations,… |
com.webos.service.miracasttx | 8 | Miracast transmitter service: connects and requests a Miracast session, reports device info and state, and sets the encoding mode. |
com.webos.service.btgattwowcast | 7 | Bluetooth LE GATT service (WoWCast): scans for and connects to BLE devices, reads/writes BLE data, and reports remote device info. |
com.webos.chromecast.cell | 5 | Appears to manage the Chromecast-built-in (Cast) runtime: checks terms of service, reports cell/control/runtime-manager status, and starts… |
com.webos.service.appcasting | 5 | Appears to handle app casting/second-screen control: exchanges commands and app messages, relays UIBC (user input back channel) events,… |
com.webos.service.sdx | 5 | SDX device-provisioning/server service: reports device UUID, encrypted MAC, device-authentication and EULA-download status, country code,… |
com.webos.service.chromecast.provisioning | 3 | Chromecast built-in (DIAL) provisioning: reports status and DIAL UUID, toggles the activation popup and launches Chromecast settings. |
com.webos.chromecast.log | 2 | Logging helper for the built-in Chromecast/Google Cast component: starts and stops log capture. Narrow diagnostic role. |
com.webos.service.sm | 2 | Security manager: handles app security permissions, USB-access authentication, device IDs, licensing, and cryptographic operations (file… |
com.webos.service.wowplay | 2 | WOWCAST wireless-audio/soundbar service: pairs and connects soundbars over BLE and Wi-Fi P2P, reports soundbar status, calibration and… |
com.webos.service.dmost | 1 | Appears to manage LG Channels / Channel Plus free streaming: reports broadcast and channel state, enables/disables Channel Plus, handles… |
com.webos.service.ics | 1 | IR-blaster / universal-control service: manages a database of IR and IP-controlled devices, with brand/model/key lists, device add/delete… |
com.webos.service.pkgverifier | 1 | Package signature verifier that verifies IPK app-package signatures. |
com.webos.service.wampluggable.hbbtv | 1 | HbbTV (Hybrid Broadcast Broadband TV) service: manages HbbTV app lifecycle, reserves and releases broadcast resources, makes HTTP… |
ssap:pairing | 1 | SSAP (remote control protocol) pairing endpoint exposing setPin, used to complete client pairing with the TV over the external control… |
ssap:tv | 1 | SSAP TV service (TV remote-control protocol): changes channels, lists channels and programs, reports the current channel, and switches… |
Documented methods to start with
Public and SSAP methods from LG's documentation, none flagged dangerous. Each opens in the catalog with its full parameter table. Run them on a rooted TV or in Developer Mode.
Returns DRM rights error info on license errors during playback.
params: clientId, subscribe
$ luna-send -n 1 -f luna://com.webos.service.drm/getRightsError '{}'Aborts an in-progress operation.
params: handle
$ luna-send -n 1 -f luna://com.webos.service.keymanager3/abort '{}'Starts a crypto operation and returns a handle.
params: name, params
$ luna-send -n 1 -f luna://com.webos.service.keymanager3/begin '{}'Gets the public key of a key pair.
params: name
$ luna-send -n 1 -f luna://com.webos.service.keymanager3/exportKey '{}'Completes the operation and returns result.
params: handle, data
$ luna-send -n 1 -f luna://com.webos.service.keymanager3/finish '{}'Generates a key for algorithms supported by keymanager3.
params: name, params
$ luna-send -n 1 -f luna://com.webos.service.keymanager3/generateKey '{}'Imports an externally generated key.
params: name, data, params
$ luna-send -n 1 -f luna://com.webos.service.keymanager3/importKey '{}'Deletes a key.
params: name
$ luna-send -n 1 -f luna://com.webos.service.keymanager3/removeKey '{}'Feeds data to an operation handle.
params: handle, data
$ luna-send -n 1 -f luna://com.webos.service.keymanager3/update '{}'Returns device IDs provided by webOS TV (LGUDID).
params: idType
$ luna-send -n 1 -f luna://com.webos.service.sm/deviceid/getIDs '{}'Submit PIN during PIN-type pairing
params: pin
$ luna-send -n 1 -f ssap://pairing/setPin '{}'luna-send yourself. See dangerous.md.