🏰 FortressCore
The Ultimate Security & Administration Suite for Minecraft Servers
FortressCore is a battle-tested, all-in-one server protection plugin built for server owners who take security seriously. From AI-powered threat detection to per-role permissions — everything you need to run a safe, well-managed server is in one place.
⚡ Offline-mode friendly · 🤖 Gemini AI powered · 🔒 BCrypt encrypted · 📋 Fully configurable
🤖 AI-Powered Security
Gemini 3.5 Flash Integration
FortressCore's AI engine runs 7 independent security modules — all async, all rate-limited, all falling back to rule-based logic if the API is unavailable. Set your API key and let it run.
| Module | What it does |
|---|---|
| 🔍 Join Threat Analysis | Profiles every connecting player and auto-kicks or bans critical threats |
| 🔑 Login Anomaly Detection | Flags account takeover attempts via IP region and time fingerprinting |
| 💬 Chat Moderation | Scans every message for toxicity, ads, scams and auto-executes actions |
| ⌨️ Command Abuse Detection | Catches exploit probing and permission escalation in real time |
| 👁️ Watchlist Automation | Monitors flagged players and delivers an AI verdict after a watch period |
| 📜 Ban Appeal Review | Reads player appeals and recommends deny / reduce / pardon to owners |
| 📊 Security Reports | Scheduled threat summaries with trend analysis broadcast to online owners |
- All Gemini prompt templates are editable in config.yml
- Daily quota tracking — automatically pauses AI at Google's free-tier limit and resumes at UTC midnight
- Circuit breaker — stops retrying on quota exhaustion instead of spamming your logs
- Full rule-based fallback when AI is unavailable or disabled
🔒 Security Features
🪪 Login & Account Protection
- Mandatory login / registration system with BCrypt password hashing
- Anti-impersonation — username-based password locking so no one can join as someone else on offline-mode servers
- Configurable session durations — set once per day, per hour, or never expire
- Two-Factor Authentication (2FA) with time-based codes
- Login attempt limits with automatic temporary IP bans
- everytime_login toggle — choose whether players re-authenticate on every join
🛡️ Anti-Hack & Anti-Bot
- Lockdown Mode — auto-activates on join spikes, manually togglable
- VPN / Proxy detection via proxycheck.io with configurable actions
- IP whitelist & blacklist management
- Username blacklist with regex pattern matching
- Anti-spam chat protection with auto-mute
- Anti-flood and fast-reconnect detection with auto-ban
🔑 Access Control
- Multi-owner system — separate from vanilla op, immune to all security checks
- FortressCore op management — your own op tier independent of Minecraft
- IP history tracking per player with full audit trail
👑 Role System (New in 1.0.4)
A fully featured permission and display tier system built into the plugin — no external permissions plugin required.
- 4 built-in roles — OWNER · ADMIN · MODERATOR · MEMBER
- Create unlimited custom roles (VIP, Builder, Trusted...) in config.yml
- Per-role chat color, name color, prefix, suffix, and priority
- Roles control tab list order and scoreboard display automatically
- Full wildcard permission support — give
*orfortresscore.*to a role /role give/take/info/list/create/delete/edit/addperm/delperm- Changes saved to
player_roles.yml— hot-reloadable with/fc reload
🛠️ Moderation Tools
⚖️ Bans & Punishments
- Permanent and temporary bans for players and IPs
- Ban list with paginated viewing
- AI-assisted appeal review — staff gets a sincerity score and recommendation
/ban/ipban/unban/unipban/banlist
👥 Player Management
/kick/kickall/mute/unmute/freeze/burn/smite/strike— fire and lightning punishment tools/kill/killall— entity and mob cleanup- Command Spy — monitor all player commands in real time
- Social Spy — monitor private messages
- Staff Chat — isolated channel for staff communication
🔁 Daily Restart System (New in 1.0.4)
Schedule automatic server restarts without any external scripts.
- Set multiple restart times per day in
HH:mmformat (e.g.04:00,12:00) - Full timezone support — use any Java ZoneId (e.g.
Asia/Kolkata,UTC) - Countdown warnings at configurable intervals — 5min, 2min, 1min, 30s, 10s...
- Action bar timer shown to all players during final countdown
- Title animation in the last 10 seconds
- Postpone mode — skip restart if players are online, retry automatically
/restart now/restart in 5m/restart cancel/restart status- All plugin data is saved to disk before every restart — zero data loss
🐛 Bug Report System (New in 1.0.4)
Any logged-in player can report plugin bugs directly from in-game.
/bugreport <description>— sends a rich Discord webhook embed instantly- Reports include: player name, server version, plugin version, online count, timestamp
- Confirmation step prevents accidental or spam submissions
- 5-minute cooldown per player between reports
- Report ID counter persists across restarts
- Staff can view recent reports in-game with
/bugreport list - IP addresses are masked in the embed for player privacy
⚔️ Admin Utilities (New in 1.0.4)
🔎 SpawnVein — X-Ray Detection
Catch cheaters without third-party anti-cheat plugins.
/spawnvein <player> <ore> <amount>— secretly places a hidden ore vein near a player at a depth and location invisible from the surface- Supports all ores: diamond · gold · iron · coal · emerald · lapis · redstone · copper · netherite · quartz and more
- Automatic alert to all online admins if the player mines straight to the vein — strongly indicates X-Ray
/spawnvein cancel <player>restores all original blocks- Sessions auto-expire after 10 minutes with full block restoration
✨ /enchant — Bypass Level Limits
/enchant <enchantment> <level> [player]— apply any enchantment up to level 255 on any item- Supports 50+ aliases —
sharp,eff,silk,fort,mending... /enchant remove <enchantment>— strip a specific enchantment/enchant list— paginated list of all available enchantments
💬 /nick — Nickname System
/nick <nickname>— set your own display name/nick <player> <nickname>— set another player's nick (admin)/nick off— remove nickname, revert to real username- Nicknames show in chat, tab list, and scoreboard with role prefix preserved
- Color codes supported for players with
fortresscore.nick.colorpermission - Duplicate and username-conflict checks built in
🌐 Teleportation & Movement
| Command | Description |
|---|---|
/tpa /tphere /tpaccept /tpdeny |
Full teleport request system |
/tp /tpall |
Direct teleportation |
/home /sethome /delhome /homes |
Personal home system |
/warp /setwarp /delwarp /warps |
Global warp system |
/jump |
Teleport to targeted block |
/top |
Teleport to highest block above you |
/near |
Find nearby players within radius |
🎒 Player Utilities
Inventory & Items
/invsee · /enderchest · /clearinventory · /trash · /hat
/more · /repair · /skull
📦
/invseeworks on offline players too — reads directly from world NBT data with full edit and save support
Health & Survival
/heal · /feed · /god · /suicide · /ext
Movement & Environment
/fly · /speed · /vanish · /day · /night
/sun · /weather · /time · /seed
💬 Chat & Communication
- Private messaging —
/msg/tell/w/whisper/pm/reply - Per-role chat colors and name colors fully configurable
- AI-powered anti-spam with automatic moderation actions
- Chat format fully customizable per role in config.yml
⚙️ Administrative Commands
| Command | Description |
|---|---|
/fc reload |
Hot-reload all configs without restart |
/fc status |
Server status + AI module usage stats |
/fc lockdown |
Toggle lockdown mode |
/fc auditlog |
View recent security events |
/fc ipinfo <player> |
Full IP, VPN, and UUID history |
/fc report |
View or generate AI security reports |
/fc watchlist |
Manage AI-monitored players |
/fc appeal |
Review AI-assisted ban appeals |
/owner add/remove/list |
Owner management |
/fcop add/remove |
FortressCore op management |
/restart |
Schedule or manage server restarts |
/role |
Full role management suite |
/bugreport |
Submit in-game bug reports |
🔐 Permissions Overview
| Tier | Access |
|---|---|
| Players | Login, register, change password, home, warp, tpa, msg, nick, bugreport, 2FA |
| Operators | All moderation commands, spy tools, enchant, nick others, invsee |
| Admins | Bans, roles, spawnvein, restart, AI watchlist, appeal review |
| Owners | Full access — AI modules, owner management, lockdown, all admin tools |
All permission nodes are configurable per role — no hardcoded tiers.
⚙️ Technical Highlights
- 🧵 Fully async — zero main-thread blocking for HTTP, file I/O, and AI calls
- 🔄 Auto-updater — checks Modrinth on startup, downloads and applies updates on restart with full data backup
- 🗂️ Config hot-reload —
/fc reloadreloads everything live - 📝 Audit log with configurable retention period
- 🌐 Asynchronous IP scanning — non-blocking VPN/proxy detection
- 🎨 Full Adventure API — MiniMessage + legacy
&color code support - 📦 Zero external plugin dependencies — everything built in
📋 Requirements
- Paper / Folia 1.21.x — 26.2+
- Java 21+
- Gemini API key (optional — AI features only)
- proxycheck.io API key (optional — VPN detection only)
Built with ❤️ for the Minecraft community Author: _v.o.i.d.x | Version: 1.0.4 latest | MC: 1.21.x — 26.2+ 📦 Modrinth
