
FortressCore
FortressCore is a comprehensive Minecraft server security plugin featuring AI-powered threat analysis,login/registration,anti-impersonation,IP scanning,automated chat moderation,watchlist monitoring,and advanced tools including bans,appeals,and audit log.
- Загрузки
- 2K
- Подписчики
- 0
- Обновлён
- 29 июня 2026 г.
- Лицензия
- All-Rights-Reserved
Опубликован 4 мая 2026 г.
🏰 FortressCore
The Ultimate Security & Administration Suite for Minecraft Servers
FortressCore is a battle-tested, all-in-one server protection plugin built for server owners who take security seriously. From AI-powered threat detection to per-role permissions — everything you need to run a safe, well-managed server is in one place.
⚡ Offline-mode friendly · 🤖 Gemini AI powered · 🔒 BCrypt encrypted · 📋 Fully configurable
🤖 AI-Powered Security
Gemini 3.5 Flash Integration
FortressCore's AI engine runs 7 independent security modules — all async, all rate-limited, all falling back to rule-based logic if the API is unavailable. Set your API key and let it run.
| Module | What it does |
|---|---|
| 🔍 Join Threat Analysis | Profiles every connecting player and auto-kicks or bans critical threats |
| 🔑 Login Anomaly Detection | Flags account takeover attempts via IP region and time fingerprinting |
| 💬 Chat Moderation | Scans every message for toxicity, ads, scams and auto-executes actions |
| ⌨️ Command Abuse Detection | Catches exploit probing and permission escalation in real time |
| 👁️ Watchlist Automation | Monitors flagged players and delivers an AI verdict after a watch period |
| 📜 Ban Appeal Review | Reads player appeals and recommends deny / reduce / pardon to owners |
| 📊 Security Reports | Scheduled threat summaries with trend analysis broadcast to online owners |
- All Gemini prompt templates are editable in config.yml
- Daily quota tracking — automatically pauses AI at Google's free-tier limit and resumes at UTC midnight
- Circuit breaker — stops retrying on quota exhaustion instead of spamming your logs
- Full rule-based fallback when AI is unavailable or disabled
🔒 Security Features
🪪 Login & Account Protection
- Mandatory login / registration system with BCrypt password hashing
- Anti-impersonation — username-based password locking so no one can join as someone else on offline-mode servers
- Configurable session durations — set once per day, per hour, or never expire
- Two-Factor Authentication (2FA) with time-based codes
- Login attempt limits with automatic temporary IP bans
- everytime_login toggle — choose whether players re-authenticate on every join
🛡️ Anti-Hack & Anti-Bot
- Lockdown Mode — auto-activates on join spikes, manually togglable
- VPN / Proxy detection via proxycheck.io with configurable actions
- IP whitelist & blacklist management
- Username blacklist with regex pattern matching
- Anti-spam chat protection with auto-mute
- Anti-flood and fast-reconnect detection with auto-ban
🔑 Access Control
- Multi-owner system — separate from vanilla op, immune to all security checks
- FortressCore op management — your own op tier independent of Minecraft
- IP history tracking per player with full audit trail
👑 Role System (New in 1.0.4)
A fully featured permission and display tier system built into the plugin — no external permissions plugin required.
- 4 built-in roles — OWNER · ADMIN · MODERATOR · MEMBER
- Create unlimited custom roles (VIP, Builder, Trusted...) in config.yml
- Per-role chat color, name color, prefix, suffix, and priority
- Roles control tab list order and scoreboard display automatically
- Full wildcard permission support — give
*orfortresscore.*to a role /role give/take/info/list/create/delete/edit/addperm/delperm- Changes saved to
player_roles.yml— hot-reloadable with/fc reload
🛠️ Moderation Tools
⚖️ Bans & Punishments
- Permanent and temporary bans for players and IPs
- Ban list with paginated viewing
- AI-assisted appeal review — staff gets a sincerity score and recommendation
/ban/ipban/unban/unipban/banlist
👥 Player Management
/kick/kickall/mute/unmute/freeze/burn/smite/strike— fire and lightning punishment tools/kill/killall— entity and mob cleanup- Command Spy — monitor all player commands in real time
- Social Spy — monitor private messages
- Staff Chat — isolated channel for staff communication
🔁 Daily Restart System (New in 1.0.4)
Schedule automatic server restarts without any external scripts.
- Set multiple restart times per day in
HH:mmformat (e.g.04:00,12:00) - Full timezone support — use any Java ZoneId (e.g.
Asia/Kolkata,UTC) - Countdown warnings at configurable intervals — 5min, 2min, 1min, 30s, 10s...
- Action bar timer shown to all players during final countdown
- Title animation in the last 10 seconds
- Postpone mode — skip restart if players are online, retry automatically
/restart now/restart in 5m/restart cancel/restart status- All plugin data is saved to disk before every restart — zero data loss
🐛 Bug Report System (New in 1.0.4)
Any logged-in player can report plugin bugs directly from in-game.
/bugreport <description>— sends a rich Discord webhook embed instantly- Reports include: player name, server version, plugin version, online count, timestamp
- Confirmation step prevents accidental or spam submissions
- 5-minute cooldown per player between reports
- Report ID counter persists across restarts
- Staff can view recent reports in-game with
/bugreport list - IP addresses are masked in the embed for player privacy
⚔️ Admin Utilities (New in 1.0.4)
🔎 SpawnVein — X-Ray Detection
Catch cheaters without third-party anti-cheat plugins.
/spawnvein <player> <ore> <amount>— secretly places a hidden ore vein near a player at a depth and location invisible from the surface- Supports all ores: diamond · gold · iron · coal · emerald · lapis · redstone · copper · netherite · quartz and more
- Automatic alert to all online admins if the player mines straight to the vein — strongly indicates X-Ray
/spawnvein cancel <player>restores all original blocks- Sessions auto-expire after 10 minutes with full block restoration
✨ /enchant — Bypass Level Limits
/enchant <enchantment> <level> [player]— apply any enchantment up to level 255 on any item- Supports 50+ aliases —
sharp,eff,silk,fort,mending... /enchant remove <enchantment>— strip a specific enchantment/enchant list— paginated list of all available enchantments
💬 /nick — Nickname System
/nick <nickname>— set your own display name/nick <player> <nickname>— set another player's nick (admin)/nick off— remove nickname, revert to real username- Nicknames show in chat, tab list, and scoreboard with role prefix preserved
- Color codes supported for players with
fortresscore.nick.colorpermission - Duplicate and username-conflict checks built in
🌐 Teleportation & Movement
| Command | Description |
|---|---|
/tpa /tphere /tpaccept /tpdeny /back |
Full teleport request system |
/tp /tpall |
Direct teleportation |
/home /sethome /delhome /homes |
Personal home system |
/warp /setwarp /delwarp /warps |
Global warp system |
/jump |
Teleport to targeted block |
/near |
Find nearby players within radius |
🎒 Player Utilities
Inventory & Items
/invsee · /enderchest · /clearinventory · /trash · /hat
/more · /repair · /skull
📦
/invseeworks on offline players too — reads directly from world NBT data with full edit and save support
Health & Survival
/heal · /feed · /god · /suicide · /ext
Movement & Environment
/fly · /speed · /vanish · /day · /night
/sun · /weather · /time · /seed
💬 Chat & Communication
- Private messaging —
/msg/tell/w/whisper/pm/reply - Per-role chat colors and name colors fully configurable
- AI-powered anti-spam with automatic moderation actions
- Chat format fully customizable per role in config.yml
⚙️ Administrative Commands
| Command | Description |
|---|---|
/fc reload |
Hot-reload all configs without restart |
/fc status |
Server status + AI module usage stats |
/fc lockdown |
Toggle lockdown mode |
/fc auditlog |
View recent security events |
/fc ipinfo <player> |
Full IP, VPN, and UUID history |
/fc report |
View or generate AI security reports |
/fc watchlist |
Manage AI-monitored players |
/fc appeal |
Review AI-assisted ban appeals |
/owner add/remove/list |
Owner management |
/fcop add/remove |
FortressCore op management |
/restart |
Schedule or manage server restarts |
/role |
Full role management suite |
/bugreport |
Submit in-game bug reports |
🔐 Permissions Overview
| Tier | Access |
|---|---|
| Players | Login, register, change password, home, warp, tpa, msg, nick, bugreport, 2FA |
| Operators | All moderation commands, spy tools, enchant, nick others, invsee |
| Admins | Bans, roles, spawnvein, restart, AI watchlist, appeal review |
| Owners | Full access — AI modules, owner management, lockdown, all admin tools |
All permission nodes are configurable per role — no hardcoded tiers.
⚙️ Technical Highlights
- 🧵 Fully async — zero main-thread blocking for HTTP, file I/O, and AI calls
- 🔄 Auto-updater — checks Modrinth on startup, downloads and applies updates on restart with full data backup
- 🗂️ Config hot-reload —
/fc reloadreloads everything live - 📝 Audit log with configurable retention period
- 🌐 Asynchronous IP scanning — non-blocking VPN/proxy detection
- 🎨 Full Adventure API — MiniMessage + legacy
&color code support - 📦 Zero external plugin dependencies — everything built in
📋 Requirements
- Paper / Folia 1.21.x — 26.2+
- Java 21+
- Gemini API key (optional — AI features only)
- proxycheck.io API key (optional — VPN detection only)
Built with ❤️ for the Minecraft community Author: _v.o.i.d.x | Version: 1.0.4 latest | MC: 1.21.x — 26.2+ 📦 Modrinth
Ченджлог
1.0.5-beta-1Бета26.1.1, 26.1.2, 26.2 · 29 июня 2026 г.
Changelogs 📋
🏵️ 1.0.5-beta-1 — New commands & stability
🌀 Teleport command
- Added
/backto tp back to your last death location
🗃️ Files Categorisation
All files are now categorised
🔧 Bug Fixes
- Now supports external
placeholdersalso in scoreboard and tab (requires: PlaceholdersAPI) - Fixed
warpsnot loading after server restarts - Fixed many bugs and enhanced more
1.0.4Релиз26.1.1, 26.1.2, 26.2 · 17 июня 2026 г.
📋 Changelog
🏰 v1.0.4 — Roles, Restarts & New Tools
The biggest update yet — new systems, new commands, smarter AI.
👑 Role System
- Added full role & permission system — OWNER, ADMIN, MODERATOR, MEMBER built-in
- Create unlimited custom roles in
config.ymlwith colors, prefixes, and permissions - Roles control chat format, tab list order, and scoreboard display automatically
/role give/take/info/list/create/delete/edit/addperm/delperm
🔁 Daily Restart System
- Schedule multiple automatic restarts per day in
HH:mmformat - Full timezone support, countdown warnings, action bar timer, title animation
- Postpone mode skips restart if players are online
- All plugin data saved before every restart — zero data loss
/restart now/restart in 5m/restart cancel/restart status
🐛 Bug Report System
/bugreport <description>sends a rich Discord embed instantly- Confirmation step, 5-min cooldown, persistent report ID counter
- IP masking built in — player privacy protected
⚔️ New Admin Commands
/spawnvein <player> <ore> <amount>— hidden ore vein for X-Ray detection with auto-alert/enchant <enchantment> <level>— apply any enchantment up to level 255/nick <nickname>— nickname system with role prefix, color support, and tab list integration
🤖 AI Improvements
- Fixed persistent 429 rate-limit spam — circuit breaker now pauses until UTC midnight on quota exhaustion
- Daily API quota tracker — auto-disables AI features and re-enables at reset
- Raised
login_anomalycooldown default to 60 minutes — massively reduces API usage - Fixed
MalformedJsonException— Gemini markdown fences now properly stripped
🔧 Bug Fixes
- Fixed
/vanish— players now properly hidden from others after toggle - Fixed
/invseeon offline players — NBT dat file scan now finds correct UUID on offline-mode servers - Fixed
session_duration_minutes—everytime_logintoggle now works correctly
1.0.3Релиз26.1.1, 26.1.2, 26.2 · 27 мая 2026 г.
🧩 FortressCore v1.0.3 —— Auto-updater
This release focuses on codebase health, compilation optimizations, and completing the integration of the automatic update and configuration migration systems.
🚀 Features & Integration
• Auto-Updater Integration: Configured ConfigMigrator to run automatically inside UpdateManager on plugin startup ( onEnable ). This ensures that your config.yml automatically gets updated with any new default keys, while legacy or removed keys are safely archived to config- legacy.yml .
🔧 Bug Fixes & Code Health
Resolved Compilation Errors: Fixed a missing Iterator import inside ConfigMigrator.java that was causing compilation failures in builds.
Codebase Warnings Sweep: Resolved all compiler warnings across the codebase.
Unused Code & Import Cleanup:
Removed unused imports from core files, manager classes, and AI modules.
Cleaned up redundant fields and local variables, such as the unused uniqueIps field in SecurityReportAI. java (now uses seenIps.size() for accuracy).
Suppressed warnings on intentionally defined fields reserved for upcoming features (such as maintenanceMode in ConfigManager ).
📦 Technical & Compatibility
Verified Paper & Folia Support: Fully compiled and packaged with Paper/Folia API 1.21.1-R0.1-SNAPSHOT .
Clean Shading: Shaded dependency handling with jbcrypt and gson verified successfully.
1.0.2Релиз26.1.1, 26.1.2, 26.2 · 23 мая 2026 г.
🧩 FortressCore v1.0.2 — Gemini AI Integration
New: AI Security Modules (Gemini 3.5 Flash)
- AI Join Threat Analysis — profiles every player on connect, auto-kicks/bans based on threat level
- AI Chat Moderation — real-time toxicity, ad, scam, and hate speech detection with auto-actions
- AI Command Abuse Detection — detects exploit probing and permission escalation in batches
- AI Login Anomaly Detection — flags account takeover via IP region and time fingerprinting
- AI Watchlist Automation — behavioral monitoring with auto-verdict after configurable watch period
- AI Ban Appeal System — sincerity analysis with deny/reduce/pardon recommendations for owners
- AI Security Reports — scheduled threat summaries with trend analysis broadcast to all owners
New Commands
- /fc report latest / generate — AI security reports
- /fc watchlist add/remove/list — manage AI watchlist
- /fc appeal list/review/accept/deny/reduce — manage AI-assisted ban appeals
New Config (config.yml)
- Full ai: section with per-feature toggles
- Configurable Gemini prompt templates per feature
- Rate limiting (default: 15 calls/minute)
- Fallback to rule-based logic on API failure
- model: gemini-3.5-flash
Technical
- New package: me.fortress.fortresscore.ai
- GeminiAIManager — singleton HTTP client with async rate limiter and JSON parser
- AIActionExecutor — dispatches verdicts to main thread via Bukkit scheduler
- AIRateLimiter — token bucket implementation
- All AI calls fully async, zero main thread blocking
- All AI decisions logged to audit-log.yml with feature, action, latency, and prompt hash
- Gson used for all AI JSON parsing
Improvements
- /fc status now displays AI module usage stats
- Audit log extended with AI action categories
- Owner notifications for medium/high AI threat flags
- appeals.yml added for persistent appeal storage
- ai-watchlist.yml added for watchlist persistence
- security-reports/ folder for report archiving
1.0.1Релиз26.1.1, 26.1.2, 26.2 · 11 мая 2026 г.
Fixes
- Fixed custom join/leave messages
Compatible
- Now works with 1.21.x to 26.1.x versions
Комментарии
Загружаем…