🏰 FortressCore

The Ultimate Security & Administration Suite for Minecraft Servers

FortressCore is a battle-tested, all-in-one server protection plugin built for server owners who take security seriously. From AI-powered threat detection to per-role permissions — everything you need to run a safe, well-managed server is in one place.

⚡ Offline-mode friendly · 🤖 Gemini AI powered · 🔒 BCrypt encrypted · 📋 Fully configurable

🤖 AI-Powered Security

Gemini 3.5 Flash Integration

FortressCore's AI engine runs 7 independent security modules — all async, all rate-limited, all falling back to rule-based logic if the API is unavailable. Set your API key and let it run.

Module	What it does
🔍 Join Threat Analysis	Profiles every connecting player and auto-kicks or bans critical threats
🔑 Login Anomaly Detection	Flags account takeover attempts via IP region and time fingerprinting
💬 Chat Moderation	Scans every message for toxicity, ads, scams and auto-executes actions
⌨️ Command Abuse Detection	Catches exploit probing and permission escalation in real time
👁️ Watchlist Automation	Monitors flagged players and delivers an AI verdict after a watch period
📜 Ban Appeal Review	Reads player appeals and recommends deny / reduce / pardon to owners
📊 Security Reports	Scheduled threat summaries with trend analysis broadcast to online owners

All Gemini prompt templates are editable in config.yml
Daily quota tracking — automatically pauses AI at Google's free-tier limit and resumes at UTC midnight
Circuit breaker — stops retrying on quota exhaustion instead of spamming your logs
Full rule-based fallback when AI is unavailable or disabled

🔒 Security Features

🪪 Login & Account Protection

Mandatory login / registration system with BCrypt password hashing
Anti-impersonation — username-based password locking so no one can join as someone else on offline-mode servers
Configurable session durations — set once per day, per hour, or never expire
Two-Factor Authentication (2FA) with time-based codes
Login attempt limits with automatic temporary IP bans
everytime_login toggle — choose whether players re-authenticate on every join

🛡️ Anti-Hack & Anti-Bot

Lockdown Mode — auto-activates on join spikes, manually togglable
VPN / Proxy detection via proxycheck.io with configurable actions
IP whitelist & blacklist management
Username blacklist with regex pattern matching
Anti-spam chat protection with auto-mute
Anti-flood and fast-reconnect detection with auto-ban

🔑 Access Control

Multi-owner system — separate from vanilla op, immune to all security checks
FortressCore op management — your own op tier independent of Minecraft
IP history tracking per player with full audit trail

👑 Role System (New in 1.0.4)

A fully featured permission and display tier system built into the plugin — no external permissions plugin required.

4 built-in roles — OWNER · ADMIN · MODERATOR · MEMBER
Create unlimited custom roles (VIP, Builder, Trusted...) in config.yml
Per-role chat color, name color, prefix, suffix, and priority
Roles control tab list order and scoreboard display automatically
Full wildcard permission support — give * or fortresscore.* to a role
/role give/take/info/list/create/delete/edit/addperm/delperm
Changes saved to player_roles.yml — hot-reloadable with /fc reload

🛠️ Moderation Tools

⚖️ Bans & Punishments

Permanent and temporary bans for players and IPs
Ban list with paginated viewing
AI-assisted appeal review — staff gets a sincerity score and recommendation
/ban /ipban /unban /unipban /banlist

👥 Player Management

/kick /kickall /mute /unmute /freeze
/burn /smite /strike — fire and lightning punishment tools
/kill /killall — entity and mob cleanup
Command Spy — monitor all player commands in real time
Social Spy — monitor private messages
Staff Chat — isolated channel for staff communication

🔁 Daily Restart System (New in 1.0.4)

Schedule automatic server restarts without any external scripts.

Set multiple restart times per day in HH:mm format (e.g. 04:00, 12:00)
Full timezone support — use any Java ZoneId (e.g. Asia/Kolkata, UTC)
Countdown warnings at configurable intervals — 5min, 2min, 1min, 30s, 10s...
Action bar timer shown to all players during final countdown
Title animation in the last 10 seconds
Postpone mode — skip restart if players are online, retry automatically
/restart now /restart in 5m /restart cancel /restart status
All plugin data is saved to disk before every restart — zero data loss

🐛 Bug Report System (New in 1.0.4)

Any logged-in player can report plugin bugs directly from in-game.

/bugreport <description> — sends a rich Discord webhook embed instantly
Reports include: player name, server version, plugin version, online count, timestamp
Confirmation step prevents accidental or spam submissions
5-minute cooldown per player between reports
Report ID counter persists across restarts
Staff can view recent reports in-game with /bugreport list
IP addresses are masked in the embed for player privacy

⚔️ Admin Utilities (New in 1.0.4)

🔎 SpawnVein — X-Ray Detection

Catch cheaters without third-party anti-cheat plugins.

/spawnvein <player> <ore> <amount> — secretly places a hidden ore vein near a player at a depth and location invisible from the surface
Supports all ores: diamond · gold · iron · coal · emerald · lapis · redstone · copper · netherite · quartz and more
Automatic alert to all online admins if the player mines straight to the vein — strongly indicates X-Ray
/spawnvein cancel <player> restores all original blocks
Sessions auto-expire after 10 minutes with full block restoration

✨ /enchant — Bypass Level Limits

/enchant <enchantment> <level> [player] — apply any enchantment up to level 255 on any item
Supports 50+ aliases — sharp, eff, silk, fort, mending...
/enchant remove <enchantment> — strip a specific enchantment
/enchant list — paginated list of all available enchantments

💬 /nick — Nickname System

/nick <nickname> — set your own display name
/nick <player> <nickname> — set another player's nick (admin)
/nick off — remove nickname, revert to real username
Nicknames show in chat, tab list, and scoreboard with role prefix preserved
Color codes supported for players with fortresscore.nick.color permission
Duplicate and username-conflict checks built in

🌐 Teleportation & Movement

Command	Description
`/tpa` `/tphere` `/tpaccept` `/tpdeny` `/back`	Full teleport request system
`/tp` `/tpall`	Direct teleportation
`/home` `/sethome` `/delhome` `/homes`	Personal home system
`/warp` `/setwarp` `/delwarp` `/warps`	Global warp system
`/jump`	Teleport to targeted block
`/near`	Find nearby players within radius

🎒 Player Utilities

Inventory & Items /invsee · /enderchest · /clearinventory · /trash · /hat /more · /repair · /skull

📦 /invsee works on offline players too — reads directly from world NBT data with full edit and save support

Health & Survival /heal · /feed · /god · /suicide · /ext

Movement & Environment /fly · /speed · /vanish · /day · /night /sun · /weather · /time · /seed

💬 Chat & Communication

Private messaging — /msg /tell /w /whisper /pm /reply
Per-role chat colors and name colors fully configurable
AI-powered anti-spam with automatic moderation actions
Chat format fully customizable per role in config.yml

⚙️ Administrative Commands

Command	Description
`/fc reload`	Hot-reload all configs without restart
`/fc status`	Server status + AI module usage stats
`/fc lockdown`	Toggle lockdown mode
`/fc auditlog`	View recent security events
`/fc ipinfo <player>`	Full IP, VPN, and UUID history
`/fc report`	View or generate AI security reports
`/fc watchlist`	Manage AI-monitored players
`/fc appeal`	Review AI-assisted ban appeals
`/owner add/remove/list`	Owner management
`/fcop add/remove`	FortressCore op management
`/restart`	Schedule or manage server restarts
`/role`	Full role management suite
`/bugreport`	Submit in-game bug reports

🔐 Permissions Overview

Tier	Access
Players	Login, register, change password, home, warp, tpa, msg, nick, bugreport, 2FA
Operators	All moderation commands, spy tools, enchant, nick others, invsee
Admins	Bans, roles, spawnvein, restart, AI watchlist, appeal review
Owners	Full access — AI modules, owner management, lockdown, all admin tools

All permission nodes are configurable per role — no hardcoded tiers.

⚙️ Technical Highlights

🧵 Fully async — zero main-thread blocking for HTTP, file I/O, and AI calls
🔄 Auto-updater — checks Modrinth on startup, downloads and applies updates on restart with full data backup
🗂️ Config hot-reload — /fc reload reloads everything live
📝 Audit log with configurable retention period
🌐 Asynchronous IP scanning — non-blocking VPN/proxy detection
🎨 Full Adventure API — MiniMessage + legacy & color code support
📦 Zero external plugin dependencies — everything built in

📋 Requirements

Paper / Folia 1.21.x — 26.2+
Java 21+
Gemini API key (optional — AI features only)
proxycheck.io API key (optional — VPN detection only)

Built with ❤️ for the Minecraft community Author: _v.o.i.d.x | Version: 1.0.4 latest | MC: 1.21.x — 26.2+ 📦 Modrinth