🏰 FortressCore

The Ultimate Security & Administration Suite for Minecraft Servers

FortressCore is a battle-tested, all-in-one server protection plugin built for server owners who take security seriously. From AI-powered threat detection to per-role permissions — everything you need to run a safe, well-managed server is in one place.

⚡ Offline-mode friendly · 🤖 Gemini AI powered · 🔒 BCrypt encrypted · 📋 Fully configurable

---

🤖 AI-Powered Security

Gemini 3.5 Flash Integration

FortressCore's AI engine runs 7 independent security modules — all async, all rate-limited, all falling back to rule-based logic if the API is unavailable. Set your API key and let it run.

Module	What it does
🔍 Join Threat Analysis	Profiles every connecting player and auto-kicks or bans critical threats
🔑 Login Anomaly Detection	Flags account takeover attempts via IP region and time fingerprinting
💬 Chat Moderation	Scans every message for toxicity, ads, scams and auto-executes actions
⌨️ Command Abuse Detection	Catches exploit probing and permission escalation in real time
👁️ Watchlist Automation	Monitors flagged players and delivers an AI verdict after a watch period
📜 Ban Appeal Review	Reads player appeals and recommends deny / reduce / pardon to owners
📊 Security Reports	Scheduled threat summaries with trend analysis broadcast to online owners

• All Gemini prompt templates are editable in config.yml
• Daily quota tracking — automatically pauses AI at Google's free-tier limit and resumes at UTC midnight
• Circuit breaker — stops retrying on quota exhaustion instead of spamming your logs
• Full rule-based fallback when AI is unavailable or disabled

---

🔒 Security Features

🪪 Login & Account Protection

• Mandatory login / registration system with BCrypt password hashing
• Anti-impersonation — username-based password locking so no one can join as someone else on offline-mode servers
• Configurable session durations — set once per day, per hour, or never expire
• Two-Factor Authentication (2FA) with time-based codes
• Login attempt limits with automatic temporary IP bans
• everytime_login toggle — choose whether players re-authenticate on every join

🛡️ Anti-Hack & Anti-Bot

• Lockdown Mode — auto-activates on join spikes, manually togglable
• VPN / Proxy detection via proxycheck.io with configurable actions
• IP whitelist & blacklist management
• Username blacklist with regex pattern matching
• Anti-spam chat protection with auto-mute
• Anti-flood and fast-reconnect detection with auto-ban

🔑 Access Control

• Multi-owner system — separate from vanilla op, immune to all security checks
• FortressCore op management — your own op tier independent of Minecraft
• IP history tracking per player with full audit trail

---

👑 Role System (New in 1.0.4)

A fully featured permission and display tier system built into the plugin — no external permissions plugin required.

• 4 built-in roles — OWNER · ADMIN · MODERATOR · MEMBER
• Create unlimited custom roles (VIP, Builder, Trusted...) in config.yml
• Per-role chat color, name color, prefix, suffix, and priority
• Roles control tab list order and scoreboard display automatically
• Full wildcard permission support — give * or fortresscore.* to a role
• /role give/take/info/list/create/delete/edit/addperm/delperm
• Changes saved to player_roles.yml — hot-reloadable with /fc reload

---

🛠️ Moderation Tools

⚖️ Bans & Punishments

• Permanent and temporary bans for players and IPs
• Ban list with paginated viewing
• AI-assisted appeal review — staff gets a sincerity score and recommendation
• /ban /ipban /unban /unipban /banlist

👥 Player Management

• /kick /kickall /mute /unmute /freeze
• /burn /smite /strike — fire and lightning punishment tools
• /kill /killall — entity and mob cleanup
• Command Spy — monitor all player commands in real time
• Social Spy — monitor private messages
• Staff Chat — isolated channel for staff communication

---

🔁 Daily Restart System (New in 1.0.4)

Schedule automatic server restarts without any external scripts.

• Set multiple restart times per day in HH:mm format (e.g. 04:00, 12:00)
• Full timezone support — use any Java ZoneId (e.g. Asia/Kolkata, UTC)
• Countdown warnings at configurable intervals — 5min, 2min, 1min, 30s, 10s...
• Action bar timer shown to all players during final countdown
• Title animation in the last 10 seconds
• Postpone mode — skip restart if players are online, retry automatically
• /restart now /restart in 5m /restart cancel /restart status
• All plugin data is saved to disk before every restart — zero data loss

---

🐛 Bug Report System (New in 1.0.4)

Any logged-in player can report plugin bugs directly from in-game.

• /bugreport <description> — sends a rich Discord webhook embed instantly
• Reports include: player name, server version, plugin version, online count, timestamp
• Confirmation step prevents accidental or spam submissions
• 5-minute cooldown per player between reports
• Report ID counter persists across restarts
• Staff can view recent reports in-game with /bugreport list
• IP addresses are masked in the embed for player privacy

---

⚔️ Admin Utilities (New in 1.0.4)

🔎 SpawnVein — X-Ray Detection

Catch cheaters without third-party anti-cheat plugins.

• /spawnvein <player> <ore> <amount> — secretly places a hidden ore vein near a player at a depth and location invisible from the surface
• Supports all ores: diamond · gold · iron · coal · emerald · lapis · redstone · copper · netherite · quartz and more
• Automatic alert to all online admins if the player mines straight to the vein — strongly indicates X-Ray
• /spawnvein cancel <player> restores all original blocks
• Sessions auto-expire after 10 minutes with full block restoration

✨ /enchant — Bypass Level Limits

• /enchant <enchantment> <level> [player] — apply any enchantment up to level 255 on any item
• Supports 50+ aliases — sharp, eff, silk, fort, mending...
• /enchant remove <enchantment> — strip a specific enchantment
• /enchant list — paginated list of all available enchantments

💬 /nick — Nickname System

• /nick <nickname> — set your own display name
• /nick <player> <nickname> — set another player's nick (admin)
• /nick off — remove nickname, revert to real username
• Nicknames show in chat, tab list, and scoreboard with role prefix preserved
• Color codes supported for players with fortresscore.nick.color permission
• Duplicate and username-conflict checks built in

---

🌐 Teleportation & Movement

Command	Description
/tpa /tphere /tpaccept /tpdeny /back	Full teleport request system
/tp /tpall	Direct teleportation
/home /sethome /delhome /homes	Personal home system
/warp /setwarp /delwarp /warps	Global warp system
/jump	Teleport to targeted block
/near	Find nearby players within radius

---

🎒 Player Utilities

Inventory & Items /invsee · /enderchest · /clearinventory · /trash · /hat /more · /repair · /skull

📦 /invsee works on offline players too — reads directly from world NBT data with full edit and save support

Health & Survival /heal · /feed · /god · /suicide · /ext

Movement & Environment /fly · /speed · /vanish · /day · /night /sun · /weather · /time · /seed

---

💬 Chat & Communication

• Private messaging — /msg /tell /w /whisper /pm /reply
• Per-role chat colors and name colors fully configurable
• AI-powered anti-spam with automatic moderation actions
• Chat format fully customizable per role in config.yml

---

⚙️ Administrative Commands

Command	Description
/fc reload	Hot-reload all configs without restart
/fc status	Server status + AI module usage stats
/fc lockdown	Toggle lockdown mode
/fc auditlog	View recent security events
/fc ipinfo <player>	Full IP, VPN, and UUID history
/fc report	View or generate AI security reports
/fc watchlist	Manage AI-monitored players
/fc appeal	Review AI-assisted ban appeals
/owner add/remove/list	Owner management
/fcop add/remove	FortressCore op management
/restart	Schedule or manage server restarts
/role	Full role management suite
/bugreport	Submit in-game bug reports

---

🔐 Permissions Overview

Tier	Access
Players	Login, register, change password, home, warp, tpa, msg, nick, bugreport, 2FA
Operators	All moderation commands, spy tools, enchant, nick others, invsee
Admins	Bans, roles, spawnvein, restart, AI watchlist, appeal review
Owners	Full access — AI modules, owner management, lockdown, all admin tools

All permission nodes are configurable per role — no hardcoded tiers.

---

⚙️ Technical Highlights

• 🧵 Fully async — zero main-thread blocking for HTTP, file I/O, and AI calls
• 🔄 Auto-updater — checks Modrinth on startup, downloads and applies updates on restart with full data backup
• 🗂️ Config hot-reload — /fc reload reloads everything live
• 📝 Audit log with configurable retention period
• 🌐 Asynchronous IP scanning — non-blocking VPN/proxy detection
• 🎨 Full Adventure API — MiniMessage + legacy & color code support
• 📦 Zero external plugin dependencies — everything built in

---

📋 Requirements

• Paper / Folia 1.21.x — 26.2+
• Java 21+
• Gemini API key (optional — AI features only)
• proxycheck.io API key (optional — VPN detection only)

---

Built with ❤️ for the Minecraft community Author: _v.o.i.d.x | Version: 1.0.4 latest | MC: 1.21.x — 26.2+ 📦 Modrinth