Remote Server Management

Remote Server Management for Minecraft
Remote Server Management is a lightweight and secure HTTP based remote management plugin for Spigot / Paper servers.
It allows server owners, developers, and automation systems to control and monitor a Minecraft server
from outside the game using simple HTTP requests.
Designed for dashboards, bots, scripts, and automation tools, Remote Server Management exposes a clean API while
keeping safety and performance in mind.
━━━━━━━━━━━━━━━━━━
✨ Features
━━━━━━━━━━━━━━━━━━
✔ Built in HTTP server (no external dependencies)
✔ Secure API key authentication
✔ Query server status and player list
✔ Execute console commands remotely
✔ Broadcast messages from external services
✔ Kick players with a reason
✔ Give items to players
✔ Manage whitelist remotely
✔ Configurable command safety protection
✔ Lightweight & minimal performance impact
━━━━━━━━━━━━━━━━━━
Security
━━━━━━━━━━━━━━━━━━
• API key required for every request
• Configurable bind address (e.g. 127.0.0.1)
• Dangerous commands are blocked by default (stop, restart, rl)
• Optional override via config (not recommended)
⚠ WARNING:
Do NOT expose this plugin directly to the public internet without proper firewall rules.
━━━━━━━━━━━━━━━━━━
API Endpoints
━━━━━━━━━━━━━━━━━━
/status - Server status & player count
/info - Plugin & API info
/players - Online player list
/broadcast - Send a chat broadcast
/command - Execute console commands
/kick - Kick a player
/give - Give items
/whitelist - Manage whitelist

All endpoints require:
?key=YOUR_API_KEY
━━━━━━━━━━━━━━━━━━
Installation
━━━━━━━━━━━━━━━━━━
1. Download RemoteServerManagement.jar
2. Place it in your /plugins folder
3. Start the server once to generate config.yml
4. Configure the API key and settings
5. Restart the server
━━━━━━━━━━━━━━━━━━
⚙ Example config.yml
━━━━━━━━━━━━━━━━━━
# Remote Server Management config

api:
key: "CHANGE_ME" # Do not share this key with anyone. Sharing this allows them to access your API.
port: 8080 # The port the API is being run on. Change if needed already taken. NOTE: This port MUST be open on your VPS otherwise it cannot be contacted.

security:
allow-blocked-commands: false # Allows blocked commands such as reload, restart and rl
bind-address: "0.0.0.0"

━━━━━━━━━━━━━━━━━━
Example Requests
━━━━━━━━━━━━━━━━━━
Status:
http://127.0.0.1:8765/status?key=YOUR_KEY
Broadcast:
http://127.0.0.1:8765/broadcast?key=YOUR_KEY&msg=Hello World
Command:
http://127.0.0.1:8765/command?key=YOUR_KEY&cmd=time set day
━━━━━━━━━━━━━━━━━━
Use Cases
━━━━━━━━━━━━━━━━━━
• Web dashboards
• Discord bots
• Automation scripts
• External admin panels
• Monitoring tools
━━━━━━━━━━━━━━━━━━
Compatibility
━━━━━━━━━━━━━━━━━━
✔ Spigot
✔ Paper

made by @Metolix (on Discord)