CommandAuditUltra

CommandAuditUltra — Advanced Command & Permission Auditing
CommandAuditUltra is a professional-grade server auditing plugin designed for Minecraft administrators who want full visibility into commands, permissions, and access risks.

Whether you inherited a server, installed many plugins at once, or are preparing integrations like CraftingStore, Tebex, or Buycraft, this plugin helps you understand exactly what exists on your server — without guessing.

It scans your live server environment and generates clean, structured reports that show:
• What commands exist
• Which permissions are registered
• Which plugin each one belongs to
• How access is granted (including LuckPerms inheritance and wildcards)

✔ Designed for Paper / Spigot servers
✔ Zero configuration required to get started
✔ Safe, read-only auditing (no changes are ever made)

This is my first public Minecraft plugin and my first time building something like this. It was created from a real need, and feedback is always welcome.

❓ Why This Plugin Exists
This plugin is built for server owners who:

• Took over or inherited a server
• Installed many plugins at once without reviewing everything
• Migrated servers or imported old configs
• Followed setup guides but didn’t know what access was added
• Want to audit permissions before opening the server
• Need to integrate CraftingStore / Tebex / Buycraft correctly
• Are tired of guessing commands and permissions

If you’ve ever thought “I don’t even know what’s truly on my server” — this plugin is for you.

Core Features
Command Auditing
• Full runtime command registry scan
• Detects real commands, aliases, and namespaces
• Per-plugin command breakdowns

Permission Auditing
• Complete permission registry scan
• Automatic severity classification
• Detects dangerous permissions (wildcards, admin nodes)
• Per-plugin permission breakdowns

Server & Datapack Inspection
• Datapack function scanning
• commands.yml inspection
• permissions.yml inspection

Reports & History
• Human-readable TXT reports
• Optional CSV exports (Excel / Google Sheets)
• Timestamped report history
• Automatic diff system between runs (added / removed / changed)

️ LuckPerms Integration
• Group audits
• Low-rank risk detection
• Permission cleanup recommendations
• Player-effective permission tracing with explanations

Perfect for CraftingStore, Tebex & Automation
One of the hardest parts of setting up stores and automation is finding the correct commands.

CommandAuditUltra helps you:
• Identify the true command name
• See all aliases and namespaces
• Confirm which plugin owns the command
• Verify required permissions
• Avoid broken store commands

This is especially useful for:
• CraftingStore
• Tebex / Buycraft
• XP shops
• Coin / token systems
• Console-based rewards

No more trial-and-error — just verified data from your live server.

⚠️ Permission Severity System
Permissions are automatically classified into risk levels:

CRITICAL
HIGH
MEDIUM
LOW
⚪ INFO

Severity rules are fully configurable using regex patterns inside config.yml.

LuckPerms Integration
If LuckPerms is installed, CommandAuditUltra can:

• Audit all loaded groups
• Detect high-risk permissions on low ranks
• Recommend permission cleanup
• Explain exactly WHY a player has (or doesn’t have) a permission

Includes wildcard detection and inheritance breakdowns.

Output & Reports
All reports are written locally to:

plugins/CommandAuditUltra/reports/

Generated files include:
• TXT audit reports
• Optional CSV exports
• Per-plugin split files
• Automatic diff reports

No data is sent externally.

⌨️ Commands
/commandaudit run
Generate a full audit report

/commandaudit diff
Generate a report showing differences from the previous run

/commandaudit lp
Run a LuckPerms audit (if installed)

/commandaudit trace <player> <permission>
Trace how a player receives a permission and explain the result

Permissions
commandauditultra.use
Default: OP

❤️ Support & Donations
This plugin was built out of a real need and is my first public Minecraft plugin.
If you find CommandAuditUltra helpful and would like to support continued development, donations are appreciated but never required.

Donations help fund:
• Future updates and new features
• Bug fixes and performance improvements
• Continued support and documentation

PayPal:
paypal.me/wpggamers

Thank you to everyone who supports the project in any way — even feedback and suggestions help a lot.

Notes
✔ Safe for production servers
✔ Read-only tool (no modifications made)
✔ No external connections
✔ Designed for server owners, developers, and administrators
✔ Ideal for security audits, debugging, inherited servers, and compliance checks