Sandboxed - Dev Servers [1.21+]

Sandboxed | Dev Servers

Sandboxed is a modern plugin designed for plugin developers and testers. It offers safe, temporary testing worlds per player, full OP access with restrictions, automatic cleanup, session limits, Discord integration, and extensive configuration—all in a lightweight, production-safe format.

This plugin is perfect for developers who want to expose their plugins to potential buyers or testers without the risk of leaking their code or configurations.



▶︎ Features

• Automatically generate a world per player upon joining.
• Timed sessions that auto-expire after a set duration.
• Worlds are fully deleted when players leave or the server restarts.
• OP access for full plugin testing freedom (with restrictions).
• Admins are recognized and redirected to the default world without limits.
• Configurable visuals:
  • Tablist header/footer with placeholders and live countdown.
  • Scoreboard with session details.
  • BossBar countdown with customizable colors and text.
• Discord webhook support with rich embeds, avatars, and dynamic content.
• Safe and secured against malicious players and bots:
  • Log player UUIDs, IPs, and session details to file.
  • Block specific commands using wildcards or regex patterns.
  • Rate-limit joins per IP to prevent mass joins.
  • Customizable verification modes:
    • none: No verification.
    • gravity: Teleport up and check for a controlled fall.
    • pin: Generate a 4-digit PIN and block until it's entered.
    • gui: Open an inventory GUI with a clickable checkmark.
• Fully translated messages and UI, using YAML-based localization files per language.
  • English
  • Spanish
  • French
  • German
  • Brazilian Portuguese
  • Simplified Chinese
  • Japanese
  • Korean
  • Russian
  • Turkish

▶︎️ Installation

1. Drop the plugin JAR into the `/plugins` directory.
2. Start the server once to generate the configuration files.
3. Edit the generated `config.yml` to your needs.
4. Restart the server to apply all settings.
5. Optionally, customize translations in `/Translations/en_us.yml` and other languages.

▶︎ Configuration
The config.yml file allows you to control almost every aspect of the plugin:

General Settings

• duration-seconds: Number of seconds a test session lasts (default: 900).
• template-world: The world folder to duplicate for each test session.
• rejoin-delay-seconds: Prevents re-entry within N seconds after disconnecting.

Visual Customization

• tablist-header: MiniMessage-supported header text for the player list tab.
• tablist-footer: MiniMessage-supported footer text, can include %player%, %world%, %timer%.
• scoreboard-title, scoreboard-user, scoreboard-world, scoreboard-timer: Customize scoreboard labels.
• bossbar-prefix: Text prefix shown in the bossbar countdown.
• bossbar-color: Color of the session countdown bar (e.g., BLUE, RED).
• admin-bossbar-color: Separate color for admins.
• enable-scoreboard: Enable or disable scoreboard display (true/false).
• enable-bossbar: Enable or disable bossbar display (true/false).
• enable-tablist: Enable or disable tablist display (true/false).

Admin Controls

• admins: List of usernames that are considered admins.
• admins-bypass-blocked-commands: Allows admins to skip command blocking (true/false).
• Admins use infinite sessions and see a separate bossbar.

Discord Webhook Integration

• discord-webhook-url: URL of your Discord webhook.
• discord-webhook-username: Display name for the webhook sender.
• discord-webhook-avatar: Avatar URL to use for webhook messages.
• discord-notify: Toggle webhook usage for join/leave events (true/false).

Command Blocking

• blocked-commands: List of commands to prevent. Supports wildcards (`*`) and regex.

▶︎ Anti-Bot Verification

To protect your server from bot accounts and script-based joins, Sandboxed includes a built-in anti-bot verification system. You can choose one of four modes in your config.yml under antibot.verification-mode:

• none: No verification—player is sent straight to their sandboxed world.
• gravity: Teleports player up 10 blocks in the “sandbox_limbo” world and watches for a controlled fall. They must land on the barrier floor or drop below a certain Y.
• pin: Teleports to limbo, generates a 4-digit PIN, sends it in chat & action-bar, and blocks commands/movement/inventory until they type it correctly.
• gui: Teleports to limbo, opens a small inventory GUI with a single clickable checkmark in a random slot, blocking all input until they click it.

▶︎ Commands and Permissions

• /sb reload – Reloads configuration and translation files.
• /sb testdiscord – Sends a sample embed to the configured webhook.
• /sb config admin add/remove <user> – Manage admin whitelist.
• /sb config cmdblock add/remove <command> – Manage command block list.
• /sb config timer set <seconds> – Adjust default test session time for test players.

The plugin relies on server OP status and listed admins: in the config but the basic permission is` sandboxed.command
No permissions plugin is required but is recommended to block dangerous commands for non-admins.

▶︎ Discord Example
When a player joins:

• Webhook title and description are dynamically built.
• Includes IP, join date, and admin status.
• Custom username and avatar are shown.