Mod Net

Mod Net

A Bukkit/Spigot/Paper/Purpur plugin that detects client-side mods via plugin-channel and brand fingerprinting, and lets server owners whitelist or blacklist them. Ships with a pre-loaded, best-effort blacklist of known cheat/hack clients and is fully configurable.

What it does

• Detects mods by listening for the plugin channels a client registers and the brand string it reports — the only signals the Minecraft protocol actually exposes to a server, so this works without any NMS/version-specific code.
• Whitelist, blacklist, or log-only modes, with per-category enforcement overrides (cheat/ xray/utility/library/...) and a configurable action per match: log, alert staff, kick, or ban.
• Ships with a bundled signature database of known cheat/hack clients and common utility mods (minimaps, waypoints, etc.). Cheat-client entries are marked low-confidence and capped at ALERT — never auto-kick/ban — unless explicitly promoted, since sophisticated clients routinely spoof or strip the signals this relies on.
• Modrinth and CurseForge integration — add a mod to the blacklist/whitelist by pasting a project URL, slug, or id (/modnet blacklist add modrinth:sodium); Mod Net resolves it to a probable channel signature automatically. CurseForge entries need an API key (config).
• Optional integrations, all soft-dependencies that cost nothing when absent: ProtocolLib (packet-level channel visibility), Geyser/Floodgate (exempts Bedrock players from evaluation), PlaceholderAPI, Discord webhook alerts, a GitHub update checker.
• Flat-file detection history (/modnet history <player>) and live inspection (/modnet check <player> shows a connected player's brand + registered channels).
• Works with any permissions plugin (LuckPerms, etc.) — uses standard Bukkit permission nodes, no custom permission system of its own.

Commands & permissions

/modnet reload|check <player>|list|history <player>|resolve <ref>|blacklist add/remove <ref>|whitelist add/remove <ref>|info

• modnet.admin — use the command (default: op)
• modnet.bypass — exempt from enforcement, still logged (default: false)
• modnet.alerts — receive staff chat alerts (default: op)