🏰 FortressCore

The Ultimate Security & Administration Suite for Minecraft Servers

FortressCore is a battle-tested, all-in-one server protection plugin
built for server owners who take security seriously. From AI-powered
threat detection to per-role permissions — everything you need to run
a safe, well-managed server is in one place.

⚡ Offline-mode friendly · 🤖 Gemini AI powered · 🔒 BCrypt encrypted · 📋 Fully configurable

---

🤖 AI-Powered Security

Gemini 3.5 Flash Integration

FortressCore's AI engine runs 7 independent security modules — all
async, all rate-limited, all falling back to rule-based logic if the
API is unavailable. Set your API key and let it run.

| Module | What it does |
|---|---|
| 🔍 Join Threat Analysis | Profiles every connecting player and auto-kicks or bans critical threats |
| 🔑 Login Anomaly Detection | Flags account takeover attempts via IP region and time fingerprinting |
| 💬 Chat Moderation | Scans every message for toxicity, ads, scams and auto-executes actions |
| ⌨️ Command Abuse Detection | Catches exploit probing and permission escalation in real time |
| 👁️ Watchlist Automation | Monitors flagged players and delivers an AI verdict after a watch period |
| 📜 Ban Appeal Review | Reads player appeals and recommends deny / reduce / pardon to owners |
| 📊 Security Reports | Scheduled threat summaries with trend analysis broadcast to online owners |

• All Gemini prompt templates are editable in config.yml
• Daily quota tracking — automatically pauses AI at Google's free-tier limit and resumes at UTC midnight
• Circuit breaker — stops retrying on quota exhaustion instead of spamming your logs
• Full rule-based fallback when AI is unavailable or disabled

---

🔒 Security Features

🪪 Login & Account Protection

• Mandatory login / registration system with BCrypt password hashing
• Anti-impersonation — username-based password locking so no one can
  join as someone else on offline-mode servers
• Configurable session durations — set once per day, per hour, or never expire
• Two-Factor Authentication (2FA) with time-based codes
• Login attempt limits with automatic temporary IP bans
• everytime_login toggle — choose whether players re-authenticate on every join

🛡️ Anti-Hack & Anti-Bot

• Lockdown Mode — auto-activates on join spikes, manually togglable
• VPN / Proxy detection via proxycheck.io with configurable actions
• IP whitelist & blacklist management
• Username blacklist with regex pattern matching
• Anti-spam chat protection with auto-mute
• Anti-flood and fast-reconnect detection with auto-ban

🔑 Access Control

• Multi-owner system — separate from vanilla op, immune to all security checks
• FortressCore op management — your own op tier independent of Minecraft
• IP history tracking per player with full audit trail

---

👑 Role System (New in 1.0.4)

A fully featured permission and display tier system built into the plugin —
no external permissions plugin required.

• 4 built-in roles — OWNER · ADMIN · MODERATOR · MEMBER
• Create unlimited custom roles (VIP, Builder, Trusted...) in config.yml
• Per-role chat color, name color, prefix, suffix, and priority
• Roles control tab list order and scoreboard display automatically
• Full wildcard permission support — give * or fortresscore.* to a role
• /role give/take/info/list/create/delete/edit/addperm/delperm
• Changes saved to player_roles.yml — hot-reloadable with /fc reload

---

🛠️ Moderation Tools

⚖️ Bans & Punishments

• Permanent and temporary bans for players and IPs
• Ban list with paginated viewing
• AI-assisted appeal review — staff gets a sincerity score and recommendation
• /ban /ipban /unban /unipban /banlist

👥 Player Management

• /kick /kickall /mute /unmute /freeze
• /burn /smite /strike — fire and lightning punishment tools
• /kill /killall — entity and mob cleanup
• Command Spy — monitor all player commands in real time
• Social Spy — monitor private messages
• Staff Chat — isolated channel for staff communication

---

🔁 Daily Restart System (New in 1.0.4)

Schedule automatic server restarts without any external scripts.

• Set multiple restart times per day in HH:mm format (e.g. 04:00, 12:00)
• Full timezone support — use any Java ZoneId (e.g. Asia/Kolkata, UTC)
• Countdown warnings at configurable intervals — 5min, 2min, 1min, 30s, 10s...
• Action bar timer shown to all players during final countdown
• Title animation in the last 10 seconds
• Postpone mode — skip restart if players are online, retry automatically
• /restart now /restart in 5m /restart cancel /restart status
• All plugin data is saved to disk before every restart — zero data loss

---

🐛 Bug Report System (New in 1.0.4)

Any logged-in player can report plugin bugs directly from in-game.

• /bugreport <description> — sends a rich Discord webhook embed instantly
• Reports include: player name, server version, plugin version, online count, timestamp
• Confirmation step prevents accidental or spam submissions
• 5-minute cooldown per player between reports
• Report ID counter persists across restarts
• Staff can view recent reports in-game with /bugreport list
• IP addresses are masked in the embed for player privacy

---

⚔️ Admin Utilities (New in 1.0.4)

🔎 SpawnVein — X-Ray Detection

Catch cheaters without third-party anti-cheat plugins.

• /spawnvein <player> <ore> <amount> — secretly places a hidden ore vein
  near a player at a depth and location invisible from the surface
• Supports all ores: diamond · gold · iron · coal · emerald · lapis ·
  redstone · copper · netherite · quartz and more
• Automatic alert to all online admins if the player mines straight
  to the vein — strongly indicates X-Ray
• /spawnvein cancel <player> restores all original blocks
• Sessions auto-expire after 10 minutes with full block restoration

✨ /enchant — Bypass Level Limits

• /enchant <enchantment> <level> [player] — apply any enchantment
  up to level 255 on any item
• Supports 50+ aliases — sharp, eff, silk, fort, mending...
• /enchant remove <enchantment> — strip a specific enchantment
• /enchant list — paginated list of all available enchantments

💬 /nick — Nickname System

• /nick <nickname> — set your own display name
• /nick <player> <nickname> — set another player's nick (admin)
• /nick off — remove nickname, revert to real username
• Nicknames show in chat, tab list, and scoreboard with role prefix preserved
• Color codes supported for players with fortresscore.nick.color permission
• Duplicate and username-conflict checks built in

---

🌐 Teleportation & Movement

| Command | Description |
|---|---|
| /tpa /tphere /tpaccept /tpdeny | Full teleport request system |
| /tp /tpall | Direct teleportation |
| /home /sethome /delhome /homes | Personal home system |
| /warp /setwarp /delwarp /warps | Global warp system |
| /jump | Teleport to targeted block |
| /top | Teleport to highest block above you |
| /near | Find nearby players within radius |

---

🎒 Player Utilities

Inventory & Items
/invsee · /enderchest · /clearinventory · /trash · /hat
/more · /repair · /skull

📦 /invsee works on offline players too — reads directly from
world NBT data with full edit and save support

Health & Survival
/heal · /feed · /god · /suicide · /ext

Movement & Environment
/fly · /speed · /vanish · /day · /night
/sun · /weather · /time · /seed

---

💬 Chat & Communication

• Private messaging — /msg /tell /w /whisper /pm /reply
• Per-role chat colors and name colors fully configurable
• AI-powered anti-spam with automatic moderation actions
• Chat format fully customizable per role in config.yml

---

⚙️ Administrative Commands

| Command | Description |
|---|---|
| /fc reload | Hot-reload all configs without restart |
| /fc status | Server status + AI module usage stats |
| /fc lockdown | Toggle lockdown mode |
| /fc auditlog | View recent security events |
| /fc ipinfo <player> | Full IP, VPN, and UUID history |
| /fc report | View or generate AI security reports |
| /fc watchlist | Manage AI-monitored players |
| /fc appeal | Review AI-assisted ban appeals |
| /owner add/remove/list | Owner management |
| /fcop add/remove | FortressCore op management |
| /restart | Schedule or manage server restarts |
| /role | Full role management suite |
| /bugreport | Submit in-game bug reports |

---

🔐 Permissions Overview

| Tier | Access |
|---|---|
| Players | Login, register, change password, home, warp, tpa, msg, nick, bugreport, 2FA |
| Operators | All moderation commands, spy tools, enchant, nick others, invsee |
| Admins | Bans, roles, spawnvein, restart, AI watchlist, appeal review |
| Owners | Full access — AI modules, owner management, lockdown, all admin tools |

All permission nodes are configurable per role — no hardcoded tiers.

---

⚙️ Technical Highlights

• 🧵 Fully async — zero main-thread blocking for HTTP, file I/O, and AI calls
• 🔄 Auto-updater — checks Modrinth on startup, downloads and applies updates on restart with full data backup
• 🗂️ Config hot-reload — /fc reload reloads everything live
• 📝 Audit log with configurable retention period
• 🌐 Asynchronous IP scanning — non-blocking VPN/proxy detection
• 🎨 Full Adventure API — MiniMessage + legacy & color code support
• 📦 Zero external plugin dependencies — everything built in

---

📋 Requirements

• Paper / Folia 1.21.x — 26.2+
• Java 21+
• Gemini API key (optional — AI features only)
• proxycheck.io API key (optional — VPN detection only)

---

Built with ❤️ for the Minecraft community
Author: _v.o.i.d.x | Version: 1.0.4 latest | MC: 1.21.x — 26.2+
📦 Modrinth