StaffLens — Staff Audit, Logging & Anti-Abuse

StaffLens is a lightweight yet powerful staff audit and anti-abuse plugin for Paper, Spigot and Folia servers, supporting Minecraft 1.21 – 26.1.

It logs every staff moderation and administration action, stores them in SQLite or MySQL, and gives admins instant access in-game. Beyond passive staff command logging, StaffLens actively detects suspicious behaviour and protects the audit log from tampering — so you always know exactly what your staff is doing.

Catch staff abuse, keep a verifiable audit trail, and review moderation history in seconds.

✨ Key Features

• 📝 Staff action logging to SQLite or MySQL
• 🧭 Full context for every action: world, coordinates, executor IP, and server name (great for networks/proxies)
• 🔎 Anomaly detection — flags staff abuse: self-granting OP/permissions/items, mass punishments, repeated inventory checks, creative→give
• 🔐 Tamper-evident log — SHA-256 hash chain + /sl verify detects entries edited or deleted directly in the database
• 📣 Discord webhook alerts for critical actions and anomalies
• 🔧 Powerful filters — action:, time:, target:, staff:, flagged
• 📊 Per-staff statistics with /sl stats
• ⌨️ Tab completion for commands, players and filters
• 🧩 Custom command tracking — map any plugin's commands to actions via config, no code needed
• 📤 Export history to a text file
• 🔔 In-game notifications for critical actions
• ♻️ Reload configuration without restarting

---

🔌 Integrations

Works out of the box with the most popular moderation and admin plugins:

• Vanilla (command parser + custom mapping)
• LiteBans
• BanManager
• AdvancedBan
• EssentialsX
• CMI
• LuckPerms (accurate executor attribution)
• LibsDisguises (disguise / undisguise)
• SuperVanish / PremiumVanish (vanish)

Every integration can be toggled in the config.

---

🧾 Logged Actions

ban, unban, mute, unmute, kick, warn, grant/remove OP, permission & group changes, teleports, fly, god, vanish, disguise, socialspy, inventory & ender chest inspection, item giving, inventory clearing, heal, feed, repair, jail, unjail, nick, sudo, broadcast, lookup commands (seen, history), gamemode changes, and more — see ActionType for the full list.

---

⚙️ Requirements

• Java 21
• Paper / Spigot / Folia 1.21.x – 26.1

---

📥 Installation

1. Download the latest StaffLens JAR from Modrinth.
2. Drop it into your plugins folder.
3. Start the server.
4. Edit plugins/StaffLens/config.yml.
5. Run /sl reload if needed.

---

🗄️ Database

Supports SQLite (default, zero setup) and MySQL. Tables, indexes and column migrations are created automatically — upgrading from older versions is safe.

For MySQL, set database.type: mysql and the database.mysql.* values in config.yml.

---

💻 Commands

Main command: /stafflens (alias /sl)

| Command | Description |
|---|---|
| /sl log <player> [page] [filters] | actions performed by a staff member |
| /sl who <player> [page] [filters] | actions performed against a target |
| /sl search <text> [filters] | search the log |
| /sl today [filters] | actions performed today |
| /sl stats <player> [time:..] | summary of a staff member's actions |
| /sl export <player> | export history to a file |
| /sl verify | check log integrity (hash chain) |
| /sl reload | reload configuration and integrations |

Filters (combine freely): action:BAN, time:7d, target:Steve, staff:Alex, flagged
Example: /sl log Alex action:op_give time:30d

---

🔑 Permissions

| Permission | Description |
|---|---|
| stafflens.use | view logs and statistics |
| stafflens.export | export logs |
| stafflens.admin | /sl reload and /sl verify |
| stafflens.notify | notifications for critical actions |
| stafflens.alerts | alerts for detected anomalies |

All permissions default to OP.

---

🛡️ Anomaly Detection & Log Integrity

StaffLens turns raw logs into active oversight:

• Suspicious actions are flagged, broadcast to staff with stafflens.alerts, logged, and optionally sent to Discord.
• Every entry is chained with a SHA-256 hash. /sl verify re-walks the chain and reports the exact entry if someone tampered with the database — perfect for trustworthy audits.

---

🌍 Localization

Locale files in the locale folder: en.yml, ru.yml, ua.yml. Choose the language with the locale option.

---

📊 Metrics

StaffLens uses bStats for anonymous usage statistics. Opt out with metrics: false in config.yml or globally in plugins/bStats/config.yml.

---

Tags: staff logger, staff audit, anti-abuse, moderation logs, command logger, admin monitor, staff activity, audit trail, Paper, Folia