OPProtection – Ultimate Security for Your Minecraft Server

(A Minecraft Security Plugin)

The first and most important line of defense for your server.
OPProtection is a powerful Minecraft security plugin designed to protect servers from unauthorized operator access, malicious commands, and identity spoofing.
Many servers get compromised when attackers gain OP permissions, spoof UUID/IP, or abuse dangerous commands.
OPProtection prevents this by adding multiple layers of verification and automated protection systems.
Whether you run a small survival server or a large network, OPProtection ensures that only trusted administrators can access operator privileges.


Plugin Preview

Command Protection Example



This screenshot shows how OPProtection blocks dangerous commands from unauthorized users.

Players attempting to execute protected commands will be instantly denied, preventing attackers from abusing administrative commands.

OP Verification System



When a player receives OP permissions, they cannot immediately use them.
They must first verify their identity using the OP password or Discord 2FA system.
This prevents attackers from instantly gaining full control of the server.

Main Features

Multi-Layer OP Verification

OPProtection prevents instant OP abuse by requiring verification before OP powers can be used.

Two verification methods are available:
• Password verification
• Discord 2FA verification
This ensures that even if someone gets OP access, they still cannot use it without verification.

GeoIP Protection (Anti-VPN / Country Block)

Block connections from unauthorized countries automatically.

This helps protect your server from:

• VPN attacks

• Bot connections

• Foreign login attempts

• Suspicious access attempts

Emergency Lockdown Mode

In case of a security breach, administrators can activate Emergency Mode.

Emergency Mode will:

• Instantly lock down the server

• Kick unauthorized players

• Prevent command abuse

• Stop further damage

Discord Integration

OPProtection can integrate with Discord bots to provide real-time security features.

Features include:

• 2FA verification codes sent via Discord

• Security alerts for suspicious activity

• Easy verification workflow for admins

Dangerous Command Protection

OPProtection blocks unauthorized execution of sensitive commands, including:

• /op

• /plugins

• /stop

• /reload

• /version

This prevents attackers from discovering server information or gaining control.

Tab-Complete Command Hiding

Prevent players from discovering sensitive commands through tab completion.

Blocked commands will not appear in tab suggestions, hiding your server security setup.

️ Anti-IP & UUID Spoof Detection

Detect players attempting to spoof their identity.

OPProtection can identify suspicious login attempts and prevent attackers from impersonating trusted players.

Folia & PaperMC Compatible

The plugin is fully optimized and compatible with modern Minecraft server software:

• PaperMC

• Folia

This ensures high performance and stability even on large servers.

Automatic Safety Actions

To prevent OP abuse, OPProtection can automatically:

• Remove OP permissions when players log out

• Reset elevated permissions

• Re-require verification on next login

Configuration Example


ip-forwarding: false

op-verification-reset-time: 20

op-whitelist:

- YourName

op-password: pass_vao_day

pass-timeout: 50

tab-complete-block:

enabled: true

debug: false

blocked-commands:

- "ver"

- "version"

- "about"

- "bukkit:ver"

- "bukkit:version"

- "bukkit:about"

- "minecraft:ver"

- "minecraft:version"

- "minecraft:about"

- "icanhasbukkit"

Commands & Permissions

Command Description Permission
/oppass <password> Verify your OP status Player
/oppass confirm <player> Confirm OP verification Console
/oppass resetip <player> Reset stored IP Console
/opreload Reload plugin configuration Console

How It Works

Password Verification

1. Admin gives a player OP.
2. Player must enter the password:

/oppass <password>

1. Console/admin confirms:

/oppass confirm <player>

Only after confirmation will OP permissions become usable.

Discord 2FA Verification

When 2FA is enabled in the config:

1. Player receives a temporary code via Discord Bot
2. Player enters the code:

/oppass <2fa_code>

1. OP permissions are activated after verification.

Dependencies

ProtocolLib

Support

Discord: habitat_
GitHub: Open-Source Repository
Report bugs or request features via Discord or GitHub Issues.