Minecraft anticheat guide
Anticheat Go-Live Checklist Before a Minecraft Launch
A go/no-go checklist for a Minecraft anticheat before launch: dependencies, staff alerts, reload behavior, punishment settings, backups, and rollback.
What should a server check before opening to players?
Run a go/no-go check before the public opening. Confirm the anticheat starts cleanly with its required dependency, staff receive alerts, punishment settings match the written plan, and you have a rollback step. Any open item is a launch blocker until a named person signs it off.
Go/no-go table
Each row has a pass condition. If a row fails, fix it or record a decision to launch with it open. Do not leave it unrecorded.
| Area | Pass condition | Reference |
|---|---|---|
| Dependencies | PacketEvents loaded before FairPlay, with no startup errors | FairPlay installation docs |
| Versions | Server software, Java, and plugin versions match the staging run | Your staging notes |
| Staff alerts | Each reviewer has fairplay.notify and received a test alert | No-combat-alerts troubleshooting guide |
| Reload | Config change applied, restart-only settings listed | Configuration changes troubleshooting guide |
| Automatic kick and ban | Matches your written decision; defaults are disabled | Mitigation configuration docs |
| Player logs | Read access limited to named staff | Main configuration docs |
| Webhooks | If used, one test message delivered and seen by staff | Webhook troubleshooting guide |
| Rollback | Backup of config folder and previous plugin JAR stored | Your backup folder |
How do you run the checklist on launch day?
Run the steps in order on the production copy, with one person driving and one person checking each row. Keep the sign-off record with the server versions and the time you ran it.
Plan for the check to take longer than you expect. The slow part is usually the test alert, because it depends on a cooperating tester being online and on the alert cooldown. Schedule the launch check well before the opening time, not in the last few minutes.
mkdir -p backups/pre-launch-YYYY-MM-DD
cp -r plugins/<fairplay-folder> backups/pre-launch-YYYY-MM-DD/What is the rollback plan?
Write the rollback before you need it. If a launch blocker appears after opening, keep the server private, restore the backed-up configuration, and restart. Only swap in the previous plugin JAR if your staging run tested that combination.
Which rollback steps need a second person?
A rollback during a live problem is when mistakes happen. Decide before launch which steps need a second person to confirm. Restoring a backup and changing the public status of the server are good candidates, because a wrong restore can erase the very settings you are trying to recover. Say who makes the call so nobody has to guess at two in the morning.
How do you record the sign-off?
A sign-off record is what lets the next admin understand a launch decision. Keep it with the backup folder, not in a chat message that will scroll away. A useful record names each person who checked a row, the server and plugin versions in use, and the time the check ran. It also lists any row that was left open on purpose, with the reason and the owner who accepted it.
If a row was skipped, do not mark it passed. Write skipped, the reason, and the date someone plans to revisit it. A short record that is honest about gaps is more useful than a full record that hides them.
What have we not verified?
This checklist does not measure performance under your player count, and it does not claim any detection result. Load and detection behavior need their own staging evidence, collected on your server.
FAQ
Can we launch with alerts only and no punishments?
Yes, if automatic kick and ban are disabled in mitigations.yml and a named person reviews alerts. Write the decision into the sign-off record so staff know it is intentional.
Is a reload enough after changing config before launch?
Only for settings that reload. Check the setting's guide, and restart if the setting requires it. Confirm the change in the startup output or a controlled test.
Who should sign off the checklist?
This guide does not name a required approver. Use one server owner and one staff reviewer, so the person who changed settings is not the only one who checked them.
What if no test alert appears on launch day?
Check the reviewer's fairplay.notify permission, the alert toggle, the alertsTarget filter, and the alert cooldown, in that order. Repeat the test only after the cooldown has passed.