Minecraft anticheat guide
WorldGuard Regions and Anticheat Exemptions: Scope Rules
Scope anticheat exemptions to the WorldGuard regions that need them, audit every bypass path, and test region borders on staging before you go live.
Short answer
WorldGuard regions set flags for PvP, building, and other behavior. Whether an anticheat reads those flags depends on the anticheat and its version, so check its documentation before you assume a region switches a check off. A bypass tied to a region usually applies to everyone inside it, which can hide misuse in that area. Audit each exemption path, keep it narrow, and test the region borders on staging.
Check what the anticheat actually reads
Start by finding out whether your anticheat has any region-aware setting. Some anticheats read world names, permission nodes, or game modes. Others have no region setting at all. Look at the configuration and documentation for the version you run.
Do not infer from a flag's name. A PvP flag tells the server whether players can fight in a region. It does not tell you whether the anticheat changes its checks because of that flag. Confirm the link on your own staging server.
Find every bypass path
A bypass can come from a permission, a region, a world, or a game mode. Each one lets players skip some checks. Map them together, because a region exemption combined with a broad permission group grants more than either one alone. Permission groups often inherit from parent groups, so a group that looks narrow may carry extra permissions. Check inheritance in your permissions plugin before you count a path as closed.
| Path | Who it reaches | Audit question |
|---|---|---|
| Permission node held by a group | Everyone in that group | Which players hold it, and does each one need it? |
| Region-based exemption | Anyone inside the region | Who can enter, and do they build or fight there? |
| World-based exemption | Everyone in the world | Is the world used for anything besides the intended activity? |
| Game-mode exemption | Anyone in that mode | Can players switch modes freely, and does that matter here? |
Inventory regions on staging
Before you change anything, list each region with its owners and flags. The commands below use placeholder names. Replace them with your own region names on a staging copy.
/rg list
/rg info <region-name>
# Note each region's flags and owners.
# Compare the list with your anticheat's exemption settings.Audit and narrow the exemptions
Work through the list in order. Remove anything that no longer matches a real activity, and keep only the exemptions you can justify in writing.
Test the region borders
Players often behave differently at the edge of a region. Stand just inside and just outside each border and repeat a few actions: moving, breaking blocks, and hitting another player. Log which checks alert in each spot.
If a check goes quiet only inside the region, the exemption covers more than its name suggests. Also repeat one action that the anticheat should still catch, and confirm the log entry appears. That confirms the exemption did not switch off everything in the area.
Keep the border results in a small table with three columns: region, action, and whether the check alerted. Store it with the exemption list. When a region changes owner or flags, rerun only the border tests for that region instead of the full audit.
Set a review cadence for exemptions
Set a review date for every exemption. A quarterly pass is a reasonable default for many networks, and a network that changes its regions often may need a shorter cycle. At each pass, ask whether the activity still happens in that area, whether everyone in the group still needs the access, and whether new staff were added to the group without a review.
What we have not verified
We have not tested WorldGuard together with any anticheat. Region flags, plugin versions, and anticheat settings can interact in ways this page cannot predict. Confirm each behavior on your own staging copy before you apply it to a live network.
FAQ
Does a WorldGuard PvP flag turn off anticheat checks?
Not by itself. Whether it affects an anticheat depends on how your anticheat and server are configured. Test a PvP border on staging and read the alert log before you assume anything.
Why not exempt the whole spawn region?
Spawn areas are often busy, with trading, building, and fighting in one place. A full exemption leaves that area unchecked. Exempt only the check the activity needs.
Can we give builders a bypass permission?
You can, but limit it to the people who need it. Builders who move fast or fly in their own build world may need relaxed checks. Review that group on a schedule, because a bypass that is never removed keeps working.
What if alerts change at a region border?
Treat that as a signal to review the exemption. Inconsistent behavior at borders usually means a region-scoped setting covers more area than its name suggests.