Corestone

Changelog

1.0.0 (2026-10-24)

Before you update: the first start of this version downloads the text library (Adventure) from Maven Central on Paper, Purpur, Folia and Spigot, so the server needs internet access once. Without it AdminControl does not load (see the guide's troubleshooting page).

Added

  • Web panel with two-step sign-in for every account, roles with permissions and punishment limits, invites, password reset links, session management and an IP whitelist.
  • Punishments (kick, warning, mute, ban, IP ban) from the panel and in game, templates with escalation, automatic warning rules, history and lifting.
  • Live dashboard (Pulse): players online and TPS with their history, the reports that need you (claim them from there), the latest punishments and closed reports, who plays, the staff online in the panel or in game, and the worlds; players with sessions, notes, name history and other accounts from the same address.
  • Find a player from any screen (Ctrl+K or /).
  • Live chat with search, private messages, sending as the panel, chat mute, slow mode and filters.
  • Console in the browser behind a fresh 2FA code, with blocked commands.
  • Announcements in chat, action bar, title and boss bar, with a rotation, scheduling and PlaceholderAPI placeholders.
  • Player reports with in-game notices, a queue in the panel and messages to the reporter.
  • Audit log, Discord notifications, LuckPerms group sync.
  • Import from LiteBans, AdvancedBan, EssentialsX and the vanilla ban lists.
  • SQLite or MySQL/MariaDB, shared between servers.
  • English and Polish in game and in the panel.
  • License check against the seller's signed list of revoked copies, at start-up (see Privacy and license check).
  • Folia support: work on players runs on each player's own region thread; the dashboard shows the TPS of the weakest region with players.
  • Minecraft 1.20.6 support (Paper, Purpur and Folia 1.20.6 to 26.3).
  • Spigot 1.20.6 to 26.3 (tested on 1.20.6 and 26.2): the same features as on Paper, with the text library downloaded on the first start and no MSPT on the dashboard. Paper, Purpur and Folia download the same library on the first start with this version (internet access needed once), but keep using their own (see Install and first start, "On Spigot").
  • Velocity networks (Velocity 3.5 and 4.x): the same jar on the proxy checks bans when players join the network, kicks and bans from any server take the player off the network, and the punishment commands work on the proxy (see Velocity network).
  • BungeeCord networks (BungeeCord and Waterfall): the same as on Velocity, with the same proxy config.yml (see BungeeCord network). A server in BungeeCord mode without BungeeGuard logs a warning and is flagged "Unsecured forwarding" in the panel.
  • Punishments given on one server are applied on the other servers of the same MySQL database within about 2 seconds.
  • Network panel: the panel of any server on a shared MySQL database shows every server of the network, the players online on each, the reports of all servers in one list and the charts of each server; a kick from the panel reaches the player wherever they play (server-name in config.yml).
  • The console, the chat and the announcements of the whole network in one panel: the console of any server (the same 2FA unlock and blocked commands), the chat of all servers with a message to one server or to all, and announcements for the servers you choose.
  • Placeholders for other plugins (%admincontrol_muted%, %admincontrol_warnings%, %admincontrol_open_reports%, players online per server and more) with PlaceholderAPI, and each player's prefix and group from Vault or LuckPerms in the panel (see Integrations).
  • Bedrock players (Geyser and Floodgate): a badge and a filter in the panel, their skins from GeyserMC, and bans and mutes that apply to both accounts a player linked in Floodgate (see Integrations). bedrock.geysermc-skins is on by default, also after an update: the server sends Bedrock players' Xbox user ids to GeyserMC for their heads. Set it to false to send nothing.
  • EssentialsX: its punishment commands run as AdminControl's, mutes kept the same both ways, and each player's nickname, AFK and jail in the panel. DiscordSRV: notifications on its channels, the linked Discord account in the profile, and muted or banned players kept out of the chat both ways (see Integrations).
  • CoreProtect (24.1+): a player's CoreProtect entries in their profile (the whole network), rolling back and restoring their changes from the panel or with /ac rollback, bans that roll back (-r, the ban dialog, templates) and unbans that restore, within a new players.rollback permission and the role's rollback limit (see Integrations).
  • Data retention for players' addresses, game sessions and former names (Settings → Server → Data retention, 365 days by default); a closed report's chat copy goes with the chat log.
  • database.mysql.ssl-ca to check the MySQL server's certificate, and web.hsts (off by default) for panels on https.
  • Limits against abuse: sign-in attempts per address and per account, text searches in the chat log, CoreProtect lookups, /report (at most 5 open reports per player) and /ac link codes.
  • A banned player stays out when the database is slow or down: every server and proxy keeps the active bans and mutes in memory, so a login the database cannot answer within 3 seconds is checked against them (see Network panel).
  • Network panel: the Owner can forget a server that left the network, and the players of a server that went down leave the online list after 2 minutes.
  • Reports: a report closed by a higher role can be reopened only by that role or a higher one.
  • The Bedrock badge on the dashboard's Online now card; a Floodgate failure turns its integration status off.
  • MySQL: a database other plugins already use (their tables made before AdminControl's first start) is fine; AdminControl no longer stops with "non-empty schema".