Install and first start

Install

1. Stop the server.
2. Put AdminControl.jar in the plugins/ folder.
3. Start the server. On the first start with this version the server downloads the text library AdminControl lists (Adventure) from Maven Central into its libraries/ folder, so it needs internet access then; Paper, Purpur and Folia keep using their own copy, Spigot uses the downloaded one. AdminControl creates plugins/AdminControl/ with config.yml, messages_en.yml, messages_pl.yml and, with the default SQLite database, data.db.

The panel listens on port 8080 of all addresses by default (web.host, web.port in config.yml). On a hosting panel, use a port your host gives you.

Plain HTTP is not encrypted. Opened straight on its port, the panel speaks plain HTTP: anyone on the same network (public Wi-Fi, a shared host) can read your password and take over your signed-in session. Before you use the panel from outside your machine, put it behind HTTPS (Panel over HTTPS, or a tunnel such as Cloudflare Tunnel). If you cannot, at least limit it to your own addresses with the IP whitelist and never sign in over public Wi-Fi.

Create the Owner account

With no Owner account yet, the console prints a link valid for 30 minutes:

<public-url or http://host:port><base-path>setup/<token>

1. Open it in your browser.
2. Choose a user name and a password (at least 10 characters, not a common password).
3. Scan the QR code with an authenticator app (Google Authenticator, Authy, 2FAS, ...) and type its code.
4. The panel shows 10 backup codes once. Keep them somewhere safe: each one signs you in once without the app.

After a restart without an Owner, the console prints a new link; the old one stops working.

Lost access

• Lost the authenticator app, still have backup codes: sign in with a backup code, then set up the app again in Settings → My account.
• Lost both: run /ac resetowner in the server console (not in game, not from the panel console, not over RCON). It prints a new setup link. The current Owner accounts are turned off only when the new account finishes its 2FA setup.
• Locked out by the IP whitelist: run /ac whitelist off in the server console.

On Folia

Everything works as on Paper. Two things differ because Folia ticks each region of the world on its own thread:

• Dashboard TPS: the TPS tile shows the weakest region that has a player in it (with no one online: the global region), and says so under the number. MSPT shows "–": Folia does not report it per region.
• Panel console: commands run on Folia's global region. Vanilla commands that act on entities somewhere else in the world may be refused by Folia itself.

On Spigot

Everything works as on Paper, with these differences:

• First start: Spigot has no Adventure, the text library AdminControl uses, so on the first start the server downloads it from Maven Central into its libraries/ folder (the libraries list of the plugin). The server needs internet access then; without it AdminControl does not load (see Troubleshooting). Paper, Purpur and Folia download the same files but keep using their own Adventure.
• Dashboard: TPS comes from AdminControl's own tick counter (the last minute). MSPT shows "–": Spigot does not report how long a tick takes.
• Behind Velocity: Spigot has no modern forwarding. Use bungeecord: true in spigot.yml, Velocity's bungeeguard forwarding mode and BungeeGuard on the server (see Velocity network).

A libraries/ folder copied from another server is trusted as it is. Check every file in the table against these SHA-256 sums, the same files as on Maven Central, before you start the server with them:

Behind a Velocity proxy

Put the same jar on the proxy too and give everything one MySQL or MariaDB database: see Velocity network. Behind BungeeCord or Waterfall: see BungeeCord network.

Update

Stop the server, replace the jar, start the server. The database is updated on start; your settings and data stay. After an update that adds a library, the first start downloads it from Maven Central (see "Install" above). Keep a copy of plugins/AdminControl/ before big updates.