CommandGuard

A cross-platform command blocker and tab-complete manager for Paper/Spigot, Velocity, and Waterfall.

Control exactly which commands each player can execute and see in tab-complete — using a flexible permission group system with inheritance, priority, and per-server rules.

Features

• Tab-complete filtering — players only see commands they're allowed to use
• Command blocking — block commands with fully customizable actions (message, title, sound, kick, potion effect, console command)
• Whitelist mode — allow only specific commands, block everything else
• Permission groups — define groups with different command lists, assign via LuckPerms
• Group inheritance — groups can extend other groups recursively
• Group merging — groups with equal priority are merged automatically
• Per-server groups — restrict a group to specific backend servers (proxy only)
• Cross-server sync — proxy pushes its allowed commands to backend via plugin messaging so tab-complete is consistent across the network
• Spy-client protection — blocks tab-complete packet responses for hidden commands
• Multi-language — en_EN and ru_RU bundled, add your own lang file
• Configurable prefix — change the plugin prefix in the lang file, no restart needed
• /cg check <player> — inspect which group and commands a player has
• /cg updategroup <player> — push updated tab list to a player instantly

Platforms

Java 17+ required.

Network Setup

Install CommandGuard on both the proxy and each backend server, set is_network: true on both sides. The proxy will automatically push its allowed command list to the backend on every player connection — no relog needed after /cgv reload.

Documentation

Full documentation: 1wairesd.github.io/1wairesdIndustriesWiki

Source code: github.com/1wairesd/CommandGuard