Jarvis AntiVPN

Blocks VPNs and proxies. Not your real players.

Jarvis is a small plugin for Velocity, BungeeCord and Paper/Spigot (Folia included) that connects your server to a detection service. It blocks VPNs, anonymous proxies, datacenter IPs, Tor and known evasion networks, and it is built to leave alone the players who are simply on mobile data, behind CGNAT or on a home connection.

Free and unlimited, no card, no quota to watch. The plugin handles the connection and the local cache; the detection runs on our side, so nothing heavy happens on your proxy.

Create your account at jarvisguard.com

---

What it does

Blocks the connections you don't want. VPNs, anonymous proxies, datacenter IPs, Tor and the nodes of the evasion networks people use to come back after a ban.

Leaves your real players alone. Mobile data, CGNAT and home connections are read for what they are. If a call is close, the player gets in.

One block covers your entire network. A decision reaches every proxy you have connected in seconds, with no restart and no list to refresh.

Blocks survive a restart. If your server comes back up while our backend is unreachable, the blocks from the last sync are still applied instead of the server starting with none. Timed blocks still expire on time.

Your staff can act from in game. Whitelist or block a player without opening the panel, with an optional duration and reason.

A blocked player can appeal. The kick message carries a short link with a single use code. The appeal shows up in your panel, so a mistake takes one click to undo.

Account Shield. It flags accounts whose login does not look like the person who usually plays it (a country and a provider that account had never used) and lists them for your staff. It is a separate layer from the anti-VPN filter.

The rest lives in the panel. Country rules, block list and whitelist, Discord alerts, per server statistics, audit log, and several servers under one account.

27 languages. The panel, the messages your players see and the console output all follow the language you pick in the panel.

---

Installing

1. Create your account at jarvisguard.com.
2. Drop the jar into plugins/ and start the server once.
   • On a network, install it on the proxy (Velocity or BungeeCord), not on the backend servers. One filter covers everything behind it.
   • On a single server with nothing in front of it, use the Paper build.
3. The console prints a one time link. Open it, sign in, and the server is bound to your account. There is nothing to paste. If you would rather do it by hand: /antivpn key <license>.
4. That's it. Everything else is managed from the panel.

config.yml only holds your license key. No other setting to touch.

Commands

Command	What it does
/antivpn doctor	One screen with what is working and what is not
/antivpn stats	Backend connection and local cache
/antivpn key <license>	Links the server without a restart
/antivpn reload	Reloads the config and clears the local cache
/antivpn whitelist <player> [time] [reason]	Lets a player through
/antivpn unwhitelist <player>	Undoes it
/antivpn blacklist <player> [time] [reason]	Blocks a player
/antivpn unblacklist <player>	Undoes it

Aliases: /jarvis, /avpn. Time accepts 30m, 12h, 7d, 2w or perma; leave it out and it uses the default from your panel.

Permissions: jarvis.command (use the command), jarvis.staff (whitelist and blacklist in game), jarvis.admin (everything, includes staff and alerts), jarvis.alerts (gets the in game alert when someone is blocked), jarvis.bypass (that player is never checked).

---

Compatibility

Velocity	3.x and 4.0
BungeeCord / Waterfall	Yes
Paper / Spigot	1.18 and newer
Folia	Yes, same jar as Paper
Java	17 or newer
Floodgate	Optional. Bedrock players are recognised and the panel rules take that into account

---

If the service is unreachable

Your server keeps running. Logins go through, the blocks already in the local cache stay applied, and checking resumes on its own as soon as the service answers again. The console says it out loud while it lasts, so you know where you stand.

---

Privacy and data (network disclosure)

This plugin communicates with an external service. On each login it sends the connection data (the IP and the UUID) to the Jarvis backend, which replies with a signed verdict. That is how the anti-VPN works, so it needs an internet connection and a license key from jarvisguard.com, which is free to get. Jarvis is not an anticheat: it does not look at gameplay or game mechanics.

The connector's source is published at github.com/JarvisAntiVPN/jarvisguard. The detection service itself is ours and stays private. The jar is not obfuscated, so platform scanning is straightforward. License: All Rights Reserved.

Privacy Policy . Terms

---

FAQ

Is it going to kick my real players? Mobile data, CGNAT and home connections are read for what they are, and a doubtful case ends with the player getting in. Every kick also carries an appeal link, so anything you want to reverse is one click in the panel.

Does it work on Spigot or Paper? Yes. There is a Paper/Spigot build, and since 0.5.23 the same jar also runs on Folia. If you run a network with a proxy, install the Velocity or BungeeCord build on the proxy instead: one filter covers every server behind it.

What if your backend goes down? Does my server go down? No. Your server stays open and the blocks it already knows stay applied. Protection comes back on its own.

Bedrock and Floodgate? Supported. Bedrock players are recognised as such, and the panel rules are aware of it, so a phone connection is not treated as something suspicious by itself.

Does it cost anything? No. Free and unlimited, no card, no cap on how many logins it checks. It will be a paid product at some point, not now.

Does it slow logins down? The check happens in the async pre login, with a local cache and a time limit. If an answer does not arrive in time the player goes in.

---

Links

Panel and account: jarvisguard.com Discord: discord.gg/5RUbGymKTy